Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: kZ/c9W0RDPz7aU/c1zkNUnyegrWBe6uIHL/SWSHAtk4=
Subject key identifier: 88:33:69:1D:58:38:BD:84:5B:32:94:DC:03:CF:28:A2:81:43:CD:2D
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 019FCCDD1279F9E2157F2278428792AEBAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 19E4
Signing time: Tue 04 Aug 2026 13:01:07 +0000
Manifest this update: Tue 04 Aug 2026 13:01:07 +0000
Manifest next update: Wed 05 Aug 2026 13:01:07 +0000
Files and hashes: 1: OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa (hash: 16WKJl9nAt0F5mIivt4fYmu6w5/8Iqob4RhznilyhtM=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: oFC3Kg7CvvIxsJWZSC0RC/bohMwIJksJgktSiUx/jWs=)
3: ken38hVxmy14aPMAbzAPgPTg5Qc.roa (hash: TJhvTJDZL4uFVPaDoKqNX3HyglY2ChDkoRzq0njH+TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:dd:12:79:f9:e2:15:7f:22:78:42:87:92:ae:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Aug 4 13:01:07 2026 GMT
Not After : Aug 5 13:01:07 2026 GMT
Subject: CN=8833691d5838bd845b3294dc03cf28a28143cd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:37:91:ec:b4:22:7d:10:6f:8e:8a:37:45:
6d:cf:f4:6a:ad:70:5d:c9:4f:fb:11:31:cc:10:2b:
c5:0d:19:d4:d8:8f:7f:51:2b:0b:db:73:92:b7:b0:
f3:be:e3:62:e6:12:a9:16:f0:25:d1:f6:d0:df:4f:
5c:35:5a:b7:ba:6b:8e:b3:88:db:7b:0e:dd:a5:5b:
fa:a0:da:f6:c0:85:a7:a5:f9:73:d4:5b:46:19:e2:
d3:b0:cc:77:2a:2b:93:2c:96:17:fc:9f:7c:a9:8e:
5d:f6:88:fe:dc:c8:d4:58:dd:82:b6:10:ba:d1:c1:
9e:b1:af:57:24:fc:0c:a1:6d:f5:7c:7d:96:53:64:
d2:a8:cb:17:ce:9a:73:1e:28:8d:e7:fe:4a:df:1e:
1a:cc:aa:dd:0b:68:e4:db:de:67:a6:88:eb:cf:de:
be:87:e7:1f:a5:32:dd:2b:40:ee:fb:a1:04:2e:17:
13:71:98:d6:ac:33:e8:50:58:b3:13:ed:64:76:53:
ae:93:79:05:db:9f:0f:81:4e:95:23:ac:5a:4b:1a:
5f:ef:41:cb:70:51:fe:27:0b:58:e7:b8:6a:f9:30:
cc:d0:35:f5:f7:49:85:f5:f8:b0:f9:fe:99:85:2a:
31:ca:0c:b4:0f:98:73:b0:14:de:63:5b:6d:14:b0:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:33:69:1D:58:38:BD:84:5B:32:94:DC:03:CF:28:A2:81:43:CD:2D
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:08:25:dd:ca:23:77:22:25:f4:cf:e0:fb:68:03:53:b5:3d:
4e:02:57:c8:ed:75:cb:79:c2:a1:cd:7a:73:08:21:66:af:40:
63:f9:a8:12:d9:f9:87:98:ab:db:06:39:8a:71:1f:fe:02:31:
b2:2e:fe:d6:68:d9:65:31:9b:c3:a8:91:5c:01:95:c8:67:21:
3f:ca:de:76:89:c1:0f:9a:44:f4:27:4c:cb:05:4a:8d:2f:45:
14:8a:f7:6f:cf:cc:32:40:00:fb:ed:19:a5:b5:c8:8c:1e:13:
c0:ad:52:c1:db:64:39:a4:83:16:1d:e8:32:57:3b:b3:47:ec:
21:3c:ef:46:23:f9:c5:5b:ba:40:36:e1:9e:68:87:80:ab:13:
e0:6c:8f:3b:87:c1:bc:d4:7f:6e:79:ce:c2:7b:f1:2b:cc:06:
02:0e:8c:5b:07:ca:3d:b4:39:35:78:0b:82:7d:f8:41:81:7c:
e1:37:e0:56:b9:cc:62:d8:2d:b0:e1:d6:53:29:34:09:0a:d9:
d4:5f:07:b3:76:08:b0:b7:fc:2e:2a:ba:8a:27:41:2a:49:f9:
fc:07:a1:a4:49:47:8e:8e:4a:91:af:fa:25:00:49:a5:78:f1:
9d:43:4c:29:cb:43:59:c5:9d:43:73:ce:28:15:78:19:2a:34:
56:27:db:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:32:54 2026 by rpki-client