Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: QxaGVX2SlCHcZy8P8kHPAX/IlA1lvmvz2/mJ3DNurIA=
Subject key identifier: 51:D3:0C:24:69:8B:1F:52:5C:FC:34:12:2C:14:D9:C9:6D:16:BA:07
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 019EE33136FB81025177010BEE9388722DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 196B
Signing time: Sat 20 Jun 2026 04:01:53 +0000
Manifest this update: Sat 20 Jun 2026 04:01:53 +0000
Manifest next update: Sun 21 Jun 2026 04:01:53 +0000
Files and hashes: 1: OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa (hash: 16WKJl9nAt0F5mIivt4fYmu6w5/8Iqob4RhznilyhtM=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: liCOf1YvS+YZyTb4KsOq4HEFkTa8+d4FNBt7hdZTIis=)
3: ken38hVxmy14aPMAbzAPgPTg5Qc.roa (hash: TJhvTJDZL4uFVPaDoKqNX3HyglY2ChDkoRzq0njH+TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e3:31:36:fb:81:02:51:77:01:0b:ee:93:88:72:2d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Jun 20 04:01:53 2026 GMT
Not After : Jun 21 04:01:53 2026 GMT
Subject: CN=51d30c24698b1f525cfc34122c14d9c96d16ba07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c0:77:b7:1d:17:f9:96:93:04:08:af:5e:3f:
a5:85:38:6b:7b:38:b5:0a:d6:02:0f:00:d0:d0:98:
53:a2:7f:24:19:91:ab:f4:1d:a2:6a:81:4a:fc:2f:
eb:b1:50:83:44:3e:69:ee:b8:54:0c:2f:5b:dd:ad:
aa:12:e5:4d:a7:1b:6c:71:bf:01:93:02:a9:85:b6:
91:1f:35:0f:89:c5:76:3b:01:a8:74:df:51:c0:7e:
4f:81:e2:cb:ad:cd:90:0c:41:f9:bd:f6:98:e0:cf:
46:7f:6a:9a:02:14:9a:1d:68:80:60:22:3f:f1:a2:
9d:ee:e4:4b:68:80:fe:26:f4:cd:d3:57:01:69:d3:
7a:c6:35:65:12:f5:2a:e8:4d:8c:e4:dd:5f:bb:5a:
02:1f:d7:94:12:5a:d4:5c:2c:f5:ac:69:17:6b:0e:
2d:0f:f7:2f:62:f6:5d:20:52:4f:a2:dc:e6:7b:6b:
38:98:af:7e:e8:16:17:0c:d8:ba:19:da:01:e4:a9:
62:b3:c2:d0:2a:61:c2:54:08:04:84:f0:88:7f:78:
d1:12:56:59:30:63:07:47:80:30:0c:04:d7:a4:90:
a1:6e:66:14:cf:c9:f6:1f:79:42:f6:35:7e:06:f9:
42:9c:17:e5:17:8c:5e:03:2d:fd:e1:ee:bc:4c:82:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D3:0C:24:69:8B:1F:52:5C:FC:34:12:2C:14:D9:C9:6D:16:BA:07
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ff:08:48:0a:6a:59:87:cf:d2:bf:1c:0b:09:f6:c8:44:cd:
91:2b:e1:20:bb:a8:8e:45:cb:60:85:d5:ee:c6:48:91:74:cb:
48:dc:ab:ef:f3:7a:8c:a6:90:57:7b:17:a6:01:09:00:b2:69:
f3:28:89:01:92:a4:68:e3:df:6b:45:c4:ea:9b:30:84:93:16:
12:de:f9:32:6f:ed:f0:45:7b:74:5d:d0:3c:aa:ca:15:05:52:
4f:18:fb:16:23:86:23:26:28:e8:11:af:9f:35:88:11:50:97:
d8:af:7b:4e:e3:48:26:8a:29:67:42:34:97:32:f1:7a:7b:b3:
62:93:30:16:83:54:e7:28:dc:e2:ad:5f:c8:e1:aa:3a:f3:6b:
e9:27:70:6c:60:df:fa:bc:cf:74:b8:db:a8:f0:07:ae:52:72:
f0:17:eb:4f:c6:c3:f9:72:ee:b8:3f:5b:79:8c:fa:9a:ce:7c:
c6:1d:d0:ed:1a:78:1b:c6:93:6f:7c:07:a4:6c:e7:08:5c:59:
e0:03:02:7c:5b:20:c8:ec:b1:dc:7b:d8:15:2f:79:75:87:3c:
65:cf:45:dc:f8:1f:94:5f:c2:c9:fd:65:3b:48:0a:ef:33:53:
b0:4b:2d:ad:ae:f5:99:db:fa:73:5d:46:5b:4d:6f:c0:5d:1a:
34:c0:33:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:33:52 2026 by rpki-client