Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
File: kQqsM3Py-sbMJF86xNHAVeUez0s.mft (raw, json)
Hash identifier: 6pIknVwwgUTyNgftEya9zwEmzlh6ZT9W6lt4GfOKjHM=
Subject key identifier: CC:42:0C:4B:90:D3:A4:F6:DD:66:0C:29:5A:E7:5C:0B:78:2B:50:C6
Authority key identifier: 91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
Certificate issuer: /CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Certificate serial: 01A1DE70A7054204EE15301227E6A742D41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:26 +0000
Manifest this update: Sun 15 Nov 2026 09:01:26 +0000
Manifest next update: Mon 16 Nov 2026 09:01:26 +0000
Files and hashes: 1: KYD6XzrkSS5tLIFk-jkMZVww9sM.roa (hash: p62+sq33aHEU0rrARoKXfQwBAMwoDKlkx4HTxszJktY=)
2: LLGYVsOaS1zkUkzkS8SRF7GG4PA.roa (hash: 5qQkG5GA0vL9xdZjlKuNfICEj7ccLwak75srLkqU+GQ=)
3: kQqsM3Py-sbMJF86xNHAVeUez0s.crl (hash: SPLOKk5GV/F1v0kUk+oY2THUyXy7e/e/WrRe1Q9Rhac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:a7:05:42:04:ee:15:30:12:27:e6:a7:42:d4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Validity
Not Before: Nov 15 09:01:26 2026 GMT
Not After : Nov 16 09:01:26 2026 GMT
Subject: CN=cc420c4b90d3a4f6dd660c295ae75c0b782b50c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:17:fb:d1:db:c1:bb:3d:35:5b:d5:85:e2:
47:55:c0:4d:f1:22:76:54:0b:00:ba:dc:88:09:ca:
8f:5f:dc:b0:c6:0b:f6:40:85:5b:46:fa:1a:a8:78:
81:b8:a5:43:d3:37:c0:f9:0c:d8:5d:d5:78:c7:6d:
98:0c:a9:ec:2d:05:ce:a2:61:61:2d:a0:83:75:24:
16:fe:14:f8:a1:d1:4d:98:89:1f:31:5b:5e:96:76:
d2:93:b5:29:21:58:6d:2a:8d:0d:97:fb:db:ed:69:
21:75:5d:37:ba:51:78:4d:00:9d:14:b7:2e:c0:d6:
a8:70:ca:a6:36:2a:fb:bf:bc:b6:e6:0e:6a:65:d1:
32:ac:f2:ef:a1:c5:02:4d:7a:68:12:20:c8:ae:bf:
6d:31:83:cf:86:90:d7:0a:89:cc:0c:fd:4e:ed:c4:
cc:c3:dd:31:32:a9:05:f6:32:9a:aa:bf:a2:b4:3c:
db:c7:88:d5:89:c3:78:3c:52:a1:63:81:56:7a:7d:
82:cb:28:05:6e:39:34:bf:ba:2f:8a:19:41:e9:f6:
ed:5a:33:cd:23:24:13:e7:bf:44:10:e5:71:fc:8c:
84:6d:ea:b0:1f:dc:79:37:4b:b7:b8:41:a0:ca:de:
19:69:f6:9a:db:00:6a:19:45:44:8d:08:fc:f2:60:
69:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:42:0C:4B:90:D3:A4:F6:DD:66:0C:29:5A:E7:5C:0B:78:2B:50:C6
X509v3 Authority Key Identifier:
keyid:91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:dd:d8:19:47:10:9f:af:22:a1:95:4f:c2:20:e8:8d:d7:0d:
71:90:b3:0d:23:7d:6f:be:8c:b5:99:4c:c9:66:a0:a6:d3:e6:
63:65:ed:a7:8a:29:b4:5a:1e:05:71:38:ba:3a:92:af:53:37:
09:9e:0a:cc:09:f1:c0:d7:36:da:2c:e9:e4:5a:8f:99:c3:48:
3a:97:83:1d:5a:da:e8:03:52:f1:04:c3:2e:5d:e2:71:a3:9c:
9b:7f:4e:c9:b2:9b:f4:5f:e1:9b:99:0c:3c:d5:95:46:77:28:
11:5e:d5:0d:32:80:cf:6d:ec:de:0c:41:cc:e9:03:15:07:b1:
33:43:15:e2:3e:01:78:73:d4:ed:73:96:7b:a4:83:63:97:fb:
11:c8:ad:b2:7b:e6:26:b0:cf:2a:d9:1f:29:31:39:03:22:5c:
00:c1:97:a2:92:a6:1d:4c:03:5a:4c:de:38:43:86:8a:bf:de:
df:4d:35:56:e0:5e:0e:0c:fe:79:45:e8:75:d6:bd:06:7a:9d:
ac:d0:8a:80:c4:02:10:70:1d:95:82:7b:d0:bb:b2:25:e3:de:
1e:e3:7e:43:ef:f1:65:ed:b0:06:95:53:16:87:52:df:4d:d0:
96:63:8d:11:08:5f:aa:ff:93:ab:51:d0:d1:c8:49:1b:cc:c8:
d4:3c:4e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:47:33 2026 by rpki-client