Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: 5lArmNkjKKV2hPBgkuNBq7vqVR8bBQaiWp/T6+JWh0Y=
Subject key identifier: 5A:4C:01:14:D5:43:AF:14:5D:32:2E:9F:12:9F:E1:E6:7A:58:2A:DF
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 019CF4CDE252DEC77266616D668F66E25541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 186B
Signing time: Mon 16 Mar 2026 04:00:59 +0000
Manifest this update: Mon 16 Mar 2026 04:00:59 +0000
Manifest next update: Tue 17 Mar 2026 04:00:59 +0000
Files and hashes: 1: 6hDAm0v4kLNXMlHTdn5oc7FnCXo.asa (hash: 1Yy/1TmKAfo7LlpBier34giZqhsePwZG9T2lPH9vV2E=)
2: 8Xpu1O4i8G8YveSzPyz09_fdc98.roa (hash: Bt1xJ3q8KPzlgWyoG3A3cctJyDzyf6F3KbGu2rLkM5I=)
3: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: QEtQ48DRFQy1JrgUYUyA4hKFajhXUbKJpjm1HahDyX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:cd:e2:52:de:c7:72:66:61:6d:66:8f:66:e2:55:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Mar 16 04:00:59 2026 GMT
Not After : Mar 17 04:00:59 2026 GMT
Subject: CN=5a4c0114d543af145d322e9f129fe1e67a582adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:3b:2b:ef:43:ab:5c:8b:3a:c6:e2:50:ef:
04:a9:25:cc:ac:ab:4c:6b:b5:48:28:c7:27:09:8c:
bc:ea:b1:45:f8:49:ba:c2:80:84:6a:7b:b7:b6:67:
99:92:3c:8a:ec:66:c1:41:1b:9d:4e:b8:59:f4:b3:
99:0e:ce:b2:c2:46:23:85:a6:8b:58:ac:a1:fe:0a:
fe:38:7f:51:6a:63:6c:d9:2b:07:51:d4:54:be:c4:
4d:22:6c:1b:8c:fd:63:81:aa:ff:5f:e1:14:81:9f:
8e:63:c3:d9:ed:bc:b4:71:d0:ca:15:35:2a:71:a5:
d8:48:70:b3:cb:4c:c3:ac:0c:99:15:2f:5a:fb:c2:
8e:71:6c:00:e8:7e:c1:d6:a7:d1:f7:a1:2a:1f:09:
61:c2:53:06:dd:4f:db:69:0f:f2:7a:c1:0d:bb:bd:
98:fe:e9:f3:f1:aa:29:80:60:fe:21:a0:1c:a7:73:
1b:50:c4:46:37:ca:81:82:fa:48:10:a4:23:11:ca:
4c:95:04:e9:5e:08:74:29:12:8b:8b:4c:cf:c8:c3:
82:97:e4:71:6d:b3:e3:fb:cc:88:44:eb:6d:81:03:
1f:21:18:77:aa:4c:6e:89:a1:ed:b4:16:80:4e:ef:
22:4d:b0:b2:c9:fc:33:7a:17:ac:71:2c:99:d5:fd:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4C:01:14:D5:43:AF:14:5D:32:2E:9F:12:9F:E1:E6:7A:58:2A:DF
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7d:f0:54:ff:ac:e6:a1:22:90:db:f2:b9:4f:cc:57:5c:5f:
42:de:f2:37:76:b6:50:bb:f1:84:e1:dc:60:c3:28:5f:d6:cc:
06:d7:4c:fb:af:f0:71:5a:a6:bc:ba:dc:d3:30:25:b9:44:2f:
de:7d:2b:66:b7:80:e5:01:ce:69:d0:de:75:9c:ca:c1:85:8d:
e6:33:24:b5:04:80:6c:db:7e:00:c8:4c:26:cd:cf:6b:12:4e:
04:ca:79:d6:84:6b:0f:c0:bc:62:66:1c:cf:9e:d3:96:6c:78:
69:78:30:9e:96:56:d2:b6:e9:1c:93:fa:79:ea:aa:9f:db:33:
7a:dd:9d:01:3e:c9:ee:eb:7e:21:13:c8:71:ce:8b:fb:50:82:
a2:f5:ae:6e:a3:6e:f2:18:df:44:fe:cf:f9:82:ff:c2:fb:72:
f6:5b:a6:a2:5a:a1:06:eb:47:fc:3d:cc:fb:9d:12:05:85:c6:
59:66:81:71:4c:cb:46:72:c6:b1:d8:1e:c0:f9:7d:86:00:23:
0e:1f:16:0d:36:6e:79:6d:52:27:5d:01:5a:38:2a:1d:dd:4c:
49:32:e1:ce:ba:1c:eb:ea:4a:39:30:f4:c4:fe:6d:45:09:d1:
c8:57:8b:01:01:d4:66:83:ee:b7:33:27:38:3b:59:cd:47:31:
bd:44:5d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:21:35 2026 by rpki-client