Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
File: K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft (raw, json)
Hash identifier: UYaYUkJ7RZk0kbH/yiwgTpchiDt/PQfNRYDhN1f/b1w=
Subject key identifier: BE:56:D1:72:60:09:90:7C:53:F0:FE:64:75:41:35:FF:8E:A9:8C:0A
Authority key identifier: 2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
Certificate issuer: /CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Certificate serial: 01A104A54BC6FB4449877E2DE12450E08FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
Manifest number: 021E
Signing time: Sun 04 Oct 2026 02:01:44 +0000
Manifest this update: Sun 04 Oct 2026 02:01:44 +0000
Manifest next update: Mon 05 Oct 2026 02:01:44 +0000
Files and hashes: 1: 9SPgem7U2gCiDmpSRDU-ukyx9XE.roa (hash: wROgdUdJkJ9IiAUVLRETnuoxv5G7976oJBmCHeMjAS8=)
2: K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl (hash: eyVlqJlOK5FJ378CpOD2n467Ivnq1JXSys4oaaaxz0c=)
3: MKKIUDUGz4Z95WLC3D6fWiIbk4U.roa (hash: WBcMg0RsrWd3UHeoKkaLJ8RBFUBx59miWOsFBpkS46c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a5:4b:c6:fb:44:49:87:7e:2d:e1:24:50:e0:8f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Validity
Not Before: Oct 4 02:01:44 2026 GMT
Not After : Oct 5 02:01:44 2026 GMT
Subject: CN=be56d1726009907c53f0fe64754135ff8ea98c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:f6:1b:6b:96:dd:5e:ed:ae:15:fd:3c:80:
2e:c5:0c:d9:c2:b8:ab:60:16:2d:25:17:bd:46:fb:
6b:6e:c8:0a:3a:f8:9c:c3:19:00:35:c8:56:e0:26:
0a:5e:7c:0f:02:c9:b4:16:32:f7:2e:79:9c:99:07:
5d:5e:7b:4d:ce:76:64:b9:05:27:aa:b0:d1:74:de:
14:61:af:6c:88:71:bd:16:e7:55:47:42:65:a8:65:
c5:e7:8b:e4:9b:8c:97:31:83:a1:36:62:8a:60:90:
41:a4:44:88:70:4d:1a:b6:47:b5:20:1b:65:f5:47:
b4:6d:2c:67:04:6f:b8:84:01:9c:d5:b8:b8:62:e7:
5b:fc:4a:ec:ac:85:65:28:51:e7:90:09:89:86:ba:
7b:a9:6b:3b:ea:be:95:85:9b:f6:3a:5d:12:1b:58:
f4:e7:91:e7:f3:0c:5f:29:46:1c:af:79:5b:fe:b9:
44:71:e4:ce:e2:63:25:69:b3:a8:23:04:64:be:3f:
d6:6c:a8:6d:66:64:12:06:23:6f:52:96:b9:56:04:
e6:cb:0c:46:d5:c1:21:dd:2d:0f:69:2e:77:44:d3:
5f:b9:61:53:73:9f:95:8f:0e:bb:c7:5b:7a:39:83:
15:bb:eb:d3:78:c9:61:87:a4:30:10:5a:c5:5e:7d:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:56:D1:72:60:09:90:7C:53:F0:FE:64:75:41:35:FF:8E:A9:8C:0A
X509v3 Authority Key Identifier:
keyid:2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8d:b0:45:79:2b:31:35:f2:25:b6:cb:d3:51:47:ee:3c:9e:
3e:43:7b:46:18:80:51:5e:b9:3d:41:39:ad:f6:47:af:b1:f9:
1c:ce:dd:04:f4:fd:e4:62:af:a3:04:8f:fa:06:94:90:26:54:
87:eb:de:74:c3:16:13:22:2b:9a:a0:98:47:72:05:f4:05:ca:
5d:93:43:ce:63:1f:04:2a:00:f2:7d:6e:05:47:be:40:34:d2:
5a:0c:e5:8a:f2:eb:60:35:9f:39:91:8c:07:41:80:ad:ac:41:
af:e4:61:93:be:96:da:8b:4b:c2:d3:b1:b3:01:0b:b1:fc:29:
ef:b1:46:8e:a9:b2:a8:9c:bb:85:e3:3d:7b:c8:6f:0a:ff:2f:
db:34:eb:53:88:35:7b:2b:cb:08:c1:b9:ac:6a:9e:7b:4f:90:
ec:18:3c:08:96:78:09:53:1a:17:32:b4:ab:75:ed:44:db:93:
5d:e3:63:b6:87:85:bc:17:b8:24:f1:a1:a0:75:eb:ca:dd:b6:
65:21:b6:f2:9c:a8:da:4d:4f:51:59:0f:c1:fd:94:d2:7c:fe:
d9:1a:6e:0f:0a:28:90:01:8d:d4:6a:ec:3e:f6:3a:d8:b7:3b:
93:ae:ef:4b:f8:5b:2f:85:86:7c:2c:71:69:ae:6f:80:90:8a:
ad:b0:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:19:05 2026 by rpki-client