Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
File: K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft (raw, json)
Hash identifier: o+P8h6suDTbfU56KmZLLYNC+UKix1oLZR9n7ymKxd8c=
Subject key identifier: D7:B5:95:93:E8:BD:23:7C:92:6A:92:77:C1:95:B4:65:58:CE:90:DB
Authority key identifier: 2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
Certificate issuer: /CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Certificate serial: 019EC1493817630A8E724B3322007BE46644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
Manifest number: F2
Signing time: Sat 13 Jun 2026 14:01:01 +0000
Manifest this update: Sat 13 Jun 2026 14:01:01 +0000
Manifest next update: Sun 14 Jun 2026 14:01:01 +0000
Files and hashes: 1: 9SPgem7U2gCiDmpSRDU-ukyx9XE.roa (hash: wROgdUdJkJ9IiAUVLRETnuoxv5G7976oJBmCHeMjAS8=)
2: K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl (hash: q7z2eYQIyaPi4waCxJGOwWf77PkOrIl591+tm2zrMvQ=)
3: MKKIUDUGz4Z95WLC3D6fWiIbk4U.roa (hash: WBcMg0RsrWd3UHeoKkaLJ8RBFUBx59miWOsFBpkS46c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:38:17:63:0a:8e:72:4b:33:22:00:7b:e4:66:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Validity
Not Before: Jun 13 14:01:01 2026 GMT
Not After : Jun 14 14:01:01 2026 GMT
Subject: CN=d7b59593e8bd237c926a9277c195b46558ce90db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:89:ea:d6:98:58:71:83:69:fc:15:77:3c:
93:b3:bd:27:26:9a:97:0f:b1:99:3f:8b:d2:b1:18:
1a:d9:a8:8f:fb:7a:c8:16:ee:79:fe:77:88:cb:7b:
78:0a:b0:93:0a:b0:f0:a1:61:ce:d7:eb:c0:41:02:
93:03:b4:dd:ba:55:7f:64:1c:fe:ed:0b:38:40:ab:
1e:39:83:4d:e1:35:ea:24:8d:c8:02:f5:66:1e:8b:
98:18:6f:3f:dd:bc:fe:f1:e9:b3:e9:6b:26:19:f2:
77:2c:c1:5a:d9:5e:85:e2:77:df:d6:69:b6:c7:23:
60:98:0a:b7:b3:b4:d5:58:2a:b8:61:e5:98:8a:cf:
74:05:e2:23:0a:4f:c3:ba:c6:b5:b3:d9:b9:6a:c0:
83:ff:73:0f:2b:41:82:e9:b2:4c:d3:55:5a:45:12:
6f:fe:79:f3:96:64:70:fa:fd:d5:d7:89:2c:bb:f9:
59:74:72:f4:88:15:c7:c6:ee:f3:75:7d:f4:6f:fe:
89:fa:fb:4c:31:a7:85:58:aa:cc:bb:d8:2a:de:79:
ba:52:e8:64:93:16:3b:64:90:b5:0e:45:29:87:44:
69:16:ff:83:b7:52:fb:7e:4a:bf:6a:4e:80:bc:88:
8d:b4:93:9c:12:5a:8d:2b:9e:28:1b:33:af:03:1f:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B5:95:93:E8:BD:23:7C:92:6A:92:77:C1:95:B4:65:58:CE:90:DB
X509v3 Authority Key Identifier:
keyid:2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:95:db:26:4b:d4:0f:bd:4e:3b:4e:e6:81:bc:a5:3f:f0:6c:
b6:57:8d:35:56:35:3e:05:17:f6:7f:bb:54:dd:d9:2f:5c:93:
a4:36:76:39:df:43:33:89:64:ba:7c:aa:77:cd:24:e5:36:81:
7a:8f:df:b9:d2:31:a2:77:33:b8:03:fa:26:18:27:b1:b0:41:
98:c2:75:a7:d3:e2:3c:ea:fe:bf:c0:7d:27:9f:44:3d:e4:9b:
25:77:19:f8:8b:0d:37:d8:05:9d:8f:b9:6d:f2:48:52:ea:30:
7c:56:51:e9:2b:6c:bb:e7:aa:0a:7e:45:5e:fc:59:f4:74:b7:
9a:3a:6a:0d:b6:ff:ff:5c:94:fb:33:56:3b:0c:45:b8:68:fb:
0d:17:f2:5c:9f:ca:0c:85:49:d0:38:22:7a:ed:9a:0d:d6:90:
6b:e9:69:43:13:8e:1d:a8:10:fd:0a:27:ba:f8:16:87:55:99:
b7:d0:79:f6:1d:e4:c2:8b:cb:e3:e0:4c:ae:97:0f:0d:a5:a7:
f3:23:6d:ff:90:9c:45:04:38:74:f6:9c:4e:c1:bd:5f:c2:30:
5d:22:a5:ec:7e:89:69:ab:52:05:26:e2:f6:66:a6:b7:13:20:
f0:57:53:17:e6:5d:fa:ae:6a:d2:0b:80:e3:b8:12:c3:07:69:
4b:3e:28:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:32 2026 by rpki-client