Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
File: kQqsM3Py-sbMJF86xNHAVeUez0s.mft (raw, json)
Hash identifier: xGH8hjSh7SeyGrGfzab/KB4cibofcrDcVzWjhypd8TA=
Subject key identifier: 43:2C:36:A9:1A:62:E3:5E:E4:AA:E3:45:BA:3D:98:99:20:D5:C9:21
Authority key identifier: 91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
Certificate issuer: /CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Certificate serial: 01A0412AFC9519CD8DAA5A3C0905D3AC0F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:02:11 +0000
Manifest this update: Thu 27 Aug 2026 03:02:11 +0000
Manifest next update: Fri 28 Aug 2026 03:02:11 +0000
Files and hashes: 1: KYD6XzrkSS5tLIFk-jkMZVww9sM.roa (hash: p62+sq33aHEU0rrARoKXfQwBAMwoDKlkx4HTxszJktY=)
2: LLGYVsOaS1zkUkzkS8SRF7GG4PA.roa (hash: 5qQkG5GA0vL9xdZjlKuNfICEj7ccLwak75srLkqU+GQ=)
3: kQqsM3Py-sbMJF86xNHAVeUez0s.crl (hash: yD7yetgCPicU1m/E2gFRlmyQ2a5JUg6lsOW0AVqFaCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:fc:95:19:cd:8d:aa:5a:3c:09:05:d3:ac:0f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Validity
Not Before: Aug 27 03:02:11 2026 GMT
Not After : Aug 28 03:02:11 2026 GMT
Subject: CN=432c36a91a62e35ee4aae345ba3d989920d5c921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c9:55:df:78:05:84:e9:a2:b2:5a:53:eb:ca:
ff:de:62:0b:5d:39:68:3c:7b:4b:0d:29:c0:b5:6f:
d1:5f:4d:3b:f5:ee:38:0a:55:75:5e:02:26:ae:f4:
5a:47:ad:4e:b9:9c:10:cd:9c:0c:8c:8b:97:e7:fa:
eb:7d:72:dd:98:b6:2f:2d:6d:c9:08:e5:2c:a4:b0:
3b:c9:1b:9a:b2:ae:8f:64:f2:99:81:b1:3b:73:54:
24:eb:a2:f6:8a:12:53:81:ea:30:c6:4c:15:80:74:
5f:aa:32:96:14:1c:90:2f:af:1a:37:4d:f1:f1:85:
c9:10:4c:6a:c5:11:fc:d1:00:28:04:74:0a:8f:2b:
2f:95:c9:69:be:27:f8:77:73:2c:be:53:7d:2b:c3:
45:54:04:1e:e9:88:fe:94:35:07:47:a8:d3:f2:c9:
4a:6c:75:9f:73:a5:54:bd:a7:df:39:5c:a8:34:41:
fb:0c:3b:22:8a:aa:47:9f:df:43:37:83:1b:f8:f0:
a3:a8:82:39:68:07:54:51:f0:b7:8b:ac:c3:12:e9:
66:68:cd:2c:81:9a:84:d0:38:cb:7e:28:09:b8:f6:
96:df:b6:53:cd:ed:e2:93:99:e9:3d:36:09:ce:d0:
cd:f1:e5:b6:ef:f2:78:b5:63:e6:59:dc:c8:f1:4f:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2C:36:A9:1A:62:E3:5E:E4:AA:E3:45:BA:3D:98:99:20:D5:C9:21
X509v3 Authority Key Identifier:
keyid:91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:51:2f:8f:61:dd:85:18:3a:fa:6a:4d:fe:51:a2:32:f3:86:
e8:89:0c:6a:3a:6c:e1:70:80:9d:28:09:ec:7e:3a:ee:a3:78:
a3:bb:bc:87:cc:22:98:46:46:f1:77:6f:43:38:9d:54:8e:32:
aa:3e:2c:e5:7f:e0:9f:bd:6b:24:3e:6d:ac:0b:0e:9a:94:f1:
f7:a2:fe:ce:5e:d8:91:76:55:13:e5:11:0b:57:6d:13:6a:e4:
9f:eb:d6:05:73:70:92:22:9f:eb:03:0c:e4:98:8e:2d:18:b0:
47:c3:a0:90:88:44:78:05:af:e9:1b:86:06:a0:68:20:c6:a5:
d1:8a:72:46:14:c3:72:a5:ad:74:bf:2c:86:22:c4:18:4f:df:
cc:db:ed:c8:9f:50:66:e1:e8:6d:3f:48:ce:4a:61:31:14:45:
2b:26:0f:ff:b1:f2:93:8f:34:c6:c4:ae:8d:8e:b4:34:29:bd:
4e:9b:a7:78:d9:d1:59:2d:58:71:c1:18:54:9d:9a:f1:ad:43:
32:f3:3a:7b:b7:7b:18:b2:d0:6a:22:17:7d:88:e9:c9:38:75:
4b:d7:78:e0:6d:42:c9:70:33:c0:4d:e2:a3:d8:7b:b0:a1:ed:
1b:d7:4f:58:be:4a:6e:48:79:a5:11:e4:b9:7d:4a:b0:60:3a:
84:88:5a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:36:05 2026 by rpki-client