Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: 8Xrw1gtmq76XnXXirqbExbwofhkyhU09B0cdFq/m6rU=
Subject key identifier: 4C:01:BD:6B:9F:66:71:84:F3:11:33:0C:A1:1E:68:B6:7E:76:28:2B
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 019EC44A6A79FACC30919E1025A91EB926E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 195B
Signing time: Sun 14 Jun 2026 04:01:11 +0000
Manifest this update: Sun 14 Jun 2026 04:01:11 +0000
Manifest next update: Mon 15 Jun 2026 04:01:11 +0000
Files and hashes: 1: OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa (hash: 16WKJl9nAt0F5mIivt4fYmu6w5/8Iqob4RhznilyhtM=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: nDKxyVYwmwISvcgc2DpyrnE4BH4IdGYBCiBSSa37pR8=)
3: ken38hVxmy14aPMAbzAPgPTg5Qc.roa (hash: TJhvTJDZL4uFVPaDoKqNX3HyglY2ChDkoRzq0njH+TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:4a:6a:79:fa:cc:30:91:9e:10:25:a9:1e:b9:26:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Jun 14 04:01:11 2026 GMT
Not After : Jun 15 04:01:11 2026 GMT
Subject: CN=4c01bd6b9f667184f311330ca11e68b67e76282b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:80:64:89:b0:e6:36:c5:9d:1f:c8:14:72:
67:a8:15:46:e9:4c:05:ea:f4:10:10:81:85:e8:7e:
23:75:e2:7a:6b:51:ac:09:76:86:0a:c7:91:97:0c:
58:b2:dd:9f:4c:d0:57:99:91:c5:e0:eb:65:74:9c:
5a:82:53:fc:34:7f:e6:94:7c:99:08:aa:b3:5b:1b:
92:fd:b7:64:45:54:d1:cd:3b:46:17:5b:19:b2:0f:
2b:c5:bf:2a:9a:42:3b:c4:95:57:06:90:fb:05:89:
5b:1c:1a:2b:ab:77:15:e3:0d:46:06:08:f1:a4:c3:
ec:d1:17:3e:4e:f2:b5:31:44:f2:56:d2:21:65:d6:
ba:8d:46:12:fa:c9:fb:8c:7c:e3:ec:03:98:3c:59:
33:bd:dd:ca:f4:5c:eb:bd:96:94:e8:9e:30:ce:ba:
9d:6a:bf:c9:81:6f:83:bb:c6:a2:59:68:bb:73:12:
3b:00:66:53:78:72:78:f0:91:2a:6e:8a:c2:6c:c5:
8c:66:4f:52:c5:15:f8:49:28:81:15:8e:7b:36:fc:
07:d6:b5:9b:b8:de:6a:1f:2c:ed:dd:c4:96:55:65:
b2:03:9d:58:d7:08:06:c2:4e:c9:eb:c6:29:53:7d:
0b:fb:41:48:c5:08:6e:fc:bf:6a:1c:fe:7f:25:ba:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:01:BD:6B:9F:66:71:84:F3:11:33:0C:A1:1E:68:B6:7E:76:28:2B
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:75:a2:5d:98:d8:0c:9b:7c:8d:e5:2e:fa:ff:76:ba:9a:3e:
e5:10:fd:25:eb:a2:f5:d8:7f:3f:79:eb:6c:37:77:ca:95:e8:
bc:75:d3:e4:eb:4f:84:58:85:51:89:70:8d:8f:6c:46:05:d7:
4e:56:c8:44:a5:99:93:c6:bb:88:96:c0:10:eb:f3:89:32:de:
bb:ea:72:d5:e8:1b:f0:2b:fa:c0:fe:2e:dd:29:33:36:80:dc:
e2:54:f5:3d:ca:60:4e:d3:78:f6:b1:85:25:8a:c6:a6:c5:16:
95:a1:e1:00:b5:e3:b2:4e:cf:61:58:f7:bb:80:59:91:dc:33:
23:25:db:45:18:bd:ab:8f:a6:55:82:1b:05:bf:53:23:18:29:
e6:ba:62:1d:d7:16:4b:cf:bf:6c:e8:67:1b:e3:ce:79:ef:52:
10:01:09:fa:c0:ad:59:90:08:d6:81:8b:dc:c8:52:6a:46:ad:
e0:53:7b:3c:22:46:59:35:f1:35:02:b8:3f:f0:e2:61:94:76:
05:fa:1e:a6:97:b6:6d:b5:41:b9:46:83:f4:21:49:70:83:45:
c0:97:b0:98:85:2c:16:a2:cc:d0:0f:a2:19:0b:a1:25:3d:5c:
0e:12:55:ca:ec:3d:5e:80:bb:c4:0c:57:4a:24:6c:ca:5c:fe:
32:45:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:19 2026 by rpki-client