Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: v43IvaajBChjgo/dGMo9ebLybEry00KVF2prW1IGG4g=
Subject key identifier: 4C:24:21:7A:43:12:7F:53:58:44:90:BB:04:1A:8A:A2:6A:7A:93:82
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 01A0B8776B45DD2DC21C900999D3C18A28E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 1A5E
Signing time: Sat 19 Sep 2026 07:00:29 +0000
Manifest this update: Sat 19 Sep 2026 07:00:29 +0000
Manifest next update: Sun 20 Sep 2026 07:00:29 +0000
Files and hashes: 1: OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa (hash: 16WKJl9nAt0F5mIivt4fYmu6w5/8Iqob4RhznilyhtM=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: ART7GB4ZRPP2YG/jn28wVQpBv9hBmSEYy2fuV4kmmPg=)
3: ken38hVxmy14aPMAbzAPgPTg5Qc.roa (hash: TJhvTJDZL4uFVPaDoKqNX3HyglY2ChDkoRzq0njH+TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:77:6b:45:dd:2d:c2:1c:90:09:99:d3:c1:8a:28:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Sep 19 07:00:29 2026 GMT
Not After : Sep 20 07:00:29 2026 GMT
Subject: CN=4c24217a43127f53584490bb041a8aa26a7a9382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:b6:d5:0f:df:df:33:88:f7:50:df:67:9f:
20:d1:03:35:a0:b9:70:c2:d8:5d:c2:b1:c8:bf:a9:
b2:23:31:0e:56:a8:b1:2e:8e:16:74:59:b2:3e:51:
bd:a9:ee:e5:6d:50:a7:20:29:90:47:fc:da:ff:ed:
0d:21:4a:0d:30:a1:da:5a:fd:b7:ec:a8:35:a8:3a:
30:3c:6c:a0:d7:34:cc:74:f9:94:ed:87:91:91:8b:
3e:b2:89:8c:83:da:7c:7c:01:7f:a8:60:d9:e6:43:
4b:a2:4b:35:7a:58:60:1c:4c:62:4f:ca:f6:ae:b8:
07:da:42:5f:5f:79:77:d8:68:8a:3a:38:b6:a6:bc:
cf:97:a1:9a:cf:d7:ee:68:a7:eb:44:87:51:7c:6d:
1a:23:56:0d:f6:eb:32:74:ae:f3:e1:a1:65:f6:e0:
28:dd:b9:67:a1:1a:a8:5d:a2:a7:44:ad:a2:ec:79:
c7:57:0b:2f:f8:9b:a5:5f:57:43:15:22:06:e4:20:
b9:76:5d:dc:da:e9:7b:ce:7c:f8:ae:18:af:f1:68:
71:22:a1:08:16:c0:1c:33:d1:dc:c0:de:e7:72:c9:
1b:d7:43:9c:9f:44:89:d1:e2:be:c7:52:94:ba:97:
0f:2e:40:d3:76:c1:b3:19:5b:00:59:b9:a1:24:95:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:24:21:7A:43:12:7F:53:58:44:90:BB:04:1A:8A:A2:6A:7A:93:82
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:81:9b:ed:5b:dc:e8:02:bb:d6:3a:9e:11:16:8d:4c:ff:45:
cd:e6:88:c2:4f:a9:a6:e2:43:f7:d2:df:9f:05:c7:75:56:44:
b1:15:3b:21:43:75:04:9e:f9:a3:39:00:bc:56:f9:bd:eb:93:
74:ac:f5:10:43:a6:85:59:ce:8a:ce:b4:88:4c:e8:f9:91:c5:
42:47:53:fd:79:34:fd:1a:f0:01:aa:fc:81:43:ab:a3:4f:d3:
f4:dc:65:20:59:b5:c7:99:8d:6f:60:43:84:87:04:d2:c4:57:
ac:a1:8c:62:13:f8:60:73:02:59:9b:81:a1:66:61:9a:49:1f:
70:05:26:d5:24:06:7f:54:03:d2:09:d0:f1:d5:27:09:a4:28:
d3:34:e4:8f:2b:c7:9d:0e:52:44:e2:c0:8b:cb:5b:d5:f2:5b:
de:2a:5f:a4:c7:37:e6:66:f9:e1:88:ae:4d:76:64:d3:3c:f1:
be:b5:5d:5d:4b:30:44:cf:b9:8e:ba:b8:7d:78:12:0c:2b:de:
70:e3:bc:c5:36:fb:37:ed:7f:c9:21:01:ec:59:7b:96:dd:72:
7a:12:9a:a5:ac:dd:4b:85:2d:89:e7:fc:5b:cb:88:f1:ea:68:
06:43:68:b3:56:73:ff:c2:78:c5:43:61:1a:ed:b3:d9:de:28:
5b:d7:e9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 15:13:57 2026 by rpki-client