Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
File: kQqsM3Py-sbMJF86xNHAVeUez0s.mft (raw, json)
Hash identifier: QqAXyvdhBhSlL/HDcQ+JDkSWTqySrVTiCEw+suepscA=
Subject key identifier: C3:E1:2E:67:50:F9:FA:8A:17:2F:8C:4B:68:35:63:0F:DA:87:BB:C8
Authority key identifier: 91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
Certificate issuer: /CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Certificate serial: 019F8F7EA31AE858147C1B518DF60704FED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:08 +0000
Manifest this update: Thu 23 Jul 2026 15:01:08 +0000
Manifest next update: Fri 24 Jul 2026 15:01:08 +0000
Files and hashes: 1: KYD6XzrkSS5tLIFk-jkMZVww9sM.roa (hash: p62+sq33aHEU0rrARoKXfQwBAMwoDKlkx4HTxszJktY=)
2: LLGYVsOaS1zkUkzkS8SRF7GG4PA.roa (hash: 5qQkG5GA0vL9xdZjlKuNfICEj7ccLwak75srLkqU+GQ=)
3: kQqsM3Py-sbMJF86xNHAVeUez0s.crl (hash: gVqdNpNP8zrNMS8zVVbHWHusn7qbU9pONtoyovY1D7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:a3:1a:e8:58:14:7c:1b:51:8d:f6:07:04:fe:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Validity
Not Before: Jul 23 15:01:08 2026 GMT
Not After : Jul 24 15:01:08 2026 GMT
Subject: CN=c3e12e6750f9fa8a172f8c4b6835630fda87bbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:9d:51:73:86:46:ef:a5:84:26:f7:89:27:
4a:a2:85:cf:0a:f4:8e:8a:9d:53:f4:2b:bc:fc:67:
92:5b:de:1d:d4:28:6e:ef:2f:17:97:f3:3a:3b:64:
b7:43:13:a2:c5:d5:2d:29:0f:17:30:e1:89:2d:66:
0b:27:14:26:d6:31:04:c1:c5:bb:aa:cc:51:f3:bb:
8a:03:8a:f6:9b:6c:f0:b0:2d:71:51:5b:14:5b:9e:
5c:72:5e:69:68:37:6b:d6:2e:b9:8d:24:7b:0a:15:
08:bb:17:02:69:7f:e0:65:bb:a3:6f:90:bc:6e:70:
64:34:1f:0c:a8:73:fa:1a:20:a9:b6:64:d3:7b:60:
c2:91:de:26:72:14:02:55:60:5c:de:20:37:69:42:
bd:97:a9:d8:ed:fb:fe:5d:28:d1:20:a3:a4:95:a3:
f7:58:8c:8b:d5:bf:83:a5:de:af:bc:e3:f8:36:e5:
52:38:d1:c8:d1:90:55:8b:f7:73:37:eb:bd:f3:e1:
34:d8:96:21:60:d8:57:aa:2e:9a:b9:2d:2c:75:07:
d3:5a:6a:e5:9a:54:f3:a8:19:bc:1f:41:b2:ac:07:
8d:d8:07:df:a5:26:ed:b9:b9:29:82:29:01:10:f0:
ef:7c:9c:44:fe:a2:a0:45:71:b1:56:a9:20:58:52:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E1:2E:67:50:F9:FA:8A:17:2F:8C:4B:68:35:63:0F:DA:87:BB:C8
X509v3 Authority Key Identifier:
keyid:91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:60:eb:d8:3c:c7:ae:9b:c7:e9:0a:dc:96:21:6e:f3:2f:d5:
83:10:1e:85:d6:36:2a:ae:b5:69:86:2e:ac:88:a3:8b:1b:49:
2f:cd:5b:13:c0:2e:ad:23:32:8f:eb:a7:f0:fa:ee:7d:08:11:
d8:b9:c9:df:44:82:17:20:1b:e9:a3:a7:52:26:71:6a:27:fb:
82:5d:e3:ad:3b:85:7f:88:ce:b4:d9:e1:db:dc:21:32:39:37:
81:d9:32:8c:5e:8b:f3:c7:27:b3:47:2e:2b:69:9f:f2:22:b4:
f5:7c:6c:ed:b6:19:7d:cd:7a:06:81:2a:ae:37:b1:ee:da:18:
e6:8a:2d:71:e4:91:22:4f:48:80:ec:d0:33:cb:fa:52:a2:06:
c6:1f:5b:d4:9a:c7:a4:cd:50:dd:ed:6e:02:61:78:6f:79:4c:
6c:19:b3:03:3d:d6:6a:1c:6a:27:b6:52:84:ed:60:95:1a:e1:
91:45:be:c9:84:f3:ce:2d:40:f4:55:27:ba:a8:e8:19:a8:d6:
dd:33:a2:09:69:90:26:d2:69:49:c8:12:0c:23:d7:6e:ed:49:
67:74:41:f4:ae:2e:dd:5b:d0:cb:df:cf:ea:ff:13:4e:06:03:
33:41:81:a6:d8:71:a2:92:83:1e:9a:43:48:12:c2:dc:83:bd:
58:70:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:28 2026 by rpki-client