Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: TvdOXotu++ZkeKihD78D/0zFD//wO+U2UFnbUQVs9Co=
Subject key identifier: F6:2E:9A:8B:8E:94:28:29:60:A7:51:AE:31:79:E8:55:95:B1:66:D9
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 01A14383E8FC636D2FFC20C21FDB544E479E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 1AA6
Signing time: Fri 16 Oct 2026 07:01:20 +0000
Manifest this update: Fri 16 Oct 2026 07:01:20 +0000
Manifest next update: Sat 17 Oct 2026 07:01:20 +0000
Files and hashes: 1: OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa (hash: 16WKJl9nAt0F5mIivt4fYmu6w5/8Iqob4RhznilyhtM=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: jtGQIfRQs7ulGUnA9gFoIYggw5l0mshgtpx4iJ9Qn2s=)
3: ken38hVxmy14aPMAbzAPgPTg5Qc.roa (hash: TJhvTJDZL4uFVPaDoKqNX3HyglY2ChDkoRzq0njH+TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:83:e8:fc:63:6d:2f:fc:20:c2:1f:db:54:4e:47:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Oct 16 07:01:20 2026 GMT
Not After : Oct 17 07:01:20 2026 GMT
Subject: CN=f62e9a8b8e94282960a751ae3179e85595b166d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:d2:6a:35:3a:ff:66:9e:a5:43:d0:86:e5:
4f:eb:57:ec:d9:bc:f9:e6:7a:2e:2c:66:25:61:75:
07:25:03:5e:49:24:ac:82:48:e7:e7:27:63:90:c5:
2c:42:8d:fa:01:41:ff:1f:a5:56:fe:50:18:6b:1a:
44:48:20:a1:06:71:75:04:98:21:05:54:87:4c:5c:
cc:a4:57:a7:53:aa:ad:ca:ea:79:5c:2b:f9:4e:7f:
67:8b:39:65:4d:ca:36:9e:c5:10:9f:da:40:90:76:
5a:4e:4f:47:8a:4e:6e:16:dd:56:d6:fe:18:1e:c2:
68:00:8a:f4:9a:8b:85:3d:a5:c7:11:2d:99:1e:50:
d8:86:c7:b0:82:6c:17:e3:da:2a:bc:9c:06:17:13:
0f:42:e1:3b:74:7b:4b:0e:db:df:f2:32:43:dd:d5:
3d:61:10:fe:95:cb:3a:58:f9:6c:a6:bf:6c:e0:37:
ed:b1:b8:63:e6:1b:c0:ef:41:90:66:04:91:d3:26:
17:fb:48:b1:f1:a0:d7:e9:4e:97:44:b9:73:c5:60:
e2:1b:3b:2e:84:3f:8b:f2:96:70:09:dd:e8:8c:c1:
1d:6d:54:57:0b:b9:a5:a4:15:14:1b:0c:c2:73:a8:
a1:92:20:76:00:30:e2:6c:be:e5:d8:9f:b9:7e:78:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2E:9A:8B:8E:94:28:29:60:A7:51:AE:31:79:E8:55:95:B1:66:D9
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:91:9b:3d:7f:8e:7e:3e:f8:83:65:5d:6f:ac:b5:69:1d:b7:
12:60:2b:f3:f5:3a:54:c1:a7:5a:da:21:c9:7c:ef:c0:99:1e:
30:68:19:7d:b8:f5:c8:54:05:e7:be:45:8d:63:d3:8a:dc:4e:
f5:a2:0c:2f:70:4f:17:c6:eb:ef:34:ad:cf:0f:ac:e6:04:1a:
19:80:22:d5:f0:f2:8a:79:e9:88:4f:aa:84:01:bc:b0:88:51:
39:ed:2f:cd:04:98:9b:45:87:d8:d6:a8:43:96:2d:f8:23:8c:
9a:59:05:18:82:e0:37:c9:f3:da:d6:13:4e:e0:47:71:8d:a0:
17:47:f7:34:2d:3d:3e:0a:ce:83:e9:a1:25:ea:a9:06:98:06:
be:42:0d:18:68:aa:8e:21:e9:39:f7:37:46:f3:a3:2f:52:cb:
10:52:d7:d9:92:f0:c4:60:87:cd:1f:7c:7a:8c:56:04:58:12:
5c:63:d3:fc:b5:c8:d9:e1:3d:89:8d:a4:ab:40:6d:d2:c2:ef:
7a:f6:c4:40:32:91:9a:5e:8d:dd:9a:9f:48:45:6f:a9:b4:86:
08:62:6c:40:68:b6:5c:e6:dd:b7:c3:43:8c:1d:ab:85:10:44:
2a:2a:50:f4:90:0e:2c:35:cf:c5:7c:f7:1f:06:45:1b:63:d9:
a6:f8:c2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:23:47 2026 by rpki-client