Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
File: kQqsM3Py-sbMJF86xNHAVeUez0s.mft (raw, json)
Hash identifier: u8Ax/g4NFHG//w+bzbnjC0U3B9hnDiaHxzCTwgPMliU=
Subject key identifier: 35:16:75:70:4D:A8:C5:D4:E3:2E:90:ED:66:32:C9:A0:24:18:CA:D9
Authority key identifier: 91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
Certificate issuer: /CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Certificate serial: 01A0D2005524E521B8BB7B0619B75AE1C219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:00:32 +0000
Manifest this update: Thu 24 Sep 2026 06:00:32 +0000
Manifest next update: Fri 25 Sep 2026 06:00:32 +0000
Files and hashes: 1: KYD6XzrkSS5tLIFk-jkMZVww9sM.roa (hash: p62+sq33aHEU0rrARoKXfQwBAMwoDKlkx4HTxszJktY=)
2: LLGYVsOaS1zkUkzkS8SRF7GG4PA.roa (hash: 5qQkG5GA0vL9xdZjlKuNfICEj7ccLwak75srLkqU+GQ=)
3: kQqsM3Py-sbMJF86xNHAVeUez0s.crl (hash: +V7q0IpsDVaPwpj5y3Llbl1h7Y0Z7G43kxo4dvFqNfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:55:24:e5:21:b8:bb:7b:06:19:b7:5a:e1:c2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Validity
Not Before: Sep 24 06:00:32 2026 GMT
Not After : Sep 25 06:00:32 2026 GMT
Subject: CN=351675704da8c5d4e32e90ed6632c9a02418cad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:10:96:be:84:fa:13:d6:26:7c:84:52:e5:
b2:82:ca:6c:20:e5:2f:e9:cf:15:7b:be:b2:e1:41:
05:32:7c:12:13:ab:e3:57:b1:31:22:e8:c9:82:28:
6c:0b:40:cc:5e:50:c7:1b:75:9d:69:e1:9a:9c:b4:
01:e5:90:02:46:97:09:57:98:f9:e1:3a:a8:62:c1:
42:04:47:fc:b2:b5:e8:21:18:ca:94:18:0f:c2:b2:
de:a1:9a:f2:0b:c8:88:01:7a:8c:9a:d1:5d:fc:c9:
a2:4c:10:45:2c:1f:89:2b:7c:b5:d9:01:39:a5:21:
54:f2:d1:87:2b:bc:d4:d2:81:cc:6b:94:53:8d:f4:
bd:4e:49:40:59:41:aa:dc:3f:29:24:73:02:88:97:
2f:b3:2d:e3:6d:2d:53:1e:be:59:1f:da:eb:94:aa:
71:d7:3e:08:e4:a8:de:57:9d:56:ad:85:45:5b:00:
e3:97:90:56:f5:57:e9:7f:50:b9:78:75:17:b3:3d:
b6:60:96:c4:80:b6:18:f0:53:0e:b8:c0:96:f0:2a:
53:a6:13:f2:67:74:2c:0d:bf:e9:43:b6:29:51:37:
4e:93:de:f2:0a:ac:af:66:f7:6d:bf:8a:0d:52:82:
23:0c:ac:e2:8e:a4:48:e1:5e:48:7a:ab:b6:78:94:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:75:70:4D:A8:C5:D4:E3:2E:90:ED:66:32:C9:A0:24:18:CA:D9
X509v3 Authority Key Identifier:
keyid:91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:64:d5:53:3d:fe:f9:4e:74:a1:39:62:0d:27:14:c4:77:0b:
90:15:7e:f6:67:3b:22:be:5e:f5:87:a4:f9:20:68:19:d3:2b:
c7:99:6d:e8:41:55:73:2f:3c:e2:b5:31:ef:9e:15:7c:d1:34:
10:da:9b:77:de:a4:46:89:44:cf:6b:24:6c:28:0e:bc:01:fd:
5f:bc:1f:c8:b9:c3:20:35:fd:b2:d0:6e:ff:bd:06:e2:fc:84:
df:b4:69:65:3c:f8:c4:d7:0d:87:c9:bb:fb:75:66:c0:27:11:
17:89:99:af:10:e0:05:fc:0b:87:1a:ca:91:9a:c3:5d:6b:d1:
03:9f:64:5e:7d:37:cb:6f:23:54:56:e1:e4:5a:04:da:3c:47:
98:0f:43:a5:dc:b8:a2:cd:3d:e4:e7:7e:77:ba:a1:92:b9:ba:
73:69:fd:01:57:34:23:b8:68:98:54:ed:e1:d1:1f:d3:96:3f:
6c:80:72:b5:ea:71:a5:06:db:2b:a1:a7:a5:89:be:cb:ef:0f:
22:36:52:b1:ec:6a:2a:f5:d6:d8:14:19:e4:5f:96:8c:a9:0e:
d4:21:8a:f1:91:38:87:7f:8f:e6:ef:b8:95:d9:a8:7d:32:4b:
2b:b2:5a:e9:02:c0:62:00:1d:e9:1d:d1:8e:f8:45:27:b1:82:
fe:ae:05:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:09:12 2026 by rpki-client