Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File: 10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier: /DgW1y3ay/4sqZAxb0bij6Dd20QtAkgKONd5hViv6Rs=
Subject key identifier: 28:D4:50:E0:46:4E:BE:96:56:E1:3D:DD:8E:30:BF:2B:0A:66:B3:FC
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer: /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial: 019F8FB581C7EB7F15CA980A23C460620B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 16:01:04 +0000
Manifest this update: Thu 23 Jul 2026 16:01:04 +0000
Manifest next update: Fri 24 Jul 2026 16:01:04 +0000
Files and hashes: 1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: L8JmLgmIqy+lriuEfWxi8mW9nt76hrUkh3SgFxMHlPA=)
2: OAbpOTnAOzglaKzJYR_dSWth0y0.roa (hash: p0BRSUqt0ibbeGiIUqDvTDnDIoyeLcX+EC1SME0H0Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:81:c7:eb:7f:15:ca:98:0a:23:c4:60:62:0b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Validity
Not Before: Jul 23 16:01:04 2026 GMT
Not After : Jul 24 16:01:04 2026 GMT
Subject: CN=28d450e0464ebe9656e13ddd8e30bf2b0a66b3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:14:a2:ff:54:7a:de:88:31:83:78:e6:8b:
3c:b3:a4:67:61:55:3d:0a:cb:79:c5:08:0a:35:1f:
20:da:11:6f:fd:73:98:c5:96:69:28:ff:19:2d:5e:
68:29:1f:30:cf:65:7d:8c:15:de:a4:5d:24:bd:47:
71:b7:42:ad:f1:14:99:9c:f8:69:5d:0b:1d:64:ed:
a5:d5:a2:56:c7:21:4e:d6:de:4a:79:eb:f8:f3:d1:
ba:39:e3:51:2a:56:5d:e7:0b:a9:6e:8c:2b:67:9e:
f0:5b:52:a3:ba:13:f5:8d:cd:a4:0b:45:67:a8:ca:
9a:49:12:95:20:fc:94:33:a5:95:88:19:4b:26:69:
f0:4d:05:62:69:43:da:95:ef:fe:fa:bf:a7:be:56:
3a:87:49:3a:b4:3b:48:0f:da:32:6f:f0:2c:63:1f:
df:65:4e:29:61:af:89:4a:a2:cc:72:63:27:a4:81:
06:6b:0f:a9:ed:70:0b:8b:73:30:18:56:b8:db:56:
97:e9:49:ea:4e:c5:1f:f8:27:e9:7f:a0:43:02:54:
ca:1b:25:5a:2d:f7:5a:c9:73:47:59:de:23:dc:2f:
5b:32:2a:c0:c6:82:af:ee:4d:4c:43:e2:24:bd:09:
39:6f:5d:e4:0c:c0:65:35:67:2c:d4:fd:a8:ea:f1:
00:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D4:50:E0:46:4E:BE:96:56:E1:3D:DD:8E:30:BF:2B:0A:66:B3:FC
X509v3 Authority Key Identifier:
keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:78:8c:8d:ea:a1:59:93:5a:85:b3:74:c7:29:3e:8d:22:1f:
59:3d:ae:29:b2:dd:8f:b5:72:0b:5a:48:d2:fb:b9:0b:ad:52:
6d:0f:95:e4:f8:3d:31:7d:d6:26:56:2b:e4:a3:3d:91:51:04:
bb:aa:42:e4:e1:a0:6b:89:8c:a8:26:18:20:c4:ee:d2:90:65:
d6:d4:3c:1d:16:3b:ed:2e:70:f0:2f:4e:d3:58:ad:5a:63:55:
6a:90:39:d1:ae:ed:88:56:aa:47:d7:aa:f8:f7:f1:69:67:6c:
45:26:3c:73:f5:41:2d:ce:11:43:77:b2:b3:74:63:87:67:47:
75:45:77:3a:f1:20:14:83:9d:bb:21:44:c6:13:53:4e:f7:68:
c0:f9:cb:ba:70:97:de:c8:9d:f8:61:9f:6d:f7:15:af:0f:9f:
4d:94:f8:42:68:9e:82:8c:ab:e4:6d:5d:d1:ae:84:38:b1:98:
19:d1:f1:01:75:2c:2d:b0:ca:d6:1c:d3:2f:99:ff:af:64:9f:
9b:53:9b:32:4c:19:18:d1:e6:09:aa:13:23:bc:ef:07:d8:c1:
62:25:f6:6e:13:13:ca:ed:5c:82:44:dd:7e:48:77:29:e7:8b:
58:b3:60:30:99:37:1b:46:0d:f3:6f:c6:03:77:09:b8:8e:16:
8e:72:c0:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtYHH638VypgKI8RgYgspMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NGNlOWQ5ZTE4YTJhOGEwNmNiNGQ5YjA4YjU5Y2Q3NmIy
MjExODQwHhcNMjYwNzIzMTYwMTA0WhcNMjYwNzI0MTYwMTA0WjAzMTEwLwYDVQQD
EygyOGQ0NTBlMDQ2NGViZTk2NTZlMTNkZGQ4ZTMwYmYyYjBhNjZiM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvucUov9Uet6IMYN45os8s6RnYVU9
Cst5xQgKNR8g2hFv/XOYxZZpKP8ZLV5oKR8wz2V9jBXepF0kvUdxt0Kt8RSZnPhp
XQsdZO2l1aJWxyFO1t5Keev489G6OeNRKlZd5wupbowrZ57wW1KjuhP1jc2kC0Vn
qMqaSRKVIPyUM6WViBlLJmnwTQViaUPale/++r+nvlY6h0k6tDtID9oyb/AsYx/f
ZU4pYa+JSqLMcmMnpIEGaw+p7XALi3MwGFa421aX6UnqTsUf+Cfpf6BDAlTKGyVa
LfdayXNHWd4j3C9bMirAxoKv7k1MQ+IkvQk5b13kDMBlNWcs1P2o6vEAkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjUUOBGTr6WVuE93Y4wvysKZrP8MB8GA1UdIwQY
MBaAFNdM6dnhiiqKBstNmwi1nNdrIhGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzct
NjNiOTUyNDBkNzQ1LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzctNjNiOTUyNDBkNzQ1
LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXiMjeqh
WZNahbN0xyk+jSIfWT2uKbLdj7VyC1pI0vu5C61SbQ+V5Pg9MX3WJlYr5KM9kVEE
u6pC5OGga4mMqCYYIMTu0pBl1tQ8HRY77S5w8C9O01itWmNVapA50a7tiFaqR9eq
+PfxaWdsRSY8c/VBLc4RQ3eys3Rjh2dHdUV3OvEgFIOduyFExhNTTvdowPnLunCX
3sid+GGfbfcVrw+fTZT4Qmiegoyr5G1d0a6EOLGYGdHxAXUsLbDK1hzTL5n/r2Sf
m1ObMkwZGNHmCaoTI7zvB9jBYiX2bhMTyu1cgkTdfkh3KeeLWLNgMJk3G0YN82/G
A3cJuI4WjnLAYQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:42 2026 by rpki-client