Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: /OiynmrClUgXCtHVqO9maV9k7eP5/43vKpBnAeMzEIo=
Subject key identifier: E3:B6:AA:7D:5B:D9:3E:9E:2F:86:C0:D1:DE:81:1D:59:F6:85:74:F2
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 01A0016FC8F2671D0BE5DDA69F5DD2A5BED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0DE9
Signing time: Fri 14 Aug 2026 18:01:38 +0000
Manifest this update: Fri 14 Aug 2026 18:01:38 +0000
Manifest next update: Sat 15 Aug 2026 18:01:38 +0000
Files and hashes: 1: J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa (hash: lcx5+pKS3s5wMnsyT5k7DP3iJe+El0QomD11K0ox374=)
2: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: c3ZHu9bx9DYMYje70ZmhaGw55VvvxK9UgOMhHMMTWzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:c8:f2:67:1d:0b:e5:dd:a6:9f:5d:d2:a5:be:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Aug 14 18:01:38 2026 GMT
Not After : Aug 15 18:01:38 2026 GMT
Subject: CN=e3b6aa7d5bd93e9e2f86c0d1de811d59f68574f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:56:f1:72:f7:1b:fd:ff:df:7a:76:ed:85:b3:
e3:6b:91:a3:8e:88:c3:c7:a9:35:fc:e9:1e:b7:d6:
86:5c:f9:aa:30:77:7f:08:2d:78:4a:9c:8b:f8:86:
44:5c:d6:a4:2b:b2:db:bd:69:f9:42:aa:75:75:46:
9e:6c:8e:35:60:48:d8:48:b9:a4:e6:c0:bb:9c:1d:
9b:9c:80:bc:25:a8:d6:92:c1:c0:10:5b:46:23:a3:
d6:92:ac:95:f0:e1:c1:1a:e4:2e:67:fd:66:77:04:
77:d6:98:aa:07:26:0f:01:50:98:2d:1a:0b:3f:03:
c4:41:ad:ae:81:79:c9:dd:e7:f6:38:3c:f2:d4:22:
03:4b:a9:bf:25:35:e8:90:6f:62:93:90:9e:3e:04:
66:20:49:47:fd:03:ad:98:25:e9:5b:4e:64:95:ca:
1b:d1:d0:8d:08:6f:c2:ee:44:e3:8f:49:8f:89:22:
76:2f:f6:8a:91:62:76:84:ae:08:cf:03:61:ea:17:
0e:7e:7a:f7:b0:4f:c8:73:0e:db:53:94:79:d5:a9:
4a:7f:da:72:81:2b:88:bb:6b:4a:21:0f:bc:4f:b5:
b7:e2:3d:17:32:eb:15:fe:64:e5:a5:73:66:0f:af:
5d:c9:6d:9c:f0:48:16:4f:6f:2d:be:6c:8f:18:d2:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B6:AA:7D:5B:D9:3E:9E:2F:86:C0:D1:DE:81:1D:59:F6:85:74:F2
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:66:4d:01:f9:fa:d2:52:be:a1:1c:b7:68:63:5c:93:27:2d:
9a:a2:69:bc:dc:d3:40:f0:48:40:c0:44:5f:b1:4f:58:78:33:
97:59:92:50:70:0d:5c:f3:af:2a:a9:3c:2b:34:8a:1c:70:b4:
bf:03:4b:be:a3:61:5f:c5:45:ef:74:df:8c:a8:42:ef:89:db:
2e:75:bd:eb:75:2c:f6:7d:76:be:22:fe:5f:6c:37:ce:e5:87:
aa:c0:db:3d:9a:10:e4:bb:79:94:c3:a6:45:5c:c3:30:3b:1e:
a0:9f:4e:86:cd:10:10:6e:54:d4:08:ae:06:66:82:87:d7:8c:
70:f5:cd:5f:9f:4c:e3:cc:81:fd:a8:51:7a:a2:66:d3:2d:c3:
46:d3:8d:e8:67:6d:cc:d1:30:06:38:fc:ef:c9:6f:e5:8a:62:
fb:44:2f:7d:0f:72:74:a6:f8:fa:9e:ac:81:3b:14:aa:ec:17:
6b:11:d2:3c:04:00:ba:0f:a9:5d:31:b4:d1:04:5b:fa:b5:29:
3f:65:14:41:dd:cb:cf:a3:e7:4a:96:18:31:85:ab:ea:89:c9:
ad:e2:fa:8b:29:fb:27:93:42:cb:77:37:e2:db:98:82:e8:18:
49:4a:24:aa:96:f6:f5:22:cd:aa:4b:34:24:fc:9c:12:41:7f:
d3:62:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:17:16 2026 by rpki-client