Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
File: K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft (raw, json)
Hash identifier: jTjJ/1Ik1uVzM/50CBtSm2tMtfsz2Qo0CilHjxooPQE=
Subject key identifier: 4A:F8:0F:7C:46:FA:CB:66:CC:35:8E:BB:46:5A:4C:24:6E:C5:DF:F1
Authority key identifier: 2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
Certificate issuer: /CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Certificate serial: 019E1F10EEFB315D587D41F9FE7195A01901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
Manifest number: 9E
Signing time: Wed 13 May 2026 02:01:03 +0000
Manifest this update: Wed 13 May 2026 02:01:03 +0000
Manifest next update: Thu 14 May 2026 02:01:03 +0000
Files and hashes: 1: 9SPgem7U2gCiDmpSRDU-ukyx9XE.roa (hash: wROgdUdJkJ9IiAUVLRETnuoxv5G7976oJBmCHeMjAS8=)
2: K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl (hash: ptZkX7m9DGiY8OI02HTSkGlLNrKqsleugREOHRWMQ+Y=)
3: MKKIUDUGz4Z95WLC3D6fWiIbk4U.roa (hash: WBcMg0RsrWd3UHeoKkaLJ8RBFUBx59miWOsFBpkS46c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:ee:fb:31:5d:58:7d:41:f9:fe:71:95:a0:19:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Validity
Not Before: May 13 02:01:03 2026 GMT
Not After : May 14 02:01:03 2026 GMT
Subject: CN=4af80f7c46facb66cc358ebb465a4c246ec5dff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:26:6c:e2:76:7c:96:ea:67:8a:d4:40:ca:05:
8f:2c:bb:ce:9b:ab:39:bb:5e:33:73:88:15:9b:01:
da:30:1c:a8:bb:a3:27:a6:33:44:67:bd:4d:36:90:
2e:06:40:de:4a:8e:9d:31:1d:c6:d0:f1:36:37:ab:
8d:84:54:b4:3b:de:fd:9e:18:6d:11:54:d9:21:24:
e0:30:de:3b:5d:e5:8f:af:1d:f3:e0:15:23:60:fb:
b7:ed:1a:e7:b5:1b:49:14:ae:18:0e:c0:1f:f9:70:
c7:ea:4f:82:9a:9f:d8:d6:98:37:0b:65:81:60:91:
3b:e6:7c:65:ab:da:c7:4f:30:10:50:bf:81:95:2e:
ca:31:45:e7:e3:fa:a2:ca:86:51:9d:84:f8:9e:25:
83:d6:d6:cf:8c:c4:81:7d:ba:21:47:80:4b:6c:ef:
12:57:10:47:32:4b:f6:e0:13:bd:b0:ab:7a:25:81:
11:51:b8:64:ee:24:36:07:9e:cb:ba:eb:b8:c5:2b:
69:d7:ec:e7:b2:98:00:da:9a:f7:89:d9:20:c8:35:
ed:35:51:c0:06:b8:62:89:7d:b3:70:2e:2b:db:b0:
f4:13:fd:29:04:39:76:05:51:e0:fe:30:6d:d1:2b:
37:0b:48:1c:b0:27:48:3c:d8:20:21:ae:93:94:fe:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:0F:7C:46:FA:CB:66:CC:35:8E:BB:46:5A:4C:24:6E:C5:DF:F1
X509v3 Authority Key Identifier:
keyid:2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e4:b8:91:06:5c:af:9f:dd:2e:ed:9b:45:94:6a:7d:29:1d:
8b:eb:12:41:8c:7a:a7:16:88:ef:06:6d:24:32:0b:ad:c9:e0:
7b:a4:87:93:57:55:fa:fb:94:b3:ad:77:9f:4f:fc:d1:5c:49:
43:31:74:47:01:ce:d5:60:bd:45:be:12:fa:43:4b:28:ea:6b:
f3:2a:aa:44:1c:fc:3f:cb:08:d2:85:a5:71:8f:b4:4e:d4:8a:
19:2e:21:94:b1:69:a3:d6:41:98:ac:de:84:c6:65:79:a7:97:
35:7b:6d:eb:f2:21:28:2f:5a:56:b4:61:0c:79:7c:41:11:84:
0d:e1:ea:6e:9e:e9:fb:b1:16:92:b5:a9:81:d4:e6:09:60:aa:
e5:3e:1d:f8:48:47:71:fb:30:5d:47:d2:91:06:6b:79:36:f9:
76:9c:8d:a0:ff:ff:9b:55:2c:2c:41:77:14:3c:da:39:3d:a0:
ea:b7:48:73:42:73:b2:77:25:2d:62:3e:d0:55:77:e8:88:d7:
98:20:99:14:53:f7:cd:39:ff:48:93:76:bf:40:a0:21:69:53:
8f:14:40:2a:f0:38:15:b9:89:32:fb:7b:ce:c8:73:da:03:a4:
06:1b:81:a7:44:e7:f6:ad:b5:69:16:1d:83:02:8d:a8:7d:8a:
9c:79:e6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:05 2026 by rpki-client