Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: 6DQY1Nv6bDGbZlDYRg8ZAJMKOdzl6kH/f2t3OgFb74I=
Subject key identifier: CD:05:68:DA:ED:19:5C:D8:92:A5:FD:CD:ED:0F:2F:93:4C:BF:4B:B4
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 01A128E7D5F4FDA6CB6BB16F3CE692C16912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0E82
Signing time: Sun 11 Oct 2026 03:00:44 +0000
Manifest this update: Sun 11 Oct 2026 03:00:44 +0000
Manifest next update: Mon 12 Oct 2026 03:00:44 +0000
Files and hashes: 1: J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa (hash: lcx5+pKS3s5wMnsyT5k7DP3iJe+El0QomD11K0ox374=)
2: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: Ras3J2ZvwCe15vROfqdCeCSbNTXxaRxItg9q3R5khRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e7:d5:f4:fd:a6:cb:6b:b1:6f:3c:e6:92:c1:69:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Oct 11 03:00:44 2026 GMT
Not After : Oct 12 03:00:44 2026 GMT
Subject: CN=cd0568daed195cd892a5fdcded0f2f934cbf4bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:37:12:9b:3a:10:9f:f3:ea:5f:6f:71:9c:
b7:76:89:34:e5:97:a1:3d:17:9e:9f:08:af:36:08:
2a:a3:ba:a6:24:71:c6:29:22:cb:93:7e:46:33:19:
02:07:00:b9:b9:40:34:9a:78:ee:73:4d:50:2d:7c:
74:d9:45:ae:5f:c6:ec:2f:64:87:3e:55:3a:c2:a4:
02:20:22:4b:af:fa:de:02:a6:79:d3:88:39:8b:f3:
72:9a:a3:a9:a8:6b:c6:9e:24:59:5d:eb:a2:52:0a:
45:51:35:df:15:fc:3e:c3:f9:20:b9:b9:a3:78:1c:
57:42:2b:db:a8:ed:70:5d:97:5c:e3:ee:64:88:96:
8e:24:7c:c6:2d:b2:ec:ec:05:ab:bc:9a:6e:57:19:
71:95:fd:c9:65:53:a8:b7:43:48:0d:1d:0b:0a:5a:
6a:16:86:a5:5b:e4:2b:0b:ea:f5:25:25:6f:fe:35:
69:93:00:f6:b1:d0:7d:c0:bf:a2:dc:00:4a:66:49:
23:d5:66:1c:0e:d8:55:b0:8e:17:a5:82:02:a3:05:
4d:13:f2:4d:d7:23:6f:05:b7:14:2f:43:9d:91:f4:
6b:54:f6:3a:1c:fd:d6:c3:29:82:fd:fd:2c:d2:d2:
fc:9c:3e:02:45:fb:b9:95:42:35:99:63:7a:d6:72:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:05:68:DA:ED:19:5C:D8:92:A5:FD:CD:ED:0F:2F:93:4C:BF:4B:B4
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:24:8e:dd:df:93:ab:6e:9a:c8:d9:e7:12:be:d2:e8:a3:42:
e0:f8:dc:72:54:44:64:e1:a7:2d:73:87:a9:d8:2e:56:4e:49:
08:82:24:69:a0:15:bf:fc:45:93:16:15:37:93:8a:eb:8a:83:
9e:8c:d8:95:b5:8d:b7:e5:30:5e:05:bd:6f:20:bb:64:68:5e:
ff:ed:2f:41:48:cc:14:10:91:51:31:d1:d7:34:f9:f2:12:48:
31:9a:63:45:56:44:b6:e2:13:f6:9a:ab:0a:ec:87:6a:1c:50:
c6:12:3c:46:f7:a0:e4:08:0d:ce:a3:2c:67:76:2f:95:61:9d:
66:2a:21:fd:5c:31:9f:7d:cd:fd:81:cf:57:db:f5:2d:af:77:
a8:45:4f:ca:d1:b0:1a:3d:c7:ec:4c:6d:52:f9:41:9b:18:93:
49:0d:8c:46:a8:2c:43:1a:f3:d8:3c:b2:c5:8e:16:a5:68:41:
3a:a1:29:42:9b:a1:06:39:18:3c:57:1f:fa:bc:dc:a7:ee:8b:
2b:f3:fb:c1:e9:35:9f:72:58:5d:75:49:76:80:83:72:dc:1d:
e4:3a:e5:e9:0f:51:b8:33:32:d0:dc:85:c6:ef:45:c2:db:47:
ed:d8:ab:86:da:0a:2d:f8:53:b8:fa:d3:06:76:c2:8b:30:20:
1e:ac:31:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEo59X0/abLa7FvPOaSwWkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZTkwYzlkMTAwOWIzMmMxOTQ1YjZmOGU2NTg5NDgzYzVl
YTQ3NDMwHhcNMjYxMDExMDMwMDQ0WhcNMjYxMDEyMDMwMDQ0WjAzMTEwLwYDVQQD
EyhjZDA1NjhkYWVkMTk1Y2Q4OTJhNWZkY2RlZDBmMmY5MzRjYmY0YmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpk3Eps6EJ/z6l9vcZy3dok05Zeh
PReenwivNggqo7qmJHHGKSLLk35GMxkCBwC5uUA0mnjuc01QLXx02UWuX8bsL2SH
PlU6wqQCICJLr/reAqZ504g5i/NymqOpqGvGniRZXeuiUgpFUTXfFfw+w/kgubmj
eBxXQivbqO1wXZdc4+5kiJaOJHzGLbLs7AWrvJpuVxlxlf3JZVOot0NIDR0LClpq
FoalW+QrC+r1JSVv/jVpkwD2sdB9wL+i3ABKZkkj1WYcDthVsI4XpYICowVNE/JN
1yNvBbcUL0OdkfRrVPY6HP3WwymC/f0s0tL8nD4CRfu5lUI1mWN61nLHMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0FaNrtGVzYkqX9ze0PL5NMv0u0MB8GA1UdIwQY
MBaAFELpDJ0QCbMsGUW2+OZYlIPF6kdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUt
NjljNjI5ODQxNWY4LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUtNjljNjI5ODQxNWY4
LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCSO3d+T
q26ayNnnEr7S6KNC4PjcclREZOGnLXOHqdguVk5JCIIkaaAVv/xFkxYVN5OK64qD
nozYlbWNt+UwXgW9byC7ZGhe/+0vQUjMFBCRUTHR1zT58hJIMZpjRVZEtuIT9pqr
CuyHahxQxhI8Rveg5AgNzqMsZ3YvlWGdZioh/Vwxn33N/YHPV9v1La93qEVPytGw
Gj3H7ExtUvlBmxiTSQ2MRqgsQxrz2DyyxY4WpWhBOqEpQpuhBjkYPFcf+rzcp+6L
K/P7wek1n3JYXXVJdoCDctwd5Drl6Q9RuDMy0NyFxu9FwttH7dirhtoKLfhTuPrT
BnbCizAgHqwxpw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:39:58 2026 by rpki-client