Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
File: kQqsM3Py-sbMJF86xNHAVeUez0s.mft (raw, json)
Hash identifier: U/2Vtm0t0wLwJyasC72Uh4LeN+x58AE1xyRnfdrw0N8=
Subject key identifier: 62:06:69:1E:55:52:F7:6E:04:9B:23:AE:62:10:68:AC:52:F9:BB:E8
Authority key identifier: 91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
Certificate issuer: /CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Certificate serial: 019F577D4695948346C6DF789A2953E75A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
Manifest number: 22
Signing time: Sun 12 Jul 2026 18:00:55 +0000
Manifest this update: Sun 12 Jul 2026 18:00:55 +0000
Manifest next update: Mon 13 Jul 2026 18:00:55 +0000
Files and hashes: 1: KYD6XzrkSS5tLIFk-jkMZVww9sM.roa (hash: p62+sq33aHEU0rrARoKXfQwBAMwoDKlkx4HTxszJktY=)
2: LLGYVsOaS1zkUkzkS8SRF7GG4PA.roa (hash: 5qQkG5GA0vL9xdZjlKuNfICEj7ccLwak75srLkqU+GQ=)
3: kQqsM3Py-sbMJF86xNHAVeUez0s.crl (hash: MbFbedzTLmlDYWtPirAAUmlHKYnxsjnk7+iztlO+UX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:57:7d:46:95:94:83:46:c6:df:78:9a:29:53:e7:5a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Validity
Not Before: Jul 12 18:00:55 2026 GMT
Not After : Jul 13 18:00:55 2026 GMT
Subject: CN=6206691e5552f76e049b23ae621068ac52f9bbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:4b:46:3a:d3:dd:3b:b4:82:c5:74:36:e2:
fe:e7:f3:df:cf:90:11:5e:f8:11:bb:ba:8a:41:4b:
df:4c:b6:35:ba:4a:03:bc:a0:78:63:62:50:f0:00:
41:07:86:47:f9:71:0b:43:17:5a:45:b3:11:ad:b1:
5e:7d:30:d9:f2:09:64:e3:f1:e8:e4:08:eb:1c:0d:
ff:df:b8:f3:12:00:f1:b9:80:0a:9c:f6:9a:58:75:
e5:15:07:e3:56:52:b4:f8:a1:bd:ff:7d:67:ec:69:
e9:cc:3d:d5:ca:79:e1:3d:f9:72:bc:e2:c2:4b:ff:
f7:09:79:59:3e:cd:9a:12:b6:34:64:bd:13:cf:13:
a4:27:6e:96:ae:20:89:7b:9f:17:95:da:33:16:5e:
46:b5:5e:91:52:fb:b6:dd:62:68:31:1d:3f:66:54:
c7:e4:42:2b:24:fc:6a:7a:20:4a:b2:69:5e:f1:05:
63:50:bb:63:74:46:e8:a5:a7:ef:45:66:56:89:8b:
5c:3a:ae:27:99:d5:82:63:42:fb:d1:87:dd:c0:a6:
24:21:99:a5:cc:60:df:7d:e6:58:7f:2e:7c:db:dd:
69:60:34:4d:6c:b6:3c:e9:d1:81:a5:38:83:55:02:
e1:2b:5f:2a:fe:a7:cb:42:f6:a0:5e:b6:1c:a3:b0:
b3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:06:69:1E:55:52:F7:6E:04:9B:23:AE:62:10:68:AC:52:F9:BB:E8
X509v3 Authority Key Identifier:
keyid:91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:49:e5:f9:97:7e:cd:25:53:6e:63:44:ce:59:fd:1f:8e:de:
e2:21:2c:80:7f:92:a4:15:af:2c:e1:5b:fa:dc:2c:a3:e5:f6:
65:8f:80:62:08:46:d0:ef:34:49:72:e2:7d:c5:42:0f:f9:f9:
64:6e:9b:4f:70:d8:66:82:6b:0d:eb:c0:19:0f:32:7e:e6:f1:
58:f7:5a:f6:76:f4:08:b5:d1:fa:34:e0:cb:6b:75:6b:f2:31:
4f:4e:cc:a5:91:37:ff:46:4d:0d:76:ee:fa:77:ac:7a:84:a9:
d9:17:d9:c2:fd:aa:a3:d7:5c:6e:f1:8c:c5:29:4b:a1:8d:b2:
da:b4:78:26:9a:b6:d5:06:e8:93:c3:e2:07:dd:26:32:58:f8:
72:f2:da:fd:02:65:df:12:15:d8:6f:93:47:39:1d:da:90:55:
79:83:47:e9:df:3b:35:e2:c2:ca:23:62:9f:ed:fc:f3:9d:a5:
f2:d5:89:71:b8:3e:cb:ac:33:40:6e:9f:38:1b:84:31:2e:62:
3f:3f:1c:c0:91:e4:02:7d:b3:b2:27:b3:b3:c6:3e:c6:a2:e0:
ed:08:c2:c9:cc:98:82:fc:83:e4:29:d4:3d:fd:82:e6:ea:d6:
b3:5b:a4:f9:29:1f:a6:04:0a:af:38:da:e0:e2:a0:15:d7:d0:
7e:fb:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 04:08:49 2026 by rpki-client