Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: Bbr/bzBuAleOe3ypo1evw7dOKSCGcOQi3sUAogCB0zo=
Subject key identifier: 29:F9:FF:7C:5F:50:3B:37:33:A2:A6:CE:7C:00:46:5B:3F:BF:0C:3A
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 019F935C2BCB09A088FA5D4607A5BEE905BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0DB0
Signing time: Fri 24 Jul 2026 09:01:58 +0000
Manifest this update: Fri 24 Jul 2026 09:01:58 +0000
Manifest next update: Sat 25 Jul 2026 09:01:58 +0000
Files and hashes: 1: J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa (hash: lcx5+pKS3s5wMnsyT5k7DP3iJe+El0QomD11K0ox374=)
2: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: Ave+45IaADuubYzyuWuSQVNri4gvJQS3T3bx/nOW94Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:2b:cb:09:a0:88:fa:5d:46:07:a5:be:e9:05:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Jul 24 09:01:58 2026 GMT
Not After : Jul 25 09:01:58 2026 GMT
Subject: CN=29f9ff7c5f503b3733a2a6ce7c00465b3fbf0c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:13:5c:fd:7d:4c:2f:18:04:aa:9e:d9:32:
78:fa:15:61:a2:67:1d:6a:d1:b7:30:fe:63:36:b4:
f6:35:98:6e:d7:37:26:fe:31:26:56:5c:72:c0:96:
54:19:90:05:98:31:fc:31:08:14:44:c5:28:81:c3:
4b:b0:c2:ed:80:94:5b:f0:21:6b:6e:1d:2a:d7:d2:
03:35:9b:84:0a:e8:31:2f:99:38:e5:35:c4:23:08:
bf:fc:77:41:df:ab:8d:c7:93:6b:82:66:61:c0:70:
14:48:02:32:13:4e:c2:9c:96:ab:d9:cd:58:25:82:
16:b7:b3:10:73:32:bf:5c:b2:48:a9:82:d8:2c:cb:
e2:f0:40:83:57:a5:63:dc:70:6a:d2:f5:38:b1:58:
cc:db:55:68:e4:7e:57:d1:a7:f8:1e:3b:d7:c8:01:
c9:98:1e:82:e5:80:bc:45:d3:9f:34:8c:f8:53:58:
92:52:db:03:e3:c3:a4:29:eb:34:08:e9:30:34:a0:
d2:55:65:a7:9d:af:f9:2b:b3:64:a0:87:e7:ce:08:
53:f3:66:e4:30:88:d8:00:f2:7b:17:58:16:85:c7:
3b:85:74:16:36:5a:75:4a:72:c9:6e:d4:0d:35:b8:
71:c5:2c:97:4d:08:df:3e:71:aa:27:78:3c:2a:08:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F9:FF:7C:5F:50:3B:37:33:A2:A6:CE:7C:00:46:5B:3F:BF:0C:3A
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b1:44:0e:3a:3a:9a:a7:9f:1d:93:61:3a:9b:2d:5a:96:97:
ea:94:60:e0:1a:19:8b:e3:52:25:01:82:90:a7:12:9e:69:16:
52:37:49:aa:78:a9:58:45:9f:6f:f3:fd:f1:9b:f7:11:39:fe:
56:20:90:73:59:8a:28:13:f9:8b:3d:05:f6:bf:8d:04:e3:83:
e4:9a:29:03:25:dc:42:6e:c2:7f:de:c1:0c:eb:02:52:53:47:
a4:65:2a:8b:fc:76:ba:25:32:67:42:6f:45:0d:87:5c:eb:b8:
50:8d:63:65:ae:4a:61:6f:fa:ca:6c:8e:5d:a4:86:fb:6a:bb:
78:ad:90:3f:20:cc:a4:85:59:94:e9:9b:8d:39:ac:1f:24:93:
dc:a1:bf:68:07:75:90:ad:7b:f2:9d:27:fb:bf:83:8b:40:6c:
bc:3f:94:81:b5:70:24:b1:24:79:1e:55:11:9e:e3:36:96:81:
cf:3e:81:ef:28:50:40:d9:63:28:d8:f2:08:7e:dd:8d:72:36:
f5:49:91:78:11:ed:93:8e:c6:5d:e8:d6:4f:5d:e0:bc:13:89:
ca:6f:67:82:3d:39:da:4b:64:d3:78:c1:b0:dc:a0:08:11:e9:
21:99:ca:13:aa:2c:a6:d7:69:d3:d6:7e:58:44:01:ba:0d:87:
21:ab:82:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:17:10 2026 by rpki-client