Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
File: K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft (raw, json)
Hash identifier: Fkls0kwDMF9ZkoPINO99LQqkTuSawhktkhczo4pK29Y=
Subject key identifier: 7D:0D:06:D6:4D:F8:FE:D4:70:0F:75:FE:A1:23:A5:53:2A:01:F2:05
Authority key identifier: 2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
Certificate issuer: /CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Certificate serial: 019FACE493A56A8F2D87C52369D7517C25F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
Manifest number: 016C
Signing time: Wed 29 Jul 2026 08:01:28 +0000
Manifest this update: Wed 29 Jul 2026 08:01:28 +0000
Manifest next update: Thu 30 Jul 2026 08:01:28 +0000
Files and hashes: 1: 9SPgem7U2gCiDmpSRDU-ukyx9XE.roa (hash: wROgdUdJkJ9IiAUVLRETnuoxv5G7976oJBmCHeMjAS8=)
2: K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl (hash: 8zcGwSjIDwu6hG9buG4Zt24Kfok3ELxsL8sRb+yLSnI=)
3: MKKIUDUGz4Z95WLC3D6fWiIbk4U.roa (hash: WBcMg0RsrWd3UHeoKkaLJ8RBFUBx59miWOsFBpkS46c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:93:a5:6a:8f:2d:87:c5:23:69:d7:51:7c:25:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Validity
Not Before: Jul 29 08:01:28 2026 GMT
Not After : Jul 30 08:01:28 2026 GMT
Subject: CN=7d0d06d64df8fed4700f75fea123a5532a01f205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:df:53:5f:fd:85:6c:b0:b7:03:70:8f:4f:
d0:43:75:98:62:13:7a:31:8d:e5:7c:d0:00:68:db:
d3:5b:a7:79:14:08:53:6e:12:5d:53:b3:e9:82:a9:
d0:70:23:34:e8:59:7e:96:48:fd:94:5b:42:62:16:
0d:85:46:53:d1:f1:62:a5:c0:7e:3b:37:c0:63:8f:
0b:89:9b:2b:58:9d:a0:d2:b0:75:0f:eb:29:88:d2:
4a:0a:e7:7e:3e:ce:0e:11:e3:82:6e:d0:64:20:a5:
8b:52:e3:ef:89:93:84:e5:fb:0f:bf:e1:cc:38:88:
d4:53:3e:2e:da:60:16:f5:36:44:5e:a5:39:52:d8:
80:5f:49:63:f6:14:b4:a3:f2:70:fb:ac:2e:1d:44:
77:3e:a4:41:10:8a:63:bd:9a:c5:04:64:98:ac:dd:
1c:73:dd:b3:69:b6:3a:4e:6b:2b:03:8d:74:17:68:
01:36:fb:ce:70:0c:25:3f:e3:67:a5:76:72:2a:0a:
d4:88:ff:dc:12:74:44:0f:31:67:2f:5a:c1:88:55:
15:17:96:08:9c:f7:d4:eb:f0:0b:03:dd:d0:9e:5c:
40:18:f3:f8:91:a0:5e:15:7e:b9:83:af:81:18:c2:
9b:b2:7c:44:3b:85:ad:6e:4b:ee:a3:8c:e7:22:b3:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0D:06:D6:4D:F8:FE:D4:70:0F:75:FE:A1:23:A5:53:2A:01:F2:05
X509v3 Authority Key Identifier:
keyid:2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c6:2a:c5:ec:83:b1:61:bf:dc:16:b4:99:33:70:01:63:9c:
