Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: MNVtwoIX8Pj9G2SRcjkQw3engFP+SP13+micEnUt6fg=
Subject key identifier: 01:FA:97:CC:5F:F7:94:32:2A:83:38:20:52:A4:14:A3:86:6B:3D:D3
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 019DDC8C79D9902C41557483EB617CC5564E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 18E3
Signing time: Thu 30 Apr 2026 04:01:26 +0000
Manifest this update: Thu 30 Apr 2026 04:01:26 +0000
Manifest next update: Fri 01 May 2026 04:01:26 +0000
Files and hashes: 1: 6hDAm0v4kLNXMlHTdn5oc7FnCXo.asa (hash: 1Yy/1TmKAfo7LlpBier34giZqhsePwZG9T2lPH9vV2E=)
2: 8Xpu1O4i8G8YveSzPyz09_fdc98.roa (hash: Bt1xJ3q8KPzlgWyoG3A3cctJyDzyf6F3KbGu2rLkM5I=)
3: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: GH68f+DsS/rzgxC/svtbfRSx890qqFBbIKHAHBLv57E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:8c:79:d9:90:2c:41:55:74:83:eb:61:7c:c5:56:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Apr 30 04:01:26 2026 GMT
Not After : May 1 04:01:26 2026 GMT
Subject: CN=01fa97cc5ff794322a83382052a414a3866b3dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:da:bc:e2:5e:da:27:0f:0e:17:c2:63:82:
5f:24:c8:a2:ef:f9:6a:d7:48:51:db:a0:f6:db:ad:
04:40:78:37:db:ee:b7:5b:76:78:d3:01:00:db:95:
e9:fc:5e:14:be:24:44:86:40:2d:1e:23:17:b8:e3:
82:71:52:50:66:cf:62:db:91:d8:02:48:11:ef:ab:
20:81:0c:2b:df:ed:f1:9f:57:5e:19:30:fd:09:b2:
97:da:fa:07:75:a2:37:ed:16:f1:75:aa:38:b6:c1:
e4:f4:3f:7a:88:e9:d0:b1:61:ca:36:a4:b7:fc:35:
86:74:a6:d8:8f:eb:56:97:50:1f:37:04:3e:fc:04:
59:c7:b0:e1:e0:6e:1b:94:fe:46:f8:98:5a:e9:00:
53:7f:5e:92:42:1c:fb:01:41:7e:56:03:ff:45:0f:
8f:25:5b:ed:80:f0:ae:e6:7f:2d:d2:97:d7:5e:57:
84:7c:af:af:88:b9:3a:b5:21:bd:d6:72:8e:e2:d8:
8a:fb:61:41:ab:a0:40:d5:11:35:1c:4d:de:93:89:
53:f3:07:a5:fc:06:b7:43:34:f4:11:0f:e0:80:41:
55:62:b3:85:90:fe:e7:34:83:83:6f:e1:9a:29:90:
e7:ca:0f:77:30:1f:7e:13:99:2d:9d:87:24:20:af:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FA:97:CC:5F:F7:94:32:2A:83:38:20:52:A4:14:A3:86:6B:3D:D3
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3a:a3:5b:17:9e:31:89:5c:40:88:50:b3:6e:7f:e0:48:4d:
86:0b:9e:64:ce:63:65:45:47:66:55:e5:49:ab:df:d1:1d:2f:
de:8c:d7:bf:78:46:d7:92:2b:7c:d0:4d:4d:6e:1c:b5:ef:15:
72:d0:a1:95:5e:94:97:97:4c:3a:cc:93:e1:31:49:ec:af:23:
4d:3c:b1:63:0e:01:25:17:7e:7e:25:d2:00:bb:34:e3:21:aa:
12:c7:93:06:a6:8c:76:e8:0e:33:90:05:9e:f7:97:22:07:47:
b9:74:b2:dc:18:48:ea:ac:99:59:6c:60:a0:7a:92:a8:b9:67:
a2:41:5d:2c:5e:8d:a9:92:98:3f:f5:a4:eb:cb:29:19:6c:29:
37:b1:3e:9e:ce:a8:7e:44:d5:14:b1:f3:e8:8d:d2:6f:40:07:
bc:9a:89:d8:fd:c8:c2:41:56:e3:1e:97:c8:64:18:dd:fc:32:
d1:77:11:84:66:25:18:96:18:44:84:1b:98:bd:cb:3d:ae:b7:
fd:88:7f:a0:8d:ee:a5:09:0c:95:77:82:4d:e0:c8:6e:31:29:
af:0f:e5:20:38:86:b3:79:55:4f:27:b6:f0:68:74:06:7f:8c:
92:d1:63:21:b6:89:40:6f:39:0a:be:96:8b:a1:8c:6c:17:df:
04:19:55:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:12:37 2026 by rpki-client