Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: HON6L8WudX3uDek13fHGnckGL49LA2AD3ZZSimwuM1Y=
Subject key identifier: 56:89:DE:A0:97:78:71:9B:0A:7D:01:75:F3:6E:C1:E9:CC:CF:43:BD
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 019EC2C9E6705F1C346CB3FB3CFA77947AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0D44
Signing time: Sat 13 Jun 2026 21:01:11 +0000
Manifest this update: Sat 13 Jun 2026 21:01:11 +0000
Manifest next update: Sun 14 Jun 2026 21:01:11 +0000
Files and hashes: 1: J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa (hash: lcx5+pKS3s5wMnsyT5k7DP3iJe+El0QomD11K0ox374=)
2: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: Me2MUVg2jFSalt+pdN112E2CYBOq/EAolmvkPqq4mEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:e6:70:5f:1c:34:6c:b3:fb:3c:fa:77:94:7a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Jun 13 21:01:11 2026 GMT
Not After : Jun 14 21:01:11 2026 GMT
Subject: CN=5689dea09778719b0a7d0175f36ec1e9cccf43bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:c9:90:41:78:ac:32:1f:a8:89:19:c1:04:
f7:4a:45:d3:e5:aa:cd:65:53:b3:a2:13:79:a7:ef:
22:5d:da:7a:66:80:a8:cc:c4:40:a0:5f:42:a3:df:
13:16:e7:7c:1a:ee:d9:18:13:42:30:2c:90:bd:4c:
b7:68:4e:fb:f5:13:1f:b0:d4:e4:5b:0c:ae:f8:b2:
5b:e3:b6:c2:f0:a4:d3:8b:b2:7f:24:a1:8a:6f:10:
29:70:c4:a7:7c:0d:19:80:2d:0b:a1:99:a5:e0:87:
23:d0:30:e7:e9:90:90:3c:c3:56:58:56:e5:52:5c:
87:c3:55:e6:fa:6b:59:d0:79:1f:8b:35:e7:b5:a8:
fd:ee:5b:37:63:b4:ce:46:12:f1:ec:9e:28:69:25:
8f:cc:f3:83:88:9f:00:81:c6:55:cd:e1:f2:da:f1:
78:b1:28:ba:55:f0:13:77:45:ea:32:55:8c:f8:a5:
31:d7:90:3e:a0:5a:2b:c1:d8:5f:e1:38:6e:0e:18:
47:e0:bd:17:3e:5c:29:93:19:b7:f9:b1:de:d9:00:
2c:7c:31:3c:73:e6:34:6e:60:62:2e:9c:35:b3:94:
72:07:d1:d9:4f:bb:31:12:38:68:8d:92:4f:d6:22:
c9:16:38:d7:5e:9f:91:e4:8b:b2:31:16:21:b6:d5:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:89:DE:A0:97:78:71:9B:0A:7D:01:75:F3:6E:C1:E9:CC:CF:43:BD
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:76:f4:d3:ff:12:c2:52:de:ef:40:ba:1f:d4:05:64:96:7a:
cd:63:7d:a1:db:a3:3d:5e:f0:f7:ef:6d:f2:18:4b:3d:8c:9f:
80:73:4a:fa:ee:ac:73:a1:0e:6a:b8:00:e2:40:63:ba:1a:7e:
0d:ae:80:47:ed:ea:b2:de:79:67:63:70:1f:3d:df:6c:3f:e1:
c1:54:a1:e7:e2:42:0e:bd:95:71:04:00:32:84:b7:7d:f0:95:
ac:a9:93:14:fc:2b:cd:c8:16:12:ae:82:76:a2:8c:43:67:fb:
e1:aa:e0:a7:48:af:84:f9:6b:cb:b0:5c:7c:ac:da:e6:79:fb:
da:87:f1:58:44:ca:c2:f3:c9:9a:b2:ac:5c:27:f2:93:fa:84:
af:0b:89:46:54:5f:03:71:ef:c5:19:60:be:57:3d:66:ab:a7:
0b:0c:7e:fc:ed:50:18:02:5e:cc:40:c9:5f:7b:49:ea:24:fe:
83:24:c9:14:be:c3:89:31:35:a2:0c:36:74:28:e4:37:0f:91:
be:b2:b9:64:93:77:08:92:31:12:a2:6b:b9:07:6f:2b:36:b5:
bd:6f:17:77:09:1f:f7:d4:75:42:e7:8e:95:31:48:21:78:11:
6a:2e:e0:8a:3b:33:88:a0:c0:1e:09:ca:3a:09:81:18:d9:86:
76:54:04:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyeZwXxw0bLP7PPp3lHrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZTkwYzlkMTAwOWIzMmMxOTQ1YjZmOGU2NTg5NDgzYzVl
YTQ3NDMwHhcNMjYwNjEzMjEwMTExWhcNMjYwNjE0MjEwMTExWjAzMTEwLwYDVQQD
Eyg1Njg5ZGVhMDk3Nzg3MTliMGE3ZDAxNzVmMzZlYzFlOWNjY2Y0M2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjTJkEF4rDIfqIkZwQT3SkXT5arN
ZVOzohN5p+8iXdp6ZoCozMRAoF9Co98TFud8Gu7ZGBNCMCyQvUy3aE779RMfsNTk
Wwyu+LJb47bC8KTTi7J/JKGKbxApcMSnfA0ZgC0LoZml4Icj0DDn6ZCQPMNWWFbl
UlyHw1Xm+mtZ0HkfizXntaj97ls3Y7TORhLx7J4oaSWPzPODiJ8AgcZVzeHy2vF4
sSi6VfATd0XqMlWM+KUx15A+oForwdhf4ThuDhhH4L0XPlwpkxm3+bHe2QAsfDE8
c+Y0bmBiLpw1s5RyB9HZT7sxEjhojZJP1iLJFjjXXp+R5IuyMRYhttVnxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaJ3qCXeHGbCn0BdfNuwenMz0O9MB8GA1UdIwQY
MBaAFELpDJ0QCbMsGUW2+OZYlIPF6kdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUt
NjljNjI5ODQxNWY4LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUtNjljNjI5ODQxNWY4
LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHb00/8S
wlLe70C6H9QFZJZ6zWN9odujPV7w9+9t8hhLPYyfgHNK+u6sc6EOargA4kBjuhp+
Da6AR+3qst55Z2NwHz3fbD/hwVSh5+JCDr2VcQQAMoS3ffCVrKmTFPwrzcgWEq6C
dqKMQ2f74argp0ivhPlry7BcfKza5nn72ofxWETKwvPJmrKsXCfyk/qErwuJRlRf
A3HvxRlgvlc9ZqunCwx+/O1QGAJezEDJX3tJ6iT+gyTJFL7DiTE1ogw2dCjkNw+R
vrK5ZJN3CJIxEqJruQdvKza1vW8Xdwkf99R1QueOlTFIIXgRai7gijsziKDAHgnK
OgmBGNmGdlQEOQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:45:46 2026 by rpki-client