cd:2e:10:87:72:a1:2c:96:e9:05:05:c7:7e:3a:4d:c4:99:f6:
b3:61:8a:3d:e7:cc:4d:d8:2b:20:98:f4:9d:0a:d7:52:55:b2:
2d:5e:11:30:50:04:63:cf:ce:92:28:0d:7e:34:07:c8:dd:3d:
02:d6:c6:28:ae:b2:c6:c6:74:95:6d:ab:29:51:5d:87:f4:72:
be:a8:4a:91:f5:ea:e8:06:c7:3f:6e:5b:cd:6e:b1:39:b1:d9:
0a:b7:32:49:18:17:70:71:ce:2e:ad:89:2b:6e:28:9c:b7:8a:
4d:ee:79:57:88:70:cf:de:19:06:9f:8f:4c:bd:88:22:bf:de:
c9:2f:3a:23:35:a1:15:ef:00:c4:04:85:d0:4e:f6:e6:3f:2d:
08:94:b6:19:4e:43:9a:0e:a2:d4:6e:35:14:1f:44:c3:37:21:
e9:c9:5c:e1:5a:11:cd:cf:00:5a:f7:68:70:ed:c5:c9:92:8f:
8f:bd:d3:9c:74:34:e9:49:e3:2a:83:29:e0:0a:88:f4:af:a1:
dc:af:f8:ab:e3:4f:1e:4d:25:59:c0:f5:0a:9b:29:82:60:44:
ca:6d:c5:ab:0f:43:8c:37:ea:73:d4:ec:74:16:8f:7e:fb:e7:
1a:c9:fd:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s5JOlao8th8UjaddRfCX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNWQwODUxOTExYmM5NDlkMGY0N2M1ZDMzZDBhNjA3YjM3
OGNkZjEwHhcNMjYwNzI5MDgwMTI4WhcNMjYwNzMwMDgwMTI4WjAzMTEwLwYDVQQD
Eyg3ZDBkMDZkNjRkZjhmZWQ0NzAwZjc1ZmVhMTIzYTU1MzJhMDFmMjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPLfU1/9hWywtwNwj0/QQ3WYYhN6
MY3lfNAAaNvTW6d5FAhTbhJdU7PpgqnQcCM06Fl+lkj9lFtCYhYNhUZT0fFipcB+
OzfAY48LiZsrWJ2g0rB1D+spiNJKCud+Ps4OEeOCbtBkIKWLUuPviZOE5fsPv+HM
OIjUUz4u2mAW9TZEXqU5UtiAX0lj9hS0o/Jw+6wuHUR3PqRBEIpjvZrFBGSYrN0c
c92zabY6TmsrA410F2gBNvvOcAwlP+NnpXZyKgrUiP/cEnREDzFnL1rBiFUVF5YI
nPfU6/ALA93QnlxAGPP4kaBeFX65g6+BGMKbsnxEO4Wtbkvuo4znIrNyZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0NBtZN+P7UcA91/qEjpVMqAfIFMB8GA1UdIwQY
MBaAFCtdCFGRG8lJ0PR8XTPQpgezeM3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzEwSVVaRWJ5VW5ROUh4ZE05Q21CN040emZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83YmEyZDAtN2EyOC00YjhlLWE2N2Qt
NDMyMTk2NjlhMzBiLzEvSzEwSVVaRWJ5VW5ROUh4ZE05Q21CN040emZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83YmEyZDAtN2EyOC00YjhlLWE2N2QtNDMyMTk2NjlhMzBi
LzEvSzEwSVVaRWJ5VW5ROUh4ZE05Q21CN040emZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsYqxeyD
sWG/3Ba0mTNwAWOczS4Qh3KhLJbpBQXHfjpNxJn2s2GKPefMTdgrIJj0nQrXUlWy
LV4RMFAEY8/OkigNfjQHyN09AtbGKK6yxsZ0lW2rKVFdh/RyvqhKkfXq6AbHP25b
zW6xObHZCrcySRgXcHHOLq2JK24onLeKTe55V4hwz94ZBp+PTL2IIr/eyS86IzWh
Fe8AxASF0E725j8tCJS2GU5Dmg6i1G41FB9Ewzch6clc4VoRzc8AWvdocO3FyZKP
j73TnHQ06UnjKoMp4AqI9K+h3K/4q+NPHk0lWcD1CpspgmBEym3Fqw9DjDfqc9Ts
dBaPfvvnGsn9Gw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:00:32 2026 by rpki-client