Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
File: K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft (raw, json)
Hash identifier: WmibH0kCxWZTq7UjWs5riKMNKoFrrTCMBzQDccW4i1Q=
Subject key identifier: 95:91:8B:C2:20:30:66:25:72:69:D2:49:DA:DD:8E:6D:AF:5B:E5:32
Authority key identifier: 2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
Certificate issuer: /CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Certificate serial: 019D25F1E8AB56DE82EF88388758FC1C9AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
Manifest number: 1D
Signing time: Wed 25 Mar 2026 17:01:43 +0000
Manifest this update: Wed 25 Mar 2026 17:01:43 +0000
Manifest next update: Thu 26 Mar 2026 17:01:43 +0000
Files and hashes: 1: 9SPgem7U2gCiDmpSRDU-ukyx9XE.roa (hash: wROgdUdJkJ9IiAUVLRETnuoxv5G7976oJBmCHeMjAS8=)
2: K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl (hash: mte0UEUGa+jB3kWBtts1vCVfdvwGmWjMvIkDD40X0ZQ=)
3: MKKIUDUGz4Z95WLC3D6fWiIbk4U.roa (hash: WBcMg0RsrWd3UHeoKkaLJ8RBFUBx59miWOsFBpkS46c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e8:ab:56:de:82:ef:88:38:87:58:fc:1c:9a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Validity
Not Before: Mar 25 17:01:43 2026 GMT
Not After : Mar 26 17:01:43 2026 GMT
Subject: CN=95918bc2203066257269d249dadd8e6daf5be532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:fb:23:ce:54:81:e2:9c:dc:09:76:3e:e8:
69:2b:d0:7f:b9:cf:fb:ad:52:c7:e0:fa:50:97:ba:
de:82:3e:5b:67:0a:55:a1:74:19:ee:1d:69:68:b1:
9e:99:74:65:78:41:63:aa:bf:49:e9:92:cf:cd:ce:
7d:3f:b8:25:61:f6:62:18:b4:3c:31:e4:41:6a:65:
bb:19:a3:49:04:69:d0:90:29:27:73:ba:13:c9:05:
4b:cb:8a:13:35:93:78:24:cd:55:d7:09:75:a9:97:
e2:ea:50:c6:37:4f:97:bc:0f:bb:55:df:0d:cb:eb:
75:97:de:83:62:a8:65:52:37:56:57:c4:23:76:5e:
73:7a:bf:69:d9:da:61:3f:d6:4a:fa:cc:f7:d3:92:
10:8a:da:50:6b:7f:85:93:06:f3:d0:3c:4d:cb:df:
8d:20:35:bb:e1:47:2c:ee:b6:e4:a9:10:9a:1c:23:
ff:70:a8:ff:72:eb:76:09:31:c0:da:af:48:3d:ec:
33:b5:46:17:7a:47:3d:38:43:cc:1e:dc:67:5d:a7:
19:34:75:8c:97:d8:35:3e:dd:5c:8b:75:c4:ff:43:
25:36:61:32:2b:7e:5a:48:32:f3:da:14:6a:9c:5b:
46:72:84:e0:57:6d:48:5b:93:40:b4:af:56:65:8a:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:91:8B:C2:20:30:66:25:72:69:D2:49:DA:DD:8E:6D:AF:5B:E5:32
X509v3 Authority Key Identifier:
keyid:2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:00:69:a9:4a:42:a3:ca:25:5b:b3:1f:57:0b:8b:0e:a4:36:
e8:77:0d:3c:06:a6:07:f9:23:4b:07:e1:03:e0:3a:45:68:cd:
06:58:d5:e1:83:ce:55:d2:3d:fc:bd:0a:bf:46:f5:3a:ef:24:
59:fa:7e:4c:96:5b:60:1c:13:f9:5a:81:32:9c:49:46:47:f4:
48:37:ad:b4:b5:ee:7c:61:15:8d:80:9a:a0:36:ab:42:14:88:
85:6e:62:19:12:21:bf:eb:32:e2:bd:4c:32:77:ac:4a:71:a0:
0b:d2:ff:73:c3:28:07:b0:5a:b1:5e:45:d4:d1:31:ad:d9:2a:
c0:36:1b:68:03:fc:12:c5:0e:eb:b1:7a:f1:4c:6e:61:f0:c9:
8e:50:fb:ea:65:a4:3c:8a:43:8a:a6:87:35:86:9e:53:32:4b:
8f:86:b4:9d:4a:a8:df:08:8f:8d:d0:a5:91:ee:b8:d7:af:44:
4f:00:08:61:6e:b7:0b:1c:1b:72:c3:aa:aa:ba:69:7b:87:30:
eb:6b:55:5d:93:c1:f9:36:f2:14:5f:28:53:71:84:d4:28:dd:
94:5f:be:c3:07:2f:e2:22:ba:79:14:c6:24:4e:5e:e7:20:7a:
f8:93:db:a3:30:94:aa:2a:c1:88:93:da:5d:89:13:58:f7:35:
99:d9:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:31 2026 by rpki-client