Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: 2SNzCw+2meoRoDAtvzQ6bMl+mCfBnFCn3QbdfNHZ1Qs=
Subject key identifier: 98:9D:ED:F0:BA:24:57:D1:04:C6:8E:45:34:B6:62:31:4A:DB:7E:39
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 019CADC81841BFD9D44805777F09A4D3ED7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0C30
Signing time: Mon 02 Mar 2026 09:01:37 +0000
Manifest this update: Mon 02 Mar 2026 09:01:37 +0000
Manifest next update: Tue 03 Mar 2026 09:01:37 +0000
Files and hashes: 1: J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa (hash: lcx5+pKS3s5wMnsyT5k7DP3iJe+El0QomD11K0ox374=)
2: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: FNvRReaSuGd/HfEI+Q3Nlb3fuhtgE36IwXC6SJUOIKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:18:41:bf:d9:d4:48:05:77:7f:09:a4:d3:ed:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Mar 2 09:01:37 2026 GMT
Not After : Mar 3 09:01:37 2026 GMT
Subject: CN=989dedf0ba2457d104c68e4534b662314adb7e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:66:95:c3:94:ea:b0:b7:58:22:01:29:51:30:
5a:1f:21:0c:db:4f:f3:5b:23:20:3a:79:03:81:83:
28:00:d2:0f:10:7f:58:47:26:a0:99:33:73:f0:fb:
c5:d6:90:c6:59:82:ad:4f:e8:96:37:0b:81:10:a8:
67:4c:42:39:59:c3:81:d6:0b:96:e7:6f:f0:62:ac:
2b:b5:af:aa:31:d0:f6:0b:5b:2f:26:fd:d5:a7:8c:
a5:be:03:92:97:8b:16:56:53:27:e0:32:73:e1:9f:
97:3a:3e:54:ab:d9:2f:e4:4b:6f:a4:82:20:eb:d9:
0e:7a:4b:1d:c1:be:d7:b8:03:6a:97:73:63:a7:9d:
a3:65:1e:d0:de:80:66:03:ab:2f:fe:f5:4a:68:35:
fe:34:f0:5e:93:4b:4a:2e:dd:4e:b0:d9:99:0f:09:
d8:c3:87:5d:d0:81:6d:3c:2f:e3:a6:da:84:82:e7:
5a:dc:41:83:c2:91:1c:c7:7c:29:3b:cc:6b:da:bd:
7d:3c:2d:b3:9e:f9:70:8c:a4:a5:19:b9:b3:9d:5c:
12:d1:7c:cf:c1:f0:82:ee:f9:62:4d:9e:04:eb:e0:
c5:10:d3:a7:b6:55:79:61:66:50:01:7d:f8:28:08:
9e:1e:2f:13:fb:66:b9:b1:2c:02:18:97:5d:a4:3b:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9D:ED:F0:BA:24:57:D1:04:C6:8E:45:34:B6:62:31:4A:DB:7E:39
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b7:3c:bb:5f:6e:6e:3f:fd:2c:03:a6:fe:30:59:ed:97:cd:
8d:d4:7e:3a:49:59:ad:69:0f:c4:1c:51:dc:a4:ca:4b:73:d5:
72:6e:c4:5f:83:df:83:9d:0d:3b:d9:e8:fb:15:90:3f:c3:a3:
28:02:91:43:05:03:ad:f2:b7:e6:fa:12:14:41:f6:5b:05:2b:
43:96:a8:5a:20:18:59:eb:3b:6c:b3:a9:0b:6e:9d:89:bd:2a:
ff:f7:83:25:81:f7:af:07:ab:b9:ce:0d:be:66:da:da:f3:49:
0f:2a:b8:06:a6:b2:e4:9d:9b:9f:72:01:76:54:27:76:b8:25:
ad:da:57:ab:97:a6:eb:06:72:ec:a9:fa:23:f7:e4:43:9d:03:
de:1c:4f:ba:05:5b:6b:1c:d0:e2:00:76:45:05:c6:0e:d8:87:
3a:5c:5d:dc:7d:49:f8:3c:00:29:6c:48:a6:0a:51:fa:9e:02:
0a:cb:34:96:17:0d:4a:65:08:4c:90:30:10:31:ff:0e:33:ad:
6a:7a:95:c9:e8:8f:6c:f1:aa:bd:a4:6f:27:05:68:29:41:54:
64:55:f3:3d:a8:0e:5d:ce:77:3c:c3:74:46:24:8d:2c:ff:6d:
b8:74:e9:7a:be:a6:6a:c7:d1:b1:c8:79:00:7e:72:b8:8a:20:
f2:fb:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:16:01 2026 by rpki-client