Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: 8CeXxBMPvPslF42ctCYW0aVv2l98to6HLoqMc1ldDj8=
Subject key identifier: 2F:2A:B9:AF:E1:4B:27:86:34:A9:FA:F9:93:B1:F3:5D:10:46:FC:9E
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 019EFC4BE82CD586913D9374E1133F145B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 1978
Signing time: Thu 25 Jun 2026 01:01:33 +0000
Manifest this update: Thu 25 Jun 2026 01:01:33 +0000
Manifest next update: Fri 26 Jun 2026 01:01:33 +0000
Files and hashes: 1: 6hDAm0v4kLNXMlHTdn5oc7FnCXo.asa (hash: 1Yy/1TmKAfo7LlpBier34giZqhsePwZG9T2lPH9vV2E=)
2: 8Xpu1O4i8G8YveSzPyz09_fdc98.roa (hash: Bt1xJ3q8KPzlgWyoG3A3cctJyDzyf6F3KbGu2rLkM5I=)
3: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: TOhPO3/3XyAxWfe5BFswNgzrrZ+baDn+ML2hY8pGjZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:4b:e8:2c:d5:86:91:3d:93:74:e1:13:3f:14:5b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Jun 25 01:01:33 2026 GMT
Not After : Jun 26 01:01:33 2026 GMT
Subject: CN=2f2ab9afe14b278634a9faf993b1f35d1046fc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:1e:a0:a9:64:65:ee:39:f8:ad:f6:1e:f0:
65:fb:05:75:f6:7a:e1:d1:71:bc:37:ac:a6:09:7a:
27:46:7e:58:f4:19:79:da:bc:c7:5e:e7:34:72:da:
ec:f3:37:46:46:ac:09:fd:c7:6c:e3:9f:6f:29:f2:
0a:9f:58:b3:ef:9e:e7:22:3e:25:5e:0b:e5:ac:5b:
1e:5b:95:1b:58:61:a4:2d:77:f2:ef:fa:64:d4:67:
e5:09:58:78:d6:3e:87:62:ae:84:cf:80:97:54:3a:
4b:5e:f4:bf:15:85:e4:64:c7:b6:29:cb:21:e1:fe:
4f:18:d3:9b:98:76:ba:fc:ca:06:a7:ab:af:d1:50:
28:72:a7:bb:2e:6f:58:8f:50:b6:44:c7:ca:da:30:
8e:7a:08:05:1d:f1:0f:13:82:ee:59:32:e2:ae:81:
d3:a4:ac:dd:43:9d:a7:13:e2:7f:4a:65:13:02:f8:
07:89:cb:47:d6:32:50:4c:02:d5:85:45:7e:c2:69:
82:e6:f8:9d:b2:31:6f:ca:72:62:cf:3b:78:f0:a1:
6f:88:d8:9c:91:9b:ff:48:96:f0:94:b5:1e:66:d2:
e4:40:5f:b7:5a:f9:c8:60:08:83:da:dd:a8:c4:f3:
b0:22:b2:3b:fc:da:76:04:68:07:55:e4:f2:53:2b:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2A:B9:AF:E1:4B:27:86:34:A9:FA:F9:93:B1:F3:5D:10:46:FC:9E
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2d:1e:78:e1:b7:9a:da:2e:58:a0:86:7a:3f:a7:f1:b7:83:
4a:a0:73:cc:9c:62:cd:45:b1:d1:87:e9:70:6e:80:e9:ba:1f:
4e:ec:04:10:71:00:2b:80:9a:62:40:e4:74:82:ff:72:4b:bb:
e9:a0:f7:f8:63:a8:9f:9d:d8:16:82:ed:88:e8:3c:f1:8e:9b:
8e:ea:27:c0:f0:42:3f:70:b3:87:36:d4:54:fc:00:b0:a3:36:
48:d4:09:a3:35:ec:2e:53:c5:c2:22:18:24:ed:df:89:3a:a0:
0c:7b:e6:67:f0:94:33:ee:96:af:da:dc:10:b9:12:af:89:dd:
14:17:79:f9:d5:bb:fa:9e:31:24:25:04:88:3d:f3:cf:e6:37:
4c:0b:c8:ed:e3:5b:c2:bf:a5:84:17:5c:88:43:6f:cb:20:84:
e2:5a:ed:d7:80:b9:3b:25:1e:da:6f:60:3c:66:4a:e5:aa:9f:
82:32:13:47:91:65:d8:10:7d:64:d1:8c:d3:3d:3c:79:6e:b5:
d7:00:46:25:15:95:d7:6e:6c:d7:f4:83:cd:b2:9f:68:c7:7f:
94:eb:3b:24:b4:33:29:74:a7:87:d0:5e:80:e3:2d:74:14:5b:
a2:c4:68:d3:a1:24:e5:05:94:a8:e1:ae:a4:8f:10:06:bb:6a:
be:cb:7b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:33:24 2026 by rpki-client