Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
File: K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft (raw, json)
Hash identifier: buOQRYEHQAkle05ZyEEOpSY6IBjLCQLKsM6vfvYV9LA=
Subject key identifier: 40:3D:D0:E8:33:AB:E5:D7:4C:2A:BD:AB:64:F9:67:C5:AD:1B:6D:D6
Authority key identifier: 2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
Certificate issuer: /CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Certificate serial: 01A13E947DEE60EA867A36C69B359F15E1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
Manifest number: 023C
Signing time: Thu 15 Oct 2026 08:01:21 +0000
Manifest this update: Thu 15 Oct 2026 08:01:21 +0000
Manifest next update: Fri 16 Oct 2026 08:01:21 +0000
Files and hashes: 1: 9SPgem7U2gCiDmpSRDU-ukyx9XE.roa (hash: wROgdUdJkJ9IiAUVLRETnuoxv5G7976oJBmCHeMjAS8=)
2: K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl (hash: J0uWSPIxvnm/5AQR7MDzB/tSl2Bj+QyrGBB/EvNF+k8=)
3: MKKIUDUGz4Z95WLC3D6fWiIbk4U.roa (hash: WBcMg0RsrWd3UHeoKkaLJ8RBFUBx59miWOsFBpkS46c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:7d:ee:60:ea:86:7a:36:c6:9b:35:9f:15:e1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Validity
Not Before: Oct 15 08:01:21 2026 GMT
Not After : Oct 16 08:01:21 2026 GMT
Subject: CN=403dd0e833abe5d74c2abdab64f967c5ad1b6dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:25:2d:5c:4c:a7:32:2f:fb:bf:27:63:a1:
91:8f:73:85:c0:d1:d0:1c:4f:3e:65:1b:95:a2:1b:
3a:c6:1b:c1:07:23:f8:60:3d:04:95:29:d3:08:bd:
31:70:04:77:18:6a:f9:3d:94:ec:ec:9d:4b:fa:ce:
59:6f:7d:6a:28:a6:e0:91:a6:62:e7:39:1e:92:fd:
a7:bb:ef:ce:94:12:60:0f:7e:9a:ad:84:b2:04:b1:
28:7b:8b:bc:84:ec:14:1b:2f:5a:f6:ae:9d:a8:f6:
f4:d2:bd:a2:28:6e:5b:a5:c1:e8:b5:af:29:7d:7d:
b7:0f:49:57:9b:6d:44:5d:1d:1a:86:a1:37:c6:7b:
b7:5f:a2:df:79:51:8a:d4:b5:99:ac:82:87:54:a8:
3e:6d:42:49:af:f9:df:d4:98:91:4c:d4:38:6c:f2:
04:24:a8:1a:26:ab:37:71:c0:53:96:53:73:bf:2d:
66:47:0b:55:74:d6:63:66:a3:7e:5e:9a:61:e5:a2:
8d:64:45:18:71:3f:af:80:62:49:d0:77:e4:31:e4:
7d:c9:84:20:48:a0:d6:d0:99:e4:d3:2e:dd:55:7b:
fb:4f:e9:94:b4:1a:ab:08:e2:91:21:5f:f6:4a:76:
04:91:3c:78:ab:68:c3:e8:d2:ad:bb:f8:3a:86:5d:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3D:D0:E8:33:AB:E5:D7:4C:2A:BD:AB:64:F9:67:C5:AD:1B:6D:D6
X509v3 Authority Key Identifier:
keyid:2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6d:f8:b6:f2:fc:24:8d:a1:dc:bc:0b:8c:62:13:7e:1f:a9:
47:f1:97:44:cc:8f:62:ad:84:23:f2:bf:5b:fb:d9:ee:55:b9:
db:ce:d3:99:f9:4e:81:ca:47:08:a7:60:d7:9b:7c:d7:03:cf:
e3:b4:13:43:67:54:d8:ca:e8:81:93:e1:0d:13:00:e3:8b:be:
d6:0d:80:cc:cc:e9:26:af:ad:41:59:6d:80:bd:d0:d1:c8:71:
b1:1a:4d:f7:1d:fe:36:e8:98:c1:4a:90:bd:9a:45:55:64:a3:
89:26:dd:d4:53:1a:af:6c:4d:0a:03:2b:39:73:74:11:60:30:
94:ca:1e:0d:47:4e:d8:91:05:fb:0e:b7:e8:68:96:a4:41:c0:
e5:1e:4a:c9:41:cf:8a:2d:4b:ad:5e:56:38:ac:5e:75:c3:77:
71:f5:19:4b:c8:56:42:50:54:57:37:df:03:82:1f:da:1b:03:
48:a4:23:46:ef:61:28:e6:73:bb:7b:6e:35:a0:33:97:f0:97:
67:7c:c8:37:bf:e7:90:1b:6c:45:ba:21:95:1b:83:b0:84:2b:
01:dd:6d:46:15:14:36:2f:e9:70:c6:80:03:5d:aa:61:6c:57:
96:4e:61:ed:05:9f:5d:f3:88:c7:37:85:f9:f5:65:2f:e1:06:
18:7c:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:50:55 2026 by rpki-client