Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
File: K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft (raw, json)
Hash identifier: 9fuOJ14GhTo+CGQUFWiupTVZZuHSoWHSeVYruVZWvzQ=
Subject key identifier: 8F:37:63:05:1A:FE:4C:B4:5F:BC:E0:DC:1F:28:1C:19:E4:83:04:C2
Authority key identifier: 2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
Certificate issuer: /CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Certificate serial: 019EC337DBB5FA312E10C7E1165F09E7FF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
Manifest number: F3
Signing time: Sat 13 Jun 2026 23:01:18 +0000
Manifest this update: Sat 13 Jun 2026 23:01:18 +0000
Manifest next update: Sun 14 Jun 2026 23:01:18 +0000
Files and hashes: 1: 9SPgem7U2gCiDmpSRDU-ukyx9XE.roa (hash: wROgdUdJkJ9IiAUVLRETnuoxv5G7976oJBmCHeMjAS8=)
2: K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl (hash: 8Z6m0wDEGwgYPV1h3vjuObwTiaGxVTH0bp4T27uAN/0=)
3: MKKIUDUGz4Z95WLC3D6fWiIbk4U.roa (hash: WBcMg0RsrWd3UHeoKkaLJ8RBFUBx59miWOsFBpkS46c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:db:b5:fa:31:2e:10:c7:e1:16:5f:09:e7:ff:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Validity
Not Before: Jun 13 23:01:18 2026 GMT
Not After : Jun 14 23:01:18 2026 GMT
Subject: CN=8f3763051afe4cb45fbce0dc1f281c19e48304c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:d7:4f:af:cb:33:a2:d9:59:4d:b0:6b:51:
16:33:67:d0:15:70:3c:16:7e:76:3f:fe:7a:45:6c:
2b:66:2a:ed:23:1f:34:02:af:dd:48:f4:2c:b9:c1:
9b:5e:94:1e:5d:e1:aa:e4:ce:78:45:d9:f5:9d:61:
0a:e7:ed:0f:57:b7:47:e8:77:a4:76:85:f1:a3:fd:
f4:85:a4:23:03:36:42:25:f5:a4:00:d3:89:1c:6e:
d3:25:4c:37:e6:30:1c:00:d9:16:46:dc:40:cc:37:
74:eb:2c:47:67:2a:3f:51:18:a4:dc:e4:80:90:59:
55:66:60:fd:68:de:18:80:2d:73:bd:2c:89:54:56:
62:ad:d7:83:50:8d:64:ff:2c:29:cf:bd:ac:91:85:
9f:0b:7f:bd:7e:0a:99:03:ea:29:24:6b:48:69:5b:
fb:d2:ac:71:56:fe:5b:71:b5:3f:bc:e2:b5:02:0a:
2f:96:be:c3:bb:7a:50:6c:f8:ff:a5:2b:db:51:96:
09:e8:c7:1e:d3:c1:67:98:7b:be:04:3c:03:d8:f6:
ba:70:0e:47:4e:d7:60:e2:b4:23:5f:10:6e:f3:8f:
66:a9:71:a2:83:f3:4f:91:b3:c9:5c:4a:35:b0:06:
5a:8c:69:35:17:e4:3c:ad:d1:4c:88:cb:ae:4b:d8:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:63:05:1A:FE:4C:B4:5F:BC:E0:DC:1F:28:1C:19:E4:83:04:C2
X509v3 Authority Key Identifier:
keyid:2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:69:5a:65:02:5c:8b:da:a3:ee:b7:2b:6f:f6:08:94:ae:72:
62:be:92:76:32:e1:a6:a5:8b:98:41:30:b7:d8:49:d1:c0:cf:
65:7a:73:ed:f4:6e:6d:9d:09:3b:ee:df:f2:cc:ca:ed:78:8f:
f4:1a:1f:31:eb:65:79:ab:c1:3f:40:c2:77:46:78:c2:d5:fa:
59:5b:2b:47:84:cc:36:fc:ca:72:6f:3a:b9:d5:47:d0:58:70:
10:68:23:f4:3c:16:5d:97:dc:fc:43:e5:21:06:82:39:6f:f4:
23:37:b8:e3:4d:87:67:47:32:0f:3a:ed:d8:ae:62:2e:5c:95:
5b:05:f4:28:ea:45:6a:77:84:b2:b4:09:5f:57:9f:8d:b3:bf:
69:0c:58:be:c5:d3:5d:a6:e8:82:41:b3:66:58:a8:5b:96:d7:
f9:b2:c6:4c:ec:f9:9a:12:a9:4d:40:cc:32:76:a4:ff:59:57:
0c:6d:c1:c9:24:ef:3f:47:07:2b:8b:9b:cd:f2:d8:76:cc:33:
4e:ed:e5:df:80:58:15:04:73:b4:05:7f:16:61:41:92:ac:c5:
34:6c:d8:86:ae:1d:af:6f:f9:90:3b:dd:2f:0e:b4:81:85:b4:
48:25:d7:83:0f:bc:17:ed:c4:1e:9e:3a:bb:1e:a8:04:96:57:
e9:ff:8f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:21:40 2026 by rpki-client