Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
File: K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft (raw, json)
Hash identifier: nm8DLH38pAYrVoyjsBtEs6C9hqw1Tt9ww8P3nNljgWo=
Subject key identifier: 75:61:75:9D:D3:16:3E:06:F0:0C:94:D2:44:72:B5:87:D3:5A:E1:45
Authority key identifier: 2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
Certificate issuer: /CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Certificate serial: 01A0E3D11DD98F837D46B6ED7B36D1F83C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
Manifest number: 020D
Signing time: Sun 27 Sep 2026 17:02:07 +0000
Manifest this update: Sun 27 Sep 2026 17:02:07 +0000
Manifest next update: Mon 28 Sep 2026 17:02:07 +0000
Files and hashes: 1: 9SPgem7U2gCiDmpSRDU-ukyx9XE.roa (hash: wROgdUdJkJ9IiAUVLRETnuoxv5G7976oJBmCHeMjAS8=)
2: K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl (hash: /PAaj3sOWFZZm7FkWm42NgYihNz4s3BOZI45/zBFhho=)
3: MKKIUDUGz4Z95WLC3D6fWiIbk4U.roa (hash: WBcMg0RsrWd3UHeoKkaLJ8RBFUBx59miWOsFBpkS46c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d1:1d:d9:8f:83:7d:46:b6:ed:7b:36:d1:f8:3c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Validity
Not Before: Sep 27 17:02:07 2026 GMT
Not After : Sep 28 17:02:07 2026 GMT
Subject: CN=7561759dd3163e06f00c94d24472b587d35ae145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:60:55:c8:eb:c3:f9:7d:6d:2d:56:cf:30:
f8:8f:bd:ed:07:cb:e0:19:4b:bd:6a:01:9a:62:e7:
c7:af:c3:22:a9:9c:bf:8f:be:bd:ea:fe:fc:85:b7:
28:a1:c3:d2:b3:06:3d:04:a8:5a:bc:63:6b:91:2d:
14:ef:0a:a0:77:0d:a7:55:7e:4f:ad:56:5d:06:40:
8c:8e:b2:d1:c6:04:13:12:ad:64:ab:0d:e5:cd:d5:
14:c4:9c:4b:7c:39:1a:7d:65:67:e6:a7:89:8e:2e:
8e:c9:f8:00:bf:1c:71:2c:1f:db:4e:73:2c:44:bb:
1b:f2:c7:50:2b:63:36:8d:84:03:25:39:01:c7:16:
07:f3:b4:29:5c:92:2a:1f:17:da:cf:8a:fd:c6:2c:
4c:25:12:79:9e:6b:19:cf:65:99:53:16:52:fe:13:
6b:eb:b6:9a:94:a4:b1:62:9c:db:8c:49:7d:23:a2:
fa:36:d7:87:45:aa:70:8b:00:ca:67:aa:66:26:58:
57:0f:ee:8b:11:1c:1f:9c:2c:1b:d5:12:26:38:18:
33:36:84:bc:7e:b0:1d:2a:ae:7b:2e:10:35:29:ef:
8c:ba:ed:e6:f4:d0:87:f3:4c:da:30:bf:a2:d7:8c:
b8:81:d5:4b:23:04:c4:da:2d:4e:b6:58:76:b5:a0:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:61:75:9D:D3:16:3E:06:F0:0C:94:D2:44:72:B5:87:D3:5A:E1:45
X509v3 Authority Key Identifier:
keyid:2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b0:12:76:51:74:48:3a:de:65:5e:ec:e1:c8:29:bb:4f:ff:
68:ee:6b:f2:07:39:ab:09:67:0f:c4:73:55:e6:af:5e:74:b5:
b4:de:10:03:8b:a2:8b:59:f4:51:b6:20:8b:91:b6:92:ba:1a:
eb:62:4b:6c:40:f0:8e:90:24:7c:ef:1d:59:28:47:85:88:c5:
15:60:43:9a:06:89:bf:12:ea:76:e3:99:b2:4b:1a:28:e7:02:
77:78:93:17:3e:e0:ae:ae:e1:bc:06:9c:c7:8c:d1:0f:7b:13:
8a:09:6d:db:fe:e1:ba:70:bf:30:a8:f4:99:57:08:0e:74:65:
10:36:73:dc:ea:0d:47:a7:f8:c0:67:30:35:a5:05:86:2b:8e:
b2:7a:08:c9:75:5d:eb:d6:fa:b2:b7:5b:db:82:dc:01:a8:59:
3c:25:88:0c:25:e1:b1:3c:2b:90:23:5e:76:36:3c:0d:69:82:
11:0d:d4:73:27:e3:80:5f:84:cd:5e:71:18:ac:6c:94:6c:d9:
7e:9a:3c:3b:91:b0:b7:56:86:67:f9:84:ab:de:ea:cf:1f:8f:
28:44:d9:75:58:0a:db:38:3e:58:2e:04:54:40:c1:ef:15:8e:
64:48:dd:c6:6d:f2:5f:e2:17:96:0d:8f:cc:de:34:2f:53:a1:
c0:c7:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:53:14 2026 by rpki-client