Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: xQnQV/P/RFFQZ0GPR2Ngu+ePDwkkxA92kFBse3eC1qg=
Subject key identifier: 2B:06:CC:67:66:97:53:FF:2E:2B:F2:BA:97:36:AA:C1:F3:B8:4F:CD
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 01A0E6D336C0CA3B4AB6E76E516F4492C415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 1A76
Signing time: Mon 28 Sep 2026 07:03:16 +0000
Manifest this update: Mon 28 Sep 2026 07:03:16 +0000
Manifest next update: Tue 29 Sep 2026 07:03:16 +0000
Files and hashes: 1: 6hDAm0v4kLNXMlHTdn5oc7FnCXo.asa (hash: 1Yy/1TmKAfo7LlpBier34giZqhsePwZG9T2lPH9vV2E=)
2: 8Xpu1O4i8G8YveSzPyz09_fdc98.roa (hash: Bt1xJ3q8KPzlgWyoG3A3cctJyDzyf6F3KbGu2rLkM5I=)
3: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: 3bK9n061VPVXXtzTZ5DpykHi+S6+Z5p2JaFwKrNN3fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 07:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d3:36:c0:ca:3b:4a:b6:e7:6e:51:6f:44:92:c4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Sep 28 07:03:16 2026 GMT
Not After : Sep 29 07:03:16 2026 GMT
Subject: CN=2b06cc67669753ff2e2bf2ba9736aac1f3b84fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:fb:e5:d1:bc:95:58:04:33:eb:6a:e2:26:
be:ec:ea:6f:73:6c:25:58:f9:d1:f6:bd:a5:d6:4d:
3f:1d:08:95:29:22:3b:ee:27:c4:da:2a:e1:08:b9:
f1:77:39:a8:07:f3:46:7f:19:58:f8:13:43:9b:59:
b5:86:71:65:ba:8a:6b:f0:b7:33:f1:ac:f3:5a:85:
44:94:77:77:d8:f8:06:57:74:ce:c4:6b:58:64:49:
59:8f:a9:d8:22:a7:35:07:67:1a:e2:cb:fe:4c:ac:
41:d2:66:ee:6f:75:f5:56:3c:ef:fb:f1:88:6b:6f:
6d:e8:69:3a:42:05:8f:1a:62:0a:17:9d:b5:7b:65:
69:93:73:f1:ab:45:5d:e4:de:49:f5:b0:09:92:14:
1a:63:02:ea:2c:c5:7d:de:4a:cb:15:26:86:95:65:
06:a8:95:54:91:33:da:d5:86:76:6c:f2:38:62:93:
00:01:22:9b:87:45:61:b8:bc:43:c9:fc:c2:f6:47:
e1:80:73:65:98:5c:47:7d:0a:ca:33:86:50:74:2f:
fd:6e:91:0f:2c:22:ba:e7:7a:6c:03:b8:d2:5d:94:
c5:b1:e2:18:5d:32:91:a2:8e:7b:94:18:d0:6a:1d:
c8:30:0b:1d:f2:19:b3:06:58:00:c9:d4:26:ca:3e:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:06:CC:67:66:97:53:FF:2E:2B:F2:BA:97:36:AA:C1:F3:B8:4F:CD
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:55:85:54:ef:6b:05:6b:6a:d2:79:be:e9:48:a8:85:08:30:
7e:c6:87:60:d4:3b:81:51:26:cf:d1:38:56:08:32:0a:83:b9:
1b:59:a8:64:56:3a:00:63:1b:5a:67:4b:79:b2:27:bc:d3:7a:
61:fb:90:f9:30:46:a6:5c:d2:d7:6c:29:af:f2:a2:7e:58:8a:
0f:d5:7d:7d:70:13:9a:4f:cb:c7:45:ed:a5:58:71:a2:b9:97:
0d:b9:84:c2:00:e8:d0:74:25:c7:f2:fb:3c:1e:f4:d2:f4:c9:
25:9c:f8:3c:c0:f7:13:92:19:d7:a9:ad:6c:e8:64:11:8f:d5:
fe:1e:40:5a:38:0c:80:9c:35:f2:35:98:bf:d8:61:8c:d1:e7:
ff:2f:6f:0c:76:54:2f:9f:b0:76:94:2d:33:75:be:2e:87:ed:
5b:d4:7c:aa:c4:ae:79:7b:cb:3f:3d:a8:22:cc:21:21:f6:48:
cc:b4:67:76:0d:2d:50:12:ce:f9:18:e4:fa:7b:aa:48:bf:b5:
22:63:ad:33:c5:b5:9b:cd:c1:8e:4b:bb:27:c8:2b:4c:54:ab:
ff:18:a2:16:9a:81:32:f8:17:4e:d0:24:4a:e7:0f:2a:55:83:
dc:79:f5:25:46:9b:13:d6:92:ef:ca:97:f3:af:47:ea:e1:f9:
65:d4:a5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:14:45 2026 by rpki-client