Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: /RaONMX+A2qMZfVblPq2ejJsN1BK+rmc5eI4DMEbhcA=
Subject key identifier: 33:46:D7:5C:AF:F6:CB:78:ED:DE:D6:96:3D:13:E5:6F:8B:32:0F:2B
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 019D38D37BA9A602AF4824B2F5FEE1906A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0C78
Signing time: Sun 29 Mar 2026 09:01:16 +0000
Manifest this update: Sun 29 Mar 2026 09:01:16 +0000
Manifest next update: Mon 30 Mar 2026 09:01:16 +0000
Files and hashes: 1: J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa (hash: lcx5+pKS3s5wMnsyT5k7DP3iJe+El0QomD11K0ox374=)
2: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: aNLOrhGpCmCkLa1zBsvNdJo0cYnTm9HFHoEjHdoc63Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7b:a9:a6:02:af:48:24:b2:f5:fe:e1:90:6a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Mar 29 09:01:16 2026 GMT
Not After : Mar 30 09:01:16 2026 GMT
Subject: CN=3346d75caff6cb78edded6963d13e56f8b320f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:ad:14:7b:87:dd:36:75:42:48:e0:46:12:
48:60:9d:82:7e:de:90:6b:6e:70:22:7c:32:47:4e:
1a:5b:6d:f8:6c:c3:55:f5:81:de:e1:44:9c:95:d1:
00:23:6c:9b:ba:fd:97:83:17:d5:b8:5c:a9:c3:d0:
ce:a3:d7:a9:7d:c3:ad:90:28:7c:d8:e2:af:f4:4b:
b7:87:2f:0a:ad:05:6d:d9:59:9d:dd:45:ef:b7:3a:
22:6c:85:48:62:c9:2e:4d:dd:7c:29:5b:95:77:9e:
a4:fa:dd:eb:cc:67:18:79:4f:b8:d5:9e:49:95:f1:
e1:09:75:be:a2:f3:79:77:3f:a0:fd:93:da:6b:26:
a6:76:49:f7:5d:36:51:76:cb:70:fb:14:8d:d7:cf:
a4:7f:98:62:b0:02:94:6b:fb:3a:ef:a3:a9:85:01:
12:80:b3:f8:75:04:00:08:27:67:af:b2:94:89:72:
8e:28:ca:15:73:fd:41:56:0f:b1:32:20:36:e9:a1:
da:ff:e0:2a:be:4f:b5:f5:db:ec:44:88:97:46:8f:
3f:a3:df:25:89:0b:34:11:d8:98:49:46:c1:f5:14:
d6:cd:98:85:f4:4d:00:ea:8b:56:26:72:b6:9a:ff:
45:e2:9e:6f:4e:5b:15:e1:1e:7d:4b:d5:88:51:76:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:46:D7:5C:AF:F6:CB:78:ED:DE:D6:96:3D:13:E5:6F:8B:32:0F:2B
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ae:6b:6b:70:6c:6e:25:8e:9d:2d:a6:41:8d:72:86:b6:36:
7b:9e:27:af:ac:b7:49:c2:c9:95:4c:ce:6a:1b:a0:69:29:30:
9a:df:c4:d1:8c:12:5c:6c:13:be:c4:6b:6f:2d:93:14:d9:42:
f3:74:cd:a1:6c:d1:ea:8e:b4:8a:1e:13:7b:5e:bd:b8:b0:f9:
3e:a8:ee:ed:7a:bb:46:5c:88:63:90:c2:db:47:9d:60:96:51:
7a:5f:91:4b:1f:3c:2c:d6:b4:79:93:80:46:b7:b9:a7:0f:f6:
94:14:ca:c3:b5:5c:63:35:d2:eb:8d:4c:41:8a:07:90:32:74:
1a:f2:c5:51:85:11:d7:2e:81:d9:97:c7:e9:93:72:78:91:d8:
48:9c:21:54:07:0e:38:02:c1:db:e5:62:0a:e2:91:9a:61:bc:
b4:47:e0:cd:a1:15:56:9f:dd:db:10:22:55:9d:14:8e:ad:54:
ac:f8:00:0a:83:65:b0:ec:21:31:8a:ea:40:19:fa:13:0a:1d:
b9:a9:dc:6c:7c:1a:05:86:e1:3c:44:3e:fa:00:68:fe:55:22:
a7:9a:95:71:e8:a7:8e:81:a6:8e:ba:6f:fd:94:65:18:15:11:
3f:c7:f5:59:69:72:64:ec:88:5a:43:96:81:b5:c0:31:ad:f7:
ca:dc:2e:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403uppgKvSCSy9f7hkGpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZTkwYzlkMTAwOWIzMmMxOTQ1YjZmOGU2NTg5NDgzYzVl
YTQ3NDMwHhcNMjYwMzI5MDkwMTE2WhcNMjYwMzMwMDkwMTE2WjAzMTEwLwYDVQQD
EygzMzQ2ZDc1Y2FmZjZjYjc4ZWRkZWQ2OTYzZDEzZTU2ZjhiMzIwZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPqtFHuH3TZ1QkjgRhJIYJ2Cft6Q
a25wInwyR04aW234bMNV9YHe4UScldEAI2ybuv2XgxfVuFypw9DOo9epfcOtkCh8
2OKv9Eu3hy8KrQVt2Vmd3UXvtzoibIVIYskuTd18KVuVd56k+t3rzGcYeU+41Z5J
lfHhCXW+ovN5dz+g/ZPaayamdkn3XTZRdstw+xSN18+kf5hisAKUa/s676OphQES
gLP4dQQACCdnr7KUiXKOKMoVc/1BVg+xMiA26aHa/+Aqvk+19dvsRIiXRo8/o98l
iQs0EdiYSUbB9RTWzZiF9E0A6otWJnK2mv9F4p5vTlsV4R59S9WIUXZzbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNG11yv9st47d7Wlj0T5W+LMg8rMB8GA1UdIwQY
MBaAFELpDJ0QCbMsGUW2+OZYlIPF6kdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUt
NjljNjI5ODQxNWY4LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUtNjljNjI5ODQxNWY4
LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABa5ra3Bs
biWOnS2mQY1yhrY2e54nr6y3ScLJlUzOahugaSkwmt/E0YwSXGwTvsRrby2TFNlC
83TNoWzR6o60ih4Te169uLD5Pqju7Xq7RlyIY5DC20edYJZRel+RSx88LNa0eZOA
Rre5pw/2lBTKw7VcYzXS641MQYoHkDJ0GvLFUYUR1y6B2ZfH6ZNyeJHYSJwhVAcO
OALB2+ViCuKRmmG8tEfgzaEVVp/d2xAiVZ0Ujq1UrPgACoNlsOwhMYrqQBn6Ewod
uancbHwaBYbhPEQ++gBo/lUip5qVceinjoGmjrpv/ZRlGBURP8f1WWlyZOyIWkOW
gbXAMa33ytwuuA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:11 2026 by rpki-client