Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: de6k6H4N28iUkKU7SF/WDlHEKYq/H3YfnzaMT+NNTKE=
Subject key identifier: FC:0C:FC:E2:49:82:C8:5C:7F:0C:75:F7:53:27:6A:1A:1B:0F:A7:BF
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 019F13E6946E2EABDD495EC04BD8B98AE488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0D6E
Signing time: Mon 29 Jun 2026 15:01:46 +0000
Manifest this update: Mon 29 Jun 2026 15:01:46 +0000
Manifest next update: Tue 30 Jun 2026 15:01:46 +0000
Files and hashes: 1: J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa (hash: lcx5+pKS3s5wMnsyT5k7DP3iJe+El0QomD11K0ox374=)
2: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: pgoK1yXWdokJPHQh9LA9NinkrokOBl+Gm459WLLPdCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:e6:94:6e:2e:ab:dd:49:5e:c0:4b:d8:b9:8a:e4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Jun 29 15:01:46 2026 GMT
Not After : Jun 30 15:01:46 2026 GMT
Subject: CN=fc0cfce24982c85c7f0c75f753276a1a1b0fa7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:99:6f:7e:9f:01:19:ba:96:53:47:a6:31:
73:14:13:b4:b3:52:f2:81:12:b9:bd:ad:78:bb:08:
ae:06:95:4f:46:ca:a9:d8:77:00:4c:03:f4:fb:22:
fd:0e:ab:21:a3:13:d9:dd:1c:01:a5:a2:32:de:8c:
57:2c:0c:d6:cb:50:e9:ce:4e:7b:a8:c4:ea:fe:bd:
85:8b:ec:e1:7a:62:35:8b:2e:fd:1f:9b:fe:16:9f:
a0:f8:c4:2b:6a:30:ec:3b:1c:52:45:2b:0d:46:52:
d4:38:b4:f5:c4:a5:ac:a6:bd:3d:b0:16:61:85:dc:
f4:ae:e6:40:f0:82:d6:0f:e7:bb:72:bf:81:91:18:
95:e4:7c:25:d1:72:30:f3:ac:87:e8:0c:0d:c3:fb:
89:72:06:74:6c:27:9c:58:ba:4f:e6:91:fc:f2:b5:
e4:c9:2d:c2:c1:0c:e6:33:f3:5e:d1:a0:d8:fd:ec:
3f:2c:99:8b:dd:c9:0f:c3:3b:97:f8:00:60:8d:93:
41:2b:88:f1:a4:8d:ec:1c:b4:39:fc:10:b5:9e:70:
0a:cb:e0:23:f0:e5:52:df:a5:5f:e9:57:4b:91:50:
f7:cc:bd:b0:34:4a:d3:be:20:77:aa:28:f6:20:95:
be:c4:dd:b6:41:74:1d:dd:b4:6d:fe:d2:00:0e:b6:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0C:FC:E2:49:82:C8:5C:7F:0C:75:F7:53:27:6A:1A:1B:0F:A7:BF
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ba:b2:ee:e7:d1:56:9f:e3:ae:2d:30:1a:27:29:87:44:31:
a0:af:a2:47:08:8b:af:7c:cf:89:74:4f:55:0e:3d:2a:0a:57:
ab:34:fa:0f:fa:72:4f:6e:a7:5c:df:f1:d5:b3:51:26:77:da:
1f:8d:8e:9c:62:b7:a2:37:b3:8e:96:b8:08:90:5d:5a:3f:2f:
b5:04:d4:48:bd:0b:46:96:33:ad:91:a0:d6:34:30:8b:e8:13:
81:25:ad:1a:fc:6b:4e:1f:01:b2:b0:d2:3b:89:48:5d:cb:53:
08:f1:f3:20:b1:e0:db:ba:a6:3d:be:d1:b2:cb:3a:74:4f:d9:
35:6f:cf:e8:46:a4:97:ab:6c:c5:37:41:60:e3:97:25:16:48:
e8:30:b0:df:ea:16:0e:00:64:25:10:e7:90:09:3f:5b:91:57:
03:34:88:69:54:55:55:9d:c2:b2:9e:28:4a:6a:00:04:06:e9:
64:17:85:28:cf:99:5d:46:18:eb:cf:a8:ae:05:8f:79:a4:84:
c5:10:2b:9e:14:c8:0e:e2:67:e3:39:3a:36:8e:a6:41:c3:13:
b5:fa:26:f3:45:85:93:61:b2:c4:98:c2:d7:2e:b3:a4:af:f8:
25:bd:01:34:27:3e:a2:07:32:c0:e7:5d:ea:84:6f:ae:51:43:
af:db:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:38:55 2026 by rpki-client