Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: OyzJU3AZOevSqg03yHKZ+SMvyZCVgoYXXaW5fZBYZzo=
Subject key identifier: 1D:CB:AC:3C:C7:46:D5:6B:47:AF:8F:ED:B9:66:0B:3F:0A:12:7A:12
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 01A139DB30BF0FA6C624348F6024BE80D636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 1AA1
Signing time: Wed 14 Oct 2026 10:00:28 +0000
Manifest this update: Wed 14 Oct 2026 10:00:28 +0000
Manifest next update: Thu 15 Oct 2026 10:00:28 +0000
Files and hashes: 1: OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa (hash: 16WKJl9nAt0F5mIivt4fYmu6w5/8Iqob4RhznilyhtM=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: 4LDZQnq5FS/8ksX7jzBn9ypQYWKZPyLg37OoE/p6r9Q=)
3: ken38hVxmy14aPMAbzAPgPTg5Qc.roa (hash: TJhvTJDZL4uFVPaDoKqNX3HyglY2ChDkoRzq0njH+TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:db:30:bf:0f:a6:c6:24:34:8f:60:24:be:80:d6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Oct 14 10:00:28 2026 GMT
Not After : Oct 15 10:00:28 2026 GMT
Subject: CN=1dcbac3cc746d56b47af8fedb9660b3f0a127a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:48:35:ca:54:49:c7:9a:b9:24:34:aa:1d:
84:e1:48:f6:52:68:fc:93:1f:5c:01:d9:17:21:63:
7a:14:ff:c6:d5:fd:1f:f6:78:ab:c1:17:f7:a4:62:
15:03:45:3c:0b:5e:58:ed:56:d0:ff:9d:2a:7f:b2:
cb:7d:0a:0e:ce:96:c3:d5:6b:30:a4:f9:37:f5:54:
8e:cb:13:00:dc:5d:d9:ac:42:8e:68:5a:9e:a7:5c:
7b:a6:dc:25:14:fb:ec:b9:70:54:d5:b9:2a:89:ae:
6c:6a:12:c1:6c:36:97:88:87:a2:14:99:ef:e6:51:
bf:d1:b8:4e:26:e3:10:54:4a:99:33:3f:e6:fe:50:
92:e5:fd:47:67:22:fd:56:5a:5d:8b:64:be:7b:4c:
2a:ee:90:1f:a8:3f:bf:55:d7:46:8e:d0:24:c4:4a:
74:50:57:dc:ef:7e:ee:be:5d:df:df:8e:e2:4b:bd:
34:02:43:b1:cf:ea:b0:c7:9b:7d:18:8d:75:62:dd:
62:ac:66:5f:e6:06:94:9a:6b:0d:69:5b:36:a6:e0:
3e:1b:98:28:1c:fc:fe:ec:b2:23:63:d4:f3:1d:c2:
4b:5d:d3:1f:40:1a:9b:57:04:98:4d:d3:dd:19:26:
91:db:83:51:72:9d:6b:2e:98:23:fb:99:fa:32:a8:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CB:AC:3C:C7:46:D5:6B:47:AF:8F:ED:B9:66:0B:3F:0A:12:7A:12
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c6:39:d8:51:bf:80:90:77:a4:23:2b:71:f1:72:a4:f8:53:
89:91:0a:64:65:69:1f:35:ac:1d:59:5d:28:23:77:9b:5a:54:
ad:f1:9a:c8:65:be:22:ef:97:ec:56:c9:6f:6b:19:02:c1:f2:
ce:8f:01:01:d2:81:cc:99:61:e2:ea:a9:82:19:47:1f:9c:56:
16:32:21:88:ed:fd:6f:5b:74:5b:e2:4c:a5:5e:d3:10:9e:6c:
63:77:14:6e:d9:e9:1c:80:ed:67:d9:ed:7e:9c:6c:6f:04:fd:
dc:46:02:53:98:8b:38:73:f4:05:0b:f8:45:37:8d:1c:a9:33:
e5:e0:72:1d:c0:6a:39:d8:41:0c:56:ac:f6:59:5d:d9:87:d0:
7f:5f:19:17:af:b5:bc:ab:f4:76:d1:cf:a9:b5:2e:c3:c2:88:
1d:a1:b5:3b:52:fc:46:d0:8f:33:2d:63:5b:6b:d6:02:2f:35:
31:5a:5d:fb:c3:e2:a6:eb:15:f0:86:fd:90:29:39:ff:dd:39:
f5:97:72:49:3d:11:e3:7f:f0:c4:b5:e6:af:7d:f2:ac:36:28:
9f:ea:60:4e:cb:f1:4d:53:37:9c:45:33:1a:57:a2:b2:42:b6:
29:30:e5:91:50:d4:f1:1b:a0:14:7a:95:89:72:a8:7f:50:30:
a3:70:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:40:57 2026 by rpki-client