Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: DtRZJLqfLvP3ZgVYYUp8FfLHgQ9zzHYM2HoEXM4R1gg=
Subject key identifier: 35:3B:DC:7D:92:CA:F2:37:3E:CD:A3:89:6D:73:BD:89:78:E8:88:A4
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 019FF947DED688CA382932966293A1335990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 19FB
Signing time: Thu 13 Aug 2026 04:01:04 +0000
Manifest this update: Thu 13 Aug 2026 04:01:04 +0000
Manifest next update: Fri 14 Aug 2026 04:01:04 +0000
Files and hashes: 1: 6hDAm0v4kLNXMlHTdn5oc7FnCXo.asa (hash: 1Yy/1TmKAfo7LlpBier34giZqhsePwZG9T2lPH9vV2E=)
2: 8Xpu1O4i8G8YveSzPyz09_fdc98.roa (hash: Bt1xJ3q8KPzlgWyoG3A3cctJyDzyf6F3KbGu2rLkM5I=)
3: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: xpwge8+YPJGQzjEIQ1D7u0WWfszZ+o/L7QWcQf9f/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:47:de:d6:88:ca:38:29:32:96:62:93:a1:33:59:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Aug 13 04:01:04 2026 GMT
Not After : Aug 14 04:01:04 2026 GMT
Subject: CN=353bdc7d92caf2373ecda3896d73bd8978e888a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:f8:a8:05:b1:79:f0:c2:b4:82:73:22:c0:
29:13:cb:34:96:88:e5:5a:b8:58:3f:95:04:c7:35:
0a:60:73:e7:e3:aa:d6:7e:5d:c1:20:4a:61:64:30:
8c:e6:23:59:61:78:f3:0b:34:16:9b:cd:ed:3a:ab:
ab:8f:25:44:ca:62:4f:1b:65:06:32:e2:15:c9:82:
27:3a:db:53:5d:81:a5:37:ac:91:2f:88:eb:d5:58:
be:2e:e6:02:74:83:fa:f7:4b:8f:99:17:19:b6:1d:
78:78:b5:b5:df:a8:8b:ba:84:21:18:7e:4f:b9:c5:
48:7c:e1:07:e4:02:f9:ee:7e:d7:01:50:b4:6e:86:
ab:90:ff:b4:36:d4:e8:06:66:d8:9e:98:46:22:12:
4c:8e:0d:0f:51:90:d2:4b:af:c0:d5:28:21:d9:ed:
41:f8:4a:f6:6f:59:65:0d:73:5d:27:93:8f:33:a3:
26:3d:20:87:27:b8:da:b8:71:0d:0f:78:68:d9:1f:
45:93:17:a7:27:93:dd:39:35:67:66:75:5f:15:ce:
97:6b:4c:37:a8:ad:79:3f:16:ba:c5:8c:46:22:35:
11:ef:8a:35:be:e1:f1:7f:0d:e9:1d:80:f7:9d:0d:
67:e0:26:4b:c7:1e:e5:9a:b0:a1:c6:50:b1:cc:22:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3B:DC:7D:92:CA:F2:37:3E:CD:A3:89:6D:73:BD:89:78:E8:88:A4
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e8:89:72:37:f0:f8:e7:7a:31:db:14:41:85:00:9a:ca:8c:
7c:a7:13:7a:09:f2:11:c5:2b:d2:15:36:c8:2e:e9:18:82:08:
2c:16:47:86:84:12:53:94:3d:76:49:e6:21:5a:2b:1b:c3:ce:
af:fe:a5:2f:9d:1a:84:76:ca:de:28:92:02:54:9e:25:cb:b2:
09:2e:c4:06:6a:3e:4e:4c:ff:ef:b3:16:bd:29:5b:35:41:6c:
e2:a7:23:11:e0:70:db:fe:8a:a8:86:9e:01:eb:19:7e:ec:55:
38:5f:47:da:a8:2d:11:5d:cb:42:f9:83:54:25:61:77:d3:32:
a4:37:70:f7:22:c0:25:91:be:4a:2d:31:6d:eb:43:b3:d2:54:
25:77:f1:c1:40:42:8a:e0:03:76:76:94:e6:94:71:64:be:3a:
00:fc:fa:1c:02:da:dd:6c:8d:53:d9:4b:3c:15:ff:4a:fe:9c:
84:10:9e:91:15:90:6e:8b:b9:81:64:69:27:79:9c:d6:08:96:
87:47:7a:94:88:fe:dc:39:00:91:0f:e4:81:8c:9e:1f:74:dd:
d9:9d:54:93:70:09:5c:bb:6f:9f:13:36:6a:a0:cd:87:8f:27:
ff:55:c5:f5:ea:84:cc:8d:1f:56:c0:ed:95:1c:ba:c3:3a:8a:
a5:d7:b5:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/5R97WiMo4KTKWYpOhM1mQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjdkZmI4ODJhZTdkOGU1NWQyNTg2NTE3NDJmNGU2Y2U0
MzcwMTkwHhcNMjYwODEzMDQwMTA0WhcNMjYwODE0MDQwMTA0WjAzMTEwLwYDVQQD
EygzNTNiZGM3ZDkyY2FmMjM3M2VjZGEzODk2ZDczYmQ4OTc4ZTg4OGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sn4qAWxefDCtIJzIsApE8s0lojl
WrhYP5UExzUKYHPn46rWfl3BIEphZDCM5iNZYXjzCzQWm83tOqurjyVEymJPG2UG
MuIVyYInOttTXYGlN6yRL4jr1Vi+LuYCdIP690uPmRcZth14eLW136iLuoQhGH5P
ucVIfOEH5AL57n7XAVC0boarkP+0NtToBmbYnphGIhJMjg0PUZDSS6/A1Sgh2e1B
+Er2b1llDXNdJ5OPM6MmPSCHJ7jauHEND3ho2R9FkxenJ5PdOTVnZnVfFc6Xa0w3
qK15Pxa6xYxGIjUR74o1vuHxfw3pHYD3nQ1n4CZLxx7lmrChxlCxzCK9tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDU73H2SyvI3Ps2jiW1zvYl46IikMB8GA1UdIwQY
MBaAFKpn37iCrn2OVdJYZRdC9ObOQ3AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgt
ZTFmZjg2Mzg2MzRiLzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgtZTFmZjg2Mzg2MzRi
LzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOiJcjfw
+Od6MdsUQYUAmsqMfKcTegnyEcUr0hU2yC7pGIIILBZHhoQSU5Q9dknmIVorG8PO
r/6lL50ahHbK3iiSAlSeJcuyCS7EBmo+Tkz/77MWvSlbNUFs4qcjEeBw2/6KqIae
AesZfuxVOF9H2qgtEV3LQvmDVCVhd9MypDdw9yLAJZG+Si0xbetDs9JUJXfxwUBC
iuADdnaU5pRxZL46APz6HALa3WyNU9lLPBX/Sv