Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: t8/rncd8UN0al+UuHmxUJZRgrMWRUcAecSjWZU81BRY=
Subject key identifier: 87:84:A4:32:27:BB:20:34:5D:80:F9:F9:52:A9:09:09:D5:EF:3C:41
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 01A13E262AA57F75175BD4A4848CA9BFA21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0E8D
Signing time: Thu 15 Oct 2026 06:00:51 +0000
Manifest this update: Thu 15 Oct 2026 06:00:51 +0000
Manifest next update: Fri 16 Oct 2026 06:00:51 +0000
Files and hashes: 1: J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa (hash: lcx5+pKS3s5wMnsyT5k7DP3iJe+El0QomD11K0ox374=)
2: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: SZuBbLS4wHocnOZ5AFJgGZnTnwiU/EmLRIqj4H8Y2GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:2a:a5:7f:75:17:5b:d4:a4:84:8c:a9:bf:a2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Oct 15 06:00:51 2026 GMT
Not After : Oct 16 06:00:51 2026 GMT
Subject: CN=8784a43227bb20345d80f9f952a90909d5ef3c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:ba:8b:92:d3:50:8e:d7:70:8c:13:8a:ac:
cb:37:23:26:9f:0a:74:de:e7:9d:47:54:ab:10:a2:
d7:aa:38:09:68:9b:70:0f:e8:fb:cc:56:63:f3:0e:
4d:ec:77:9b:b0:ae:82:fd:46:e3:33:cb:e0:0f:d8:
5b:2e:d2:c8:03:67:66:20:c2:d8:f4:ed:c2:42:37:
9b:d9:3e:86:bd:f7:e0:70:bb:66:25:3a:ee:f6:f2:
39:24:1d:5c:f3:26:0a:75:2b:62:c9:d8:55:97:e1:
38:2d:51:0f:9b:c7:68:1a:26:b0:d1:70:e8:65:1b:
eb:89:82:6e:d1:fb:6e:1f:1d:f8:47:f5:c0:ef:71:
59:f2:3c:1b:db:ba:3e:61:62:fe:fc:2d:ba:2d:09:
48:2e:6b:c7:03:e0:13:03:52:88:9c:41:31:a9:36:
69:8a:20:03:8e:64:55:3c:40:05:b2:f8:dd:3f:24:
9f:32:83:42:17:35:aa:1e:8f:41:7d:77:e8:03:6b:
53:f1:07:51:98:ee:8e:0a:2b:94:16:2f:0d:97:df:
86:17:88:bf:6b:0c:47:2e:31:df:03:40:39:a2:6d:
50:3d:58:b0:35:cf:ac:65:55:d3:83:4d:93:da:be:
53:e8:bd:66:20:14:7e:11:bf:52:4d:b5:38:37:13:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:84:A4:32:27:BB:20:34:5D:80:F9:F9:52:A9:09:09:D5:EF:3C:41
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f3:57:18:0e:89:95:f8:fa:8c:88:b9:79:b0:00:8f:6b:bc:
6c:8e:57:34:de:6d:a9:e9:53:06:02:b9:fe:ef:68:bd:ba:18:
86:88:90:25:2c:7c:7a:b8:ae:2f:88:30:25:be:94:b9:e0:d2:
20:2e:20:7a:e2:d1:12:72:a7:b3:87:6a:ca:3a:3c:5a:97:59:
7d:25:02:39:7e:7a:f0:a5:ef:d1:35:e4:08:d5:84:24:3f:04:
47:34:f7:7d:8e:2a:67:1c:d3:41:13:66:e4:b4:70:5e:65:9b:
3a:be:55:af:9e:67:e2:c1:17:87:d0:b5:ae:b1:4c:90:26:8c:
d1:d5:86:2d:e8:92:c0:32:fb:93:34:08:5b:ef:1a:ff:11:78:
f7:7a:f2:0d:ba:ce:f9:60:ac:53:77:1f:f6:58:b9:12:69:a1:
a3:e6:36:13:2e:04:40:5e:f7:f6:38:70:15:5c:d8:dc:3a:f0:
35:f9:71:2c:d0:41:40:79:32:d5:53:a3:3f:5c:af:b0:8f:b1:
e4:11:04:58:cd:57:44:2e:33:4e:3a:a9:95:98:25:bb:68:66:
a5:f6:52:f9:b3:eb:1b:44:c0:7f:76:31:9b:75:e6:bc:3d:b1:
26:a0:de:8b:b7:8a:0c:d0:7c:7c:a7:3b:b6:77:df:da:24:89:
2a:a7:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:25:03 2026 by rpki-client