Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
File: K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft (raw, json)
Hash identifier: kpBC81g9bxUWKXnhr6ALHRe/Za83tgNkRQOkvjLxHHQ=
Subject key identifier: A3:AB:E6:1B:B5:BF:C1:AF:4C:4B:86:5C:94:33:E3:28:1A:D8:F9:6E
Authority key identifier: 2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
Certificate issuer: /CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Certificate serial: 019D37532C355BADB0963B6A2F6CBF1B9366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
Manifest number: 26
Signing time: Sun 29 Mar 2026 02:01:30 +0000
Manifest this update: Sun 29 Mar 2026 02:01:30 +0000
Manifest next update: Mon 30 Mar 2026 02:01:30 +0000
Files and hashes: 1: 9SPgem7U2gCiDmpSRDU-ukyx9XE.roa (hash: wROgdUdJkJ9IiAUVLRETnuoxv5G7976oJBmCHeMjAS8=)
2: K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl (hash: q9OROSoM3bFgH9ULYYdhj7gg10Sogg0pjOrjFU8NUh4=)
3: MKKIUDUGz4Z95WLC3D6fWiIbk4U.roa (hash: WBcMg0RsrWd3UHeoKkaLJ8RBFUBx59miWOsFBpkS46c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:2c:35:5b:ad:b0:96:3b:6a:2f:6c:bf:1b:93:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5d0851911bc949d0f47c5d33d0a607b378cdf1
Validity
Not Before: Mar 29 02:01:30 2026 GMT
Not After : Mar 30 02:01:30 2026 GMT
Subject: CN=a3abe61bb5bfc1af4c4b865c9433e3281ad8f96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:e8:41:3a:ff:ac:7c:94:12:e2:e2:0e:6f:
7d:ae:b0:54:d7:fd:3d:50:59:0d:da:83:9a:50:ed:
b1:99:81:d9:fc:ec:b5:c0:cb:15:b4:1c:89:d3:ad:
88:a7:4d:42:6d:83:aa:8c:4d:49:a5:15:69:37:d3:
de:4e:6e:a6:09:c4:e5:d7:cf:62:eb:6f:78:ad:67:
4b:cb:b7:57:83:6b:16:ff:12:2f:bd:d5:f3:08:f3:
d4:cb:ae:e4:20:65:09:c3:94:af:84:44:0e:2d:1e:
f8:bf:c5:1e:a6:3e:98:d9:c7:25:95:36:3e:82:77:
de:25:d3:d0:88:37:e0:d8:de:b3:69:b1:af:93:53:
6c:19:a4:42:6d:af:38:66:0d:2e:16:50:eb:aa:d7:
6c:2c:e4:6d:db:07:66:c0:8c:64:cc:72:73:00:9f:
d3:ea:43:8e:54:b5:4e:09:82:64:43:44:89:f7:23:
51:44:db:9c:8e:5e:db:ee:9a:a2:0b:74:bc:d7:ae:
a9:ae:8b:a3:be:a0:98:d0:53:86:da:eb:23:f2:d1:
7e:e2:b6:91:c9:31:93:33:0e:ad:09:1b:1e:65:0f:
f1:02:f5:9b:56:7e:ab:94:d3:95:45:9a:f6:a7:22:
e6:ef:ae:43:6a:6d:38:d9:b8:30:d8:b7:91:9b:12:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AB:E6:1B:B5:BF:C1:AF:4C:4B:86:5C:94:33:E3:28:1A:D8:F9:6E
X509v3 Authority Key Identifier:
keyid:2B:5D:08:51:91:1B:C9:49:D0:F4:7C:5D:33:D0:A6:07:B3:78:CD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K10IUZEbyUnQ9HxdM9CmB7N4zfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7ba2d0-7a28-4b8e-a67d-43219669a30b/1/K10IUZEbyUnQ9HxdM9CmB7N4zfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d7:ac:a8:92:f6:df:86:b2:5b:61:6f:52:8e:0c:93:80:cc:
39:e7:64:1b:31:ca:dc:2e:b7:47:a5:55:fc:23:01:20:96:ef:
a2:f1:42:e7:20:a1:e8:ea:bb:fb:4d:2d:3a:aa:b9:ca:68:76:
ed:e6:ae:24:03:5d:54:b0:dc:c4:5c:05:42:cb:5c:fa:f8:94:
47:e3:13:60:57:60:d4:e0:4b:be:d6:14:f7:67:00:cf:17:c6:
bb:71:ed:6c:4a:f2:59:2e:2d:f3:c3:81:4e:16:ec:b0:47:8d:
56:77:26:9c:6b:e6:cd:23:93:ea:3f:db:2c:51:bf:34:92:7b:
17:d3:a7:32:c1:05:92:3b:2b:10:53:63:a7:83:13:c0:44:34:
4b:ec:b0:d2:b8:d5:9b:30:06:cc:ca:16:a0:83:db:d3:43:be:
f1:51:b8:0e:1e:b2:ea:25:c3:70:e2:e3:60:ea:ba:ac:0c:d5:
17:bb:0e:f6:c1:78:89:9f:f9:84:fe:f4:f2:38:21:34:31:f6:
64:3c:76:83:6c:07:61:19:87:cf:d3:ef:84:82:91:96:28:31:
39:cf:5e:8c:f2:ce:3e:86:f1:49:f3:ff:2f:c7:97:ea:66:4a:
fa:13:3d:2c:c2:f7:76:08:cd:30:88:44:30:e5:59:9a:65:cf:
15:58:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:49 2026 by rpki-client