Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: 3kTKPGNHZppZyWAXf5tDMb0R5Bhz9uoaOAlcSXXjYWA=
Subject key identifier: 92:1B:58:64:96:D7:DD:0A:84:9E:E9:04:0E:A2:13:F1:FB:15:89:CE
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 019F954A539713C227F977BDDAF6AC68AA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0DB1
Signing time: Fri 24 Jul 2026 18:01:43 +0000
Manifest this update: Fri 24 Jul 2026 18:01:43 +0000
Manifest next update: Sat 25 Jul 2026 18:01:43 +0000
Files and hashes: 1: J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa (hash: lcx5+pKS3s5wMnsyT5k7DP3iJe+El0QomD11K0ox374=)
2: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: AkBRWtvE+jT3101rbe/ia3LLvLIQlVb18Aj+mV4YIRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:53:97:13:c2:27:f9:77:bd:da:f6:ac:68:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Jul 24 18:01:43 2026 GMT
Not After : Jul 25 18:01:43 2026 GMT
Subject: CN=921b586496d7dd0a849ee9040ea213f1fb1589ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:99:d3:15:6f:7b:9d:e6:30:97:d2:b6:29:
a1:be:6b:3d:79:91:98:9f:2c:88:7d:9b:b4:72:f1:
03:81:94:ce:cf:d1:3b:60:67:8d:5f:51:56:5f:9f:
f8:a9:94:e8:68:a5:d0:63:11:87:b6:9d:0e:34:bf:
c0:3b:8c:d7:da:96:d5:f1:32:8e:0e:2e:3a:fd:06:
5c:fe:ef:42:30:f5:da:6d:b8:61:4b:a9:9d:dd:1f:
29:bf:03:e7:ef:31:89:23:4f:5c:d1:b9:f3:ac:30:
d1:64:30:1d:f5:f1:3f:0c:78:4d:cc:7a:6f:f2:cf:
ca:16:c5:ee:af:d3:6c:03:d1:85:9b:33:58:70:99:
12:4c:18:22:a4:3b:49:97:fa:4f:0b:87:7f:12:af:
fb:53:9a:39:dc:6a:1c:a0:79:3a:21:fc:ed:90:bd:
ce:5b:93:05:b5:bd:bc:ad:30:2b:c3:22:07:96:6f:
90:22:9a:51:2c:36:3c:73:7c:82:32:9e:53:3b:23:
be:b2:eb:02:fe:43:88:84:a9:4d:a2:55:e4:c3:26:
7f:aa:c1:9c:cf:e6:d8:0c:41:f5:62:4f:51:f9:be:
96:f2:cb:f0:4e:ec:f5:12:14:19:19:cb:02:5d:8c:
9a:22:c3:17:22:10:46:9e:10:34:4b:cb:e7:14:51:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1B:58:64:96:D7:DD:0A:84:9E:E9:04:0E:A2:13:F1:FB:15:89:CE
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e0:03:24:7d:52:8d:4d:e7:2c:e4:44:56:4d:7f:55:09:3e:
06:78:4a:1c:fe:29:1b:9e:5f:51:86:b8:b6:51:19:e2:2e:52:
90:eb:5e:dd:5b:97:64:ff:3b:4f:d9:15:3d:1b:aa:28:ca:b6:
17:bd:6b:55:34:24:45:73:3b:46:9e:f0:9e:6e:bf:36:71:ae:
da:fa:7d:2b:19:71:10:3b:fb:d3:ab:e1:1a:8e:20:c4:e2:d1:
ce:15:93:62:8f:6c:2f:ab:bb:cc:d7:45:96:e3:85:ae:95:13:
a7:9f:72:3e:3a:fb:7b:1f:9e:ee:93:e1:ca:a2:bf:2b:26:7d:
41:fb:a1:de:e2:59:f5:68:44:80:e2:fb:07:b2:be:e6:59:c3:
d3:37:e9:92:73:f3:cb:bb:86:72:24:1b:95:58:3e:64:e1:c4:
59:9b:2d:43:e4:5b:82:25:25:de:fa:07:cf:2b:35:c9:91:82:
9d:c6:9d:82:34:b5:e0:70:a7:40:49:b2:a6:14:90:21:50:ab:
cc:7f:93:24:2d:09:db:96:28:7b:91:cd:ec:d0:79:bd:dc:e2:
3a:cf:a4:38:2f:79:ee:a8:a9:85:87:bc:a4:01:c7:f3:ee:1a:
93:94:66:81:99:43:8a:42:b7:b0:f7:49:5a:73:43:4f:b1:6c:
30:f8:d3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:30:40 2026 by rpki-client