Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: LmAt8USgCEIiWI3VEsZDoXT7oR/aKvHNll7CyyAddV0=
Subject key identifier: 87:C0:FB:66:BB:18:5B:CA:1A:99:0C:FB:28:A7:0A:73:EE:5C:6D:3F
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 01A1A601B704043E65ED76C734797A3D4611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 1AD9
Signing time: Wed 04 Nov 2026 10:01:32 +0000
Manifest this update: Wed 04 Nov 2026 10:01:32 +0000
Manifest next update: Thu 05 Nov 2026 10:01:32 +0000
Files and hashes: 1: OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa (hash: 16WKJl9nAt0F5mIivt4fYmu6w5/8Iqob4RhznilyhtM=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: vrMdi7cTM7jibO98ht960a7hd9PCXwA3FBptSDPSOHk=)
3: ken38hVxmy14aPMAbzAPgPTg5Qc.roa (hash: TJhvTJDZL4uFVPaDoKqNX3HyglY2ChDkoRzq0njH+TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:01:b7:04:04:3e:65:ed:76:c7:34:79:7a:3d:46:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Nov 4 10:01:32 2026 GMT
Not After : Nov 5 10:01:32 2026 GMT
Subject: CN=87c0fb66bb185bca1a990cfb28a70a73ee5c6d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:be:89:5f:ea:1b:1e:7d:c9:61:13:a8:92:
0d:cc:f3:7a:1b:76:69:c2:9a:01:db:f1:ed:82:c5:
d8:11:97:4f:9f:20:82:3e:d8:cf:f1:50:68:3b:62:
9a:ce:32:5a:8c:b3:e9:02:3d:5f:16:22:9e:cf:b2:
e3:21:70:e1:0b:98:e0:36:9d:39:e1:7e:bc:5f:4c:
54:36:bf:5a:e8:af:f2:cb:37:ee:41:69:60:84:a6:
3d:d5:09:cb:a2:b3:e1:3c:ea:f6:3d:02:fc:88:37:
23:fd:73:d1:2e:e7:8f:fd:db:ea:f4:f4:3e:64:35:
84:3d:85:9e:56:ae:5f:df:0c:de:b3:e2:ae:65:bb:
8b:c1:1e:c3:ff:43:6b:12:9a:5d:4e:ef:22:be:86:
a9:75:2f:0c:ab:bc:a6:bd:fc:dd:71:34:25:94:0d:
70:d6:aa:c2:e2:a5:f1:6b:56:5d:03:f4:71:ba:5e:
16:e6:ec:01:41:18:63:cc:4d:9c:5d:76:f9:51:fa:
32:6b:b9:ef:48:32:08:23:ab:ee:cb:2a:5a:75:9f:
43:a5:0e:77:a4:fe:dc:67:1f:6d:88:50:10:7a:97:
62:b9:09:ff:cc:75:35:24:01:88:9a:f5:85:35:e1:
ef:67:8e:70:d1:46:91:c4:5b:32:d4:73:5a:0d:9d:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C0:FB:66:BB:18:5B:CA:1A:99:0C:FB:28:A7:0A:73:EE:5C:6D:3F
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:77:39:db:90:ce:0b:34:52:51:4d:e1:67:da:bd:17:45:4b:
8b:cc:d3:71:95:3e:fc:69:c9:0b:26:51:a7:23:af:4d:b3:1d:
54:6f:72:35:f6:f3:49:45:bd:bc:3d:45:0c:21:50:9a:f0:da:
53:40:5c:cd:4e:51:ad:8e:24:0d:43:4c:ca:18:d4:90:7a:cf:
be:cf:35:ee:63:4e:f9:45:6f:16:52:48:6c:f8:2e:b3:78:e1:
25:81:1a:49:4d:ec:6a:2b:b1:ae:b8:4e:f7:fc:db:c3:16:c0:
71:db:81:b6:c7:81:00:55:3b:89:81:29:2b:4b:23:e9:fa:4b:
3c:92:eb:50:d4:86:65:1b:a2:35:16:7c:27:c0:48:84:97:c3:
df:33:48:23:87:a2:ff:4f:85:b5:95:2e:ce:42:5c:79:34:5f:
c7:bd:44:48:f4:25:c4:f8:c1:14:75:b1:63:58:83:bb:d4:1c:
d7:39:d9:a5:9e:fc:5f:3f:16:45:15:d9:26:d9:33:2f:1e:80:
c8:23:36:d7:bc:b7:50:08:40:d1:dd:7e:00:8f:4b:e3:0f:66:
9d:71:2c:c2:96:55:2e:ee:a6:57:c8:3b:28:2b:df:a2:ad:10:
71:06:fd:08:4c:1f:36:99:db:65:f3:0f:c5:e9:c6:f7:72:df:
c1:0e:32:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 22:28:44 2026 by rpki-client