Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
File: K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft (raw, json)
Hash identifier: 3zlLxeyv2WK7NvDxQu8zD+ROGlrOQxGgL1RQVt/v+0c=
Subject key identifier: 6E:97:0F:82:DE:74:04:E0:9C:63:4D:C7:3C:D1:37:79:DC:67:AA:29
Authority key identifier: 2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
Certificate issuer: /CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Certificate serial: 019F93C9A2F45CDC11B3AB86CD10DB21AA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
Manifest number: 015F
Signing time: Fri 24 Jul 2026 11:01:32 +0000
Manifest this update: Fri 24 Jul 2026 11:01:32 +0000
Manifest next update: Sat 25 Jul 2026 11:01:32 +0000
Files and hashes: 1: 9SPgem7U2gCiDmpSRDU-ukyx9XE.roa (hash: wROgdUdJkJ9IiAUVLRETnuoxv5G7976oJBmCHeMjAS8=)
2: K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl (hash: 33kcsAUzj0lL+HdmwxWgzZZ5yBUPiyy9/Iw/zpJjEDY=)
3: MKKIUDUGz4Z95WLC3D6fWiIbk4U.roa (hash: WBcMg0RsrWd3UHeoKkaLJ8RBFUBx59miWOsFBpkS46c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:a2:f4:5c:dc:11:b3:ab:86:cd:10:db:21:aa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Validity
Not Before: Jul 24 11:01:32 2026 GMT
Not After : Jul 25 11:01:32 2026 GMT
Subject: CN=6e970f82de7404e09c634dc73cd13779dc67aa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:ae:d2:15:b3:ef:9c:66:a7:f9:27:10:6b:
5d:f4:34:f9:8a:36:60:0e:83:56:57:fc:9c:4d:f1:
eb:86:93:05:77:32:9f:e1:15:28:bc:6f:30:80:1f:
bb:69:47:66:1b:36:e0:77:16:5b:47:75:f2:0d:69:
1d:63:33:6e:e7:99:6a:d1:d0:43:af:0c:24:6f:63:
65:2d:04:54:5e:1b:e3:50:7f:30:4e:09:82:d5:45:
fb:cf:a9:b8:46:34:92:ac:b7:db:9e:48:4d:5c:2b:
95:c6:3b:3a:1d:00:86:8e:75:0d:45:90:6c:48:8d:
4f:93:e9:58:d8:11:3e:c4:12:84:e8:c7:74:47:4b:
9c:f3:ff:30:1e:12:1b:c2:17:22:9f:41:08:4c:ea:
58:80:c7:df:9d:c2:2e:46:3c:45:66:9b:b9:65:be:
0e:a5:30:e6:0c:0f:86:64:41:27:1a:f5:8d:f0:57:
49:d9:0d:5d:c8:25:86:86:49:a6:ba:d1:36:6c:c4:
db:ed:f9:83:04:7e:22:5e:14:da:9b:11:20:80:f1:
e1:2d:a9:14:3a:d1:b1:8f:61:1e:4d:cc:66:f4:b8:
ce:37:cd:4b:93:99:4c:65:57:41:99:aa:e9:e3:ef:
e5:f0:14:2c:a5:70:76:f0:28:2a:7d:55:d8:7f:f9:
ea:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:97:0F:82:DE:74:04:E0:9C:63:4D:C7:3C:D1:37:79:DC:67:AA:29
X509v3 Authority Key Identifier:
keyid:2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:59:ab:29:79:8d:4c:22:13:5c:f0:6f:cd:4f:59:81:fc:a0:
0e:95:40:2f:44:c5:76:96:3a:82:d9:f9:c9:d9:64:03:dd:12:
93:b2:17:e7:fc:e1:7a:2b:fc:1b:2a:ee:8a:cc:78:52:ad:89:
bb:d9:cd:93:70:2a:39:3d:75:33:37:7d:76:d4:b6:ef:7c:be:
fc:46:49:cf:84:da:48:5e:3c:a3:d4:f7:48:fb:7d:38:0e:18:
9b:8f:93:1e:d5:19:90:bc:8e:90:d0:7c:9e:e0:fa:3f:49:30:
6d:f8:5f:c4:4b:4a:6d:88:76:8c:9d:95:83:cf:4c:0c:25:6e:
90:b0:42:69:af:95:b6:8e:2e:ce:9d:57:88:47:48:f4:ea:6c:
a8:12:8e:4f:d5:d3:c0:8e:e9:c8:31:fc:6f:74:44:9d:2e:0d:
22:b9:da:e2:f1:cf:a9:c2:9d:3b:36:2e:29:f5:bb:f3:7f:dd:
df:34:38:2c:1c:cb:58:3f:38:ea:e6:c8:91:e8:3c:1e:68:14:
e2:1a:4f:60:e5:1a:94:44:16:8d:b4:52:e2:a1:9c:ef:d2:a5:
66:b7:04:d0:9f:1f:3a:8f:39:2a:a0:e7:39:7a:a4:39:56:1c:
38:7c:eb:5f:72:76:f3:69:71:bd:e8:ad:0c:40:88:a9:46:fe:
40:24:05:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:35:20 2026 by rpki-client