Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
File: kQqsM3Py-sbMJF86xNHAVeUez0s.mft (raw, json)
Hash identifier: oDkEqRJcOH6ktwyOYjNdBbhLCky5yAYwQZpSaOisq/w=
Subject key identifier: 71:BB:0F:B9:DF:AB:B5:08:6C:FF:C0:19:73:B4:CB:AB:29:49:CB:5A
Authority key identifier: 91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
Certificate issuer: /CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Certificate serial: 01A12EB364868DE36D6E241D49AB5FDDD8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
Manifest number: 0116
Signing time: Mon 12 Oct 2026 06:01:10 +0000
Manifest this update: Mon 12 Oct 2026 06:01:10 +0000
Manifest next update: Tue 13 Oct 2026 06:01:10 +0000
Files and hashes: 1: KYD6XzrkSS5tLIFk-jkMZVww9sM.roa (hash: p62+sq33aHEU0rrARoKXfQwBAMwoDKlkx4HTxszJktY=)
2: LLGYVsOaS1zkUkzkS8SRF7GG4PA.roa (hash: 5qQkG5GA0vL9xdZjlKuNfICEj7ccLwak75srLkqU+GQ=)
3: kQqsM3Py-sbMJF86xNHAVeUez0s.crl (hash: 6/EeyTH7Jb+1b/t1VUU7g/HxM0nF/CsbWwDa+8xehwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:b3:64:86:8d:e3:6d:6e:24:1d:49:ab:5f:dd:d8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Validity
Not Before: Oct 12 06:01:10 2026 GMT
Not After : Oct 13 06:01:10 2026 GMT
Subject: CN=71bb0fb9dfabb5086cffc01973b4cbab2949cb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:7c:b7:b1:bf:c2:ea:9b:62:e1:2f:1a:8f:
68:e6:9a:48:4b:c6:1d:66:58:ca:c5:ec:f1:24:56:
c3:4d:40:d1:0d:ed:59:58:09:47:5f:d8:51:c9:10:
c0:5b:a5:d0:f8:86:1d:48:cd:b1:a3:1c:42:5b:25:
43:88:ad:52:23:11:ae:50:97:a9:dc:49:5c:6d:2b:
28:50:b8:f4:08:7c:57:18:19:de:a8:82:41:7a:31:
c5:57:c7:db:81:da:75:e4:4c:7c:78:df:7c:b3:d3:
22:cd:30:98:b5:80:cf:0a:c4:c2:d9:88:e4:c9:04:
0d:a1:8d:4f:ac:3c:b3:00:be:69:0c:fe:b5:f6:b8:
f8:a7:dc:25:9f:23:36:89:57:40:f2:43:34:0e:42:
f8:bc:15:a9:49:8e:84:3a:eb:11:55:be:38:cc:eb:
d0:e6:40:82:14:84:26:24:04:c2:37:09:b7:2c:4c:
dd:9a:98:2e:b4:ee:3d:f7:13:aa:5b:58:bb:00:51:
d1:1e:c0:fc:4e:75:12:93:69:e6:fb:6b:9a:83:e6:
37:47:6e:2c:4e:bb:68:7f:75:06:1b:d9:d1:a7:40:
e5:31:e1:a7:1c:6a:f9:6a:5d:50:51:0e:73:78:f8:
c8:f2:16:66:6f:1a:34:87:f3:90:d3:11:df:09:29:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BB:0F:B9:DF:AB:B5:08:6C:FF:C0:19:73:B4:CB:AB:29:49:CB:5A
X509v3 Authority Key Identifier:
keyid:91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c3:e7:f3:17:27:cb:20:8c:a4:8c:97:bc:85:4d:aa:97:1f:
30:33:20:f8:30:71:d4:66:a5:14:1c:0d:db:54:fd:1f:f1:02:
26:9e:91:d1:6c:bc:d4:7f:8b:77:95:86:c4:ab:6f:be:3d:b4:
a4:c8:e2:30:52:3a:0a:fe:7c:fe:16:17:68:43:61:cf:dd:e6:
47:5b:33:44:f1:1d:af:55:65:0f:c5:25:e4:e7:2d:fb:20:d6:
71:30:28:c9:fa:fc:74:4a:8a:c1:c4:84:ea:8c:6d:7b:a4:33:
60:cb:f8:00:37:ca:f5:8f:b5:ee:e1:8e:94:a1:db:ab:f3:06:
28:ca:b0:3f:d2:d0:60:f4:b7:9b:f1:fe:85:a2:c2:87:ac:a9:
4c:f4:e7:40:34:86:66:90:e4:ab:9f:0b:c0:85:65:f7:d8:ae:
18:64:ed:34:4f:41:89:77:0a:c8:50:76:4f:16:9b:8d:5a:02:
86:71:8e:3a:bf:dc:fa:fc:ac:2c:e1:e4:ec:55:8e:ec:58:a6:
5a:a6:b6:12:9a:44:f7:53:01:c9:c1:bb:b6:15:87:fd:3d:9a:
4e:5c:03:95:e8:e7:e1:47:07:0b:7c:2b:6b:cd:d6:b8:a1:30:
53:3a:d2:db:63:ea:f9:c6:68:cb:bd:41:9d:20:ef:73:c0:6d:
ed:ac:84:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:02:55 2026 by rpki-client