Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: xyImCA9yFjKvqLsRRJyOaNZJ6zEqd1pMCemTma5F+VM=
Subject key identifier: 69:F3:13:56:4E:9C:43:74:01:2F:FF:6D:6A:3F:90:34:62:F9:E4:C0
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 019D38660B20C6BDC1A09BC20AC7E7C7A19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:44 +0000
Manifest this update: Sun 29 Mar 2026 07:01:44 +0000
Manifest next update: Mon 30 Mar 2026 07:01:44 +0000
Files and hashes: 1: OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa (hash: 16WKJl9nAt0F5mIivt4fYmu6w5/8Iqob4RhznilyhtM=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: XXm2ztNdMmqpAVvncuaN/mrC2oay2zk71qtqKL3WLDs=)
3: ken38hVxmy14aPMAbzAPgPTg5Qc.roa (hash: TJhvTJDZL4uFVPaDoKqNX3HyglY2ChDkoRzq0njH+TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0b:20:c6:bd:c1:a0:9b:c2:0a:c7:e7:c7:a1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Mar 29 07:01:44 2026 GMT
Not After : Mar 30 07:01:44 2026 GMT
Subject: CN=69f313564e9c4374012fff6d6a3f903462f9e4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:6c:87:d2:56:5b:8b:d6:46:dc:a6:5a:ce:
ed:50:f0:7a:f8:ba:d6:4e:b9:39:26:4d:3e:07:61:
17:1a:ab:cc:9c:1d:76:94:44:7b:10:3e:51:c8:43:
05:e0:fe:93:c8:4d:5d:dd:a7:1c:d5:f3:fa:aa:49:
ba:90:27:89:18:f5:eb:96:66:80:e4:06:5e:33:76:
d0:b9:ca:8a:c8:67:be:0f:11:da:c9:65:7a:fa:86:
21:55:8e:e0:24:72:01:54:93:8e:dc:50:7f:7e:b6:
71:27:19:7e:24:ec:cb:35:93:f1:da:c9:e9:8a:fc:
f9:ac:28:01:c1:7e:e1:33:f2:70:53:a6:d0:fb:26:
8e:7e:79:30:e0:80:37:16:aa:04:f2:7e:cf:c6:01:
c8:40:3f:f3:3c:e5:4d:08:04:fe:24:70:d6:94:b1:
d7:f5:08:cd:dd:4e:55:04:05:78:29:30:dd:1e:51:
b3:67:5a:05:a6:cc:57:d3:a7:0c:07:00:48:76:e8:
be:75:93:7e:16:51:d4:a2:6c:6d:d2:59:37:72:92:
b7:5b:98:23:ef:12:a8:4a:d4:41:e7:e6:75:68:1b:
ce:82:51:bf:9b:9a:fe:47:22:61:72:4a:89:ff:55:
16:73:ac:d6:a6:f4:b7:3e:f8:30:d0:2a:21:2d:ce:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F3:13:56:4E:9C:43:74:01:2F:FF:6D:6A:3F:90:34:62:F9:E4:C0
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e2:7c:e1:b6:a3:74:15:aa:56:9a:04:2a:61:02:09:fa:c5:
ce:b7:89:95:e9:04:dd:e7:c3:04:73:66:cb:13:df:3f:26:43:
72:11:31:64:bb:d3:cc:82:e4:fe:9a:a3:99:37:a5:92:51:10:
3e:5f:10:d4:49:59:45:55:2b:a8:7b:9f:3d:d3:4a:67:a4:ce:
5e:ed:d1:0c:cb:98:a9:fb:be:44:1b:22:76:23:08:73:a6:3d:
b5:12:fd:be:ea:46:35:d8:60:44:1f:d6:b3:dd:15:b8:29:67:
20:79:d4:75:a3:87:7b:25:54:9d:af:65:33:64:4d:8b:9f:af:
19:e6:c2:bb:28:a9:14:a1:4f:6f:c4:60:d8:32:96:60:21:7e:
57:62:e0:5d:52:38:d1:ff:a6:78:32:92:b5:15:3a:a4:6c:44:
4b:6a:e1:c7:ef:eb:12:3f:e0:af:6a:f4:bb:03:61:4d:a8:bd:
46:16:0e:a0:b4:91:fe:6d:46:49:8b:ad:20:f6:10:d5:07:69:
e5:13:68:8f:0b:a9:4c:42:ce:b3:f3:6d:5c:46:fe:ef:d3:8d:
6f:3f:8f:35:a9:34:45:6f:04:47:5f:ee:c3:5c:44:7a:4a:0c:
e8:53:1c:4d:c3:ca:88:bc:b2:19:c0:cf:92:ac:5b:0b:47:cc:
64:ab:91:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:17 2026 by rpki-client