Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
File: kQqsM3Py-sbMJF86xNHAVeUez0s.mft (raw, json)
Hash identifier: AG9dPp9REPmhwJ0sZdb+6YifwSib68cxl2P0ehTNBEw=
Subject key identifier: 88:33:18:9A:EF:7B:07:0A:27:7C:24:00:C6:26:30:33:05:DE:1B:33
Authority key identifier: 91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
Certificate issuer: /CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Certificate serial: 01A0C09F015690C0480DD3B79A5614A794F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
Manifest number: DD
Signing time: Sun 20 Sep 2026 21:00:41 +0000
Manifest this update: Sun 20 Sep 2026 21:00:41 +0000
Manifest next update: Mon 21 Sep 2026 21:00:41 +0000
Files and hashes: 1: KYD6XzrkSS5tLIFk-jkMZVww9sM.roa (hash: p62+sq33aHEU0rrARoKXfQwBAMwoDKlkx4HTxszJktY=)
2: LLGYVsOaS1zkUkzkS8SRF7GG4PA.roa (hash: 5qQkG5GA0vL9xdZjlKuNfICEj7ccLwak75srLkqU+GQ=)
3: kQqsM3Py-sbMJF86xNHAVeUez0s.crl (hash: MjoGiw+KgQjSQVyhSyrgWNlF5v5fpWZ5seNkSGE3BWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:01:56:90:c0:48:0d:d3:b7:9a:56:14:a7:94:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Validity
Not Before: Sep 20 21:00:41 2026 GMT
Not After : Sep 21 21:00:41 2026 GMT
Subject: CN=8833189aef7b070a277c2400c626303305de1b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:05:60:d1:b2:be:8a:03:dd:40:21:21:04:
51:75:f7:e8:06:70:35:53:73:3c:3f:07:34:fb:78:
ba:b6:7f:19:fe:94:d5:c9:f0:28:ed:d3:4a:79:b6:
25:48:d6:e2:fe:82:2c:66:32:2e:0b:6f:8a:39:af:
3d:d2:70:f3:1c:4d:c8:9a:f0:50:66:38:6c:0a:a7:
e2:20:23:97:c2:75:0b:be:a4:bf:ad:a0:2e:68:45:
15:e8:09:4d:12:9b:74:c7:a2:b8:ba:e0:ec:f2:c3:
55:8b:a6:ae:fd:fc:71:48:9e:b0:3c:07:56:82:78:
5c:e9:6c:98:7c:68:31:b0:b6:13:6b:87:4a:e6:e6:
e9:c3:11:e3:13:dd:09:cc:91:db:9c:c7:7b:c7:eb:
34:16:e4:a9:23:b4:90:ab:13:03:5f:b6:30:8f:cb:
aa:04:57:96:08:d4:29:3d:a3:32:25:02:44:09:cd:
8b:5c:b3:52:d0:57:49:b5:22:48:21:4e:93:57:a4:
07:3e:95:5e:c3:ba:2b:3d:d1:7a:78:55:fb:4b:fc:
d3:84:e3:b1:c1:5a:cd:b7:f8:75:79:46:28:d9:c0:
ac:1e:87:82:ec:42:48:91:f5:cc:b5:fb:ff:2d:76:
e4:d2:2d:33:d8:32:33:6e:76:ad:0e:f6:0a:14:60:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:33:18:9A:EF:7B:07:0A:27:7C:24:00:C6:26:30:33:05:DE:1B:33
X509v3 Authority Key Identifier:
keyid:91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:de:ec:ab:71:b4:fd:00:92:f6:d8:15:59:43:aa:ba:18:64:
0b:a7:ba:92:8c:96:1d:dd:4e:02:98:f6:50:88:80:8e:74:7b:
e9:b8:b5:b2:86:4b:5c:64:6c:e5:da:3e:a3:c5:c5:55:a1:c3:
19:72:ae:89:84:e3:e7:6e:81:99:b2:27:6b:8f:6b:63:c8:0d:
9a:25:de:de:26:3e:fe:11:24:de:3a:d1:26:59:3e:2b:1f:55:
4f:a0:8e:0e:ab:88:58:e1:f2:52:e6:d1:0f:67:89:7a:d0:fe:
7f:da:b4:9d:eb:30:9b:00:ff:0d:9d:6f:44:15:3c:4a:5b:0f:
19:11:e4:a5:0c:a0:b5:09:ef:ce:b0:3d:f3:4f:da:57:03:ee:
6e:ec:8c:13:30:58:02:d6:f6:4c:b9:37:23:05:87:68:13:02:
da:57:1c:e0:8b:42:d9:b9:17:2d:26:40:d1:f2:9e:71:8a:e5:
da:e9:a0:25:6d:80:1e:80:d7:67:5b:df:9c:c8:19:c1:bc:f7:
10:c7:af:33:4e:56:0c:f1:6b:fb:b8:9e:42:24:bc:5b:7f:64:
8d:f8:4e:2a:4f:16:e0:9b:69:cf:e4:9b:db:e0:a9:b3:07:8e:
d4:ef:67:4c:47:b2:dc:3e:77:fa:f2:98:08:05:c7:27:5f:28:
e5:14:10:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:51:33 2026 by rpki-client