Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: zBWUgHSN2it/VP++4oqCIVTnwM7bG44RBreEX6/cJPI=
Subject key identifier: E1:09:A4:C2:92:B8:B9:C1:11:D2:5F:A4:C9:8E:C4:33:B7:3B:8F:2E
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 019D9B51005B288418C80BF2C82A3E7ACF99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0CAB
Signing time: Fri 17 Apr 2026 12:01:10 +0000
Manifest this update: Fri 17 Apr 2026 12:01:10 +0000
Manifest next update: Sat 18 Apr 2026 12:01:10 +0000
Files and hashes: 1: J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa (hash: lcx5+pKS3s5wMnsyT5k7DP3iJe+El0QomD11K0ox374=)
2: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: ZtbzBYw1iI0/PECWOfwz7+pD0nOsL2I9Pf1ojgJf3CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:00:5b:28:84:18:c8:0b:f2:c8:2a:3e:7a:cf:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Apr 17 12:01:10 2026 GMT
Not After : Apr 18 12:01:10 2026 GMT
Subject: CN=e109a4c292b8b9c111d25fa4c98ec433b73b8f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:42:cb:63:86:77:01:6d:ab:8e:90:c0:e2:
9e:30:9e:53:c5:a0:89:32:32:71:23:13:6d:57:37:
d7:4e:9c:79:b9:31:01:8d:ff:75:63:59:86:2b:5c:
0b:5f:2c:6f:d1:2f:24:df:a0:28:c9:94:cc:d9:85:
85:17:b1:25:3b:88:99:ae:a9:f1:30:2a:17:10:bc:
48:8e:f5:15:ec:03:28:c6:e0:9d:dc:2e:8c:f3:04:
4f:55:85:13:a0:ee:d1:e6:42:80:d3:c9:31:bd:00:
f8:15:a5:bc:1e:70:26:e6:ba:87:f6:9d:1a:41:e9:
37:de:81:85:78:13:12:6e:99:7d:38:ea:29:95:0d:
57:0a:1d:72:f4:29:d3:09:24:4a:28:b0:27:b2:30:
69:ed:32:84:a3:c0:2e:69:3a:7a:ce:95:4a:ba:ef:
24:73:4d:98:89:5f:9a:ab:06:55:ca:4b:f5:4a:92:
34:11:23:bd:bc:b2:9a:0f:1b:2f:4e:b6:75:82:0e:
be:51:44:64:37:14:f8:06:dd:91:50:f9:4a:d4:2c:
51:f9:41:25:5f:e1:d2:31:b4:38:5f:63:b0:34:db:
e3:14:2b:6b:96:1c:74:b9:d0:e3:ee:1f:7e:83:9e:
c8:46:1d:b1:8f:8c:18:d0:de:9f:1d:33:6a:f4:07:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:09:A4:C2:92:B8:B9:C1:11:D2:5F:A4:C9:8E:C4:33:B7:3B:8F:2E
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8e:08:ee:53:c8:31:14:f9:58:13:75:6b:fd:81:fc:4b:e5:
c5:2c:a1:67:3f:a6:b0:b7:77:a0:d4:17:2c:20:f7:cf:25:8e:
0e:74:dd:a2:32:98:3a:c3:97:ef:1e:47:27:bb:86:d8:ac:e7:
5b:f6:fa:77:ad:cc:9f:d1:6e:c7:af:08:e8:c4:3f:f0:34:fc:
8a:5b:6b:8c:ef:81:7e:5a:b2:bf:b2:41:c2:50:b3:b0:c7:6f:
47:59:98:26:11:4c:f2:af:d7:f3:91:43:a2:8f:f7:88:ad:5a:
d0:ee:71:c6:14:57:0d:27:a2:b5:93:2b:1b:d7:5a:58:ea:7b:
6e:4b:93:58:24:51:45:00:e1:f3:c1:87:a4:94:7e:5a:d0:88:
fa:10:88:92:de:c6:ea:fb:a3:8c:aa:c1:86:e1:ec:96:b1:ce:
e7:07:9a:a2:f1:90:62:3d:be:3a:90:fa:2e:05:61:ce:a7:98:
92:c9:2b:e0:f9:a2:f7:5b:8f:59:01:2e:38:68:ce:89:d0:53:
51:3f:34:92:43:7b:17:eb:76:f2:d7:1f:fb:70:66:85:ba:13:
e7:a7:1a:fd:1b:b7:ad:ab:cf:3a:58:a0:04:16:86:43:43:6b:
4e:12:c8:39:36:b2:65:3c:66:22:e2:bc:3f:2f:72:29:23:83:
15:e4:27:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:17 2026 by rpki-client