Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: GNahatHx9RbF9KglgebZJLGmqBDYiMjvJrW93he1FPc=
Subject key identifier: 89:5A:EA:3F:F8:80:1C:19:29:DF:1C:92:3F:17:B8:D3:7C:0A:90:EA
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 019E2A3977C6E7DEC337E26C427F9DE0BED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0CF5
Signing time: Fri 15 May 2026 06:01:09 +0000
Manifest this update: Fri 15 May 2026 06:01:09 +0000
Manifest next update: Sat 16 May 2026 06:01:09 +0000
Files and hashes: 1: J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa (hash: lcx5+pKS3s5wMnsyT5k7DP3iJe+El0QomD11K0ox374=)
2: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: DrLkNdvXWdYVFNiAy9x0XhqpWmJZtdBTrE2g03mAHlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:77:c6:e7:de:c3:37:e2:6c:42:7f:9d:e0:be:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: May 15 06:01:09 2026 GMT
Not After : May 16 06:01:09 2026 GMT
Subject: CN=895aea3ff8801c1929df1c923f17b8d37c0a90ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:41:eb:03:da:82:59:5b:d6:95:1f:b0:53:
57:bd:b5:5e:aa:c4:c0:1a:51:a9:5c:81:36:be:97:
2e:e6:c6:44:d6:f9:a5:20:3b:08:70:0f:0d:dc:47:
bd:f7:f2:9c:b6:e5:13:2c:f1:ed:ca:39:5e:94:31:
97:45:2d:9a:f0:20:b3:98:50:9d:7a:47:91:34:dc:
0a:f4:0c:72:a4:46:de:4b:08:70:e0:00:ad:09:d0:
24:40:d9:39:6f:3c:9a:01:05:53:dd:a4:e3:5e:48:
02:5a:6a:c8:04:37:44:f0:c3:79:2b:4b:6d:40:46:
94:b0:09:2e:f5:6d:99:02:de:d0:71:7a:31:c6:b5:
7c:c7:df:38:3e:6e:bf:c8:46:da:64:b1:6b:0e:11:
35:f2:35:36:7d:07:08:3c:de:0e:69:a6:fe:55:08:
f5:03:72:ba:c3:72:8f:4d:37:fc:2b:5f:79:da:ac:
7a:d9:09:f8:43:e6:55:82:12:e3:4c:fa:67:dc:f5:
95:79:22:9c:1c:17:4d:16:43:15:6f:b1:d5:03:c5:
6b:2e:9f:f2:f5:17:4f:c5:93:5a:a7:63:b3:8a:bd:
fc:3a:a2:5e:fa:26:ed:23:ce:d6:92:ab:6f:a1:b9:
f1:80:55:cb:3d:4d:03:61:cd:13:37:85:e0:0e:ef:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5A:EA:3F:F8:80:1C:19:29:DF:1C:92:3F:17:B8:D3:7C:0A:90:EA
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:37:bb:01:5a:1a:ee:56:36:e1:13:43:04:9f:db:17:f5:e1:
89:d7:41:7a:86:ca:66:5a:64:9a:98:d8:a7:cb:13:94:56:80:
da:bb:1e:8f:aa:74:02:04:b7:f4:95:c3:ba:c4:b8:6f:07:05:
a7:29:93:7a:91:c2:8a:98:df:3b:34:1e:ab:d8:70:55:5f:3d:
e4:52:6f:b5:3a:76:9b:ae:02:3b:64:ce:15:25:49:25:87:7b:
f4:58:e4:23:90:71:6c:c9:70:02:52:91:8c:46:f5:52:7b:61:
42:c7:cc:69:de:36:1f:a6:b4:11:64:8c:87:7a:ca:58:64:65:
c5:e6:e6:db:30:31:e7:34:da:57:b0:ba:a1:cc:6e:69:ac:c1:
2b:23:25:ae:99:4a:ab:3e:67:36:98:97:4a:59:a0:69:05:f7:
67:00:82:e4:ea:ce:d0:9a:31:2e:be:85:90:7e:85:f8:be:38:
c3:2c:73:d1:0d:8f:40:7b:a2:31:a4:f9:c7:0f:3d:fb:f1:0e:
d7:8a:62:eb:9a:ee:3c:7f:7b:d2:c1:68:c3:b1:58:4f:a7:b8:
f4:a9:55:87:b4:b0:84:3f:8d:55:b9:91:87:20:80:98:e3:02:
d5:ca:33:06:4c:0b:b0:6b:c9:57:64:24:56:1f:48:4a:2b:a3:
c3:58:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:17:38 2026 by rpki-client