Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
File: K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft (raw, json)
Hash identifier: YVnJZfW2XMDmRjdTXodntlSfWraCKrmZA+XyFg+Mzac=
Subject key identifier: 16:5E:06:7F:36:18:5C:13:D0:82:28:BD:B2:6B:D0:9C:CF:65:5F:EC
Authority key identifier: 2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
Certificate issuer: /CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Certificate serial: 01A001DD3CD18DF3F239FA62D8F13A295522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
Manifest number: 0198
Signing time: Fri 14 Aug 2026 20:01:11 +0000
Manifest this update: Fri 14 Aug 2026 20:01:11 +0000
Manifest next update: Sat 15 Aug 2026 20:01:11 +0000
Files and hashes: 1: 9SPgem7U2gCiDmpSRDU-ukyx9XE.roa (hash: wROgdUdJkJ9IiAUVLRETnuoxv5G7976oJBmCHeMjAS8=)
2: K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl (hash: 8tRg/hqQkAOIOJaZ6/soIyMzIMhSqrVURxpJTUgjGmY=)
3: MKKIUDUGz4Z95WLC3D6fWiIbk4U.roa (hash: WBcMg0RsrWd3UHeoKkaLJ8RBFUBx59miWOsFBpkS46c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:3c:d1:8d:f3:f2:39:fa:62:d8:f1:3a:29:55:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Validity
Not Before: Aug 14 20:01:11 2026 GMT
Not After : Aug 15 20:01:11 2026 GMT
Subject: CN=165e067f36185c13d08228bdb26bd09ccf655fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:6b:17:a7:f6:72:e6:16:1a:f5:63:c1:61:
0a:89:d2:a8:bf:a0:3e:1e:d2:d8:4d:69:91:7c:2d:
10:95:c2:76:a3:d5:0a:fd:53:85:4e:d7:b8:7c:38:
74:71:ec:7a:ef:48:29:12:b2:6d:b1:d0:b5:d7:33:
d7:7f:f8:ed:e1:01:3d:21:2d:4e:97:56:b6:6f:a3:
3c:7c:0d:4b:18:2f:56:44:b7:8a:9e:7a:c6:f8:ad:
51:17:20:e6:16:ad:08:bf:53:a8:65:65:b8:d6:1c:
19:0a:1f:66:3c:c9:df:97:47:ee:4d:62:6b:dc:6d:
2e:67:4f:f4:b0:4f:44:5e:e4:68:40:02:0c:9d:d5:
33:be:d1:7d:59:0d:cd:bf:31:ac:1d:81:98:f1:24:
da:e9:0d:14:4d:36:3c:c7:54:2d:c4:53:98:85:95:
a9:fb:e1:c2:f1:92:0b:31:62:3a:c5:48:d3:56:b6:
83:2f:49:66:21:56:9c:b5:73:a4:11:2f:ba:2c:0f:
53:8c:ca:2d:7c:f1:c0:b4:aa:2c:6f:ee:2d:7a:36:
f2:eb:55:0a:81:5a:79:2f:c3:3f:8d:70:b0:8c:7e:
d2:ad:c1:b8:29:cc:8f:65:1c:1a:7c:60:4b:fb:14:
9c:7c:9e:07:76:55:6b:e1:22:f3:f7:43:b8:f0:65:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5E:06:7F:36:18:5C:13:D0:82:28:BD:B2:6B:D0:9C:CF:65:5F:EC
X509v3 Authority Key Identifier:
keyid:2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7f:5f:16:00:52:82:89:49:31:25:ea:c2:35:48:b9:5c:88:
41:fe:6c:1a:f0:62:c5:ff:7f:24:0b:35:3f:78:0f:38:3e:a8:
e9:2e:a3:83:c9:a6:93:16:63:29:d8:a2:fb:fd:e5:73:2f:ef:
87:35:19:f7:16:8b:8f:e9:87:e7:8c:be:05:c8:fa:6f:6b:a7:
3a:90:4f:d2:02:d6:4e:c8:9e:67:16:d4:10:c2:18:1b:b7:41:
1d:57:67:2b:1b:39:10:58:60:e3:bf:a4:5a:97:79:2f:46:7e:
23:2c:64:11:d9:43:aa:4a:9b:6c:3f:45:ca:67:3c:01:70:15:
8a:00:eb:47:50:a0:d0:23:74:6d:8b:b2:bb:2b:2d:ab:ee:90:
f2:f8:f1:d6:98:c7:da:26:a8:5a:d4:b0:36:a8:66:c5:4c:71:
de:06:f5:b3:2c:ad:13:28:8b:1d:03:99:dd:79:d2:bb:f9:42:
03:aa:00:a6:85:9d:e8:2a:7d:92:b8:6f:25:95:2d:a1:04:a6:
0c:1f:21:af:2e:63:27:4e:96:67:81:b8:d7:12:e4:28:cc:da:
ba:25:51:78:4a:50:c7:55:fd:8e:e9:1a:ad:f6:74:a6:28:6a:
be:bb:e7:0f:7b:b3:31:96:7b:2e:72:72:14:ad:ee:20:af:5f:
33:e3:2a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:59 2026 by rpki-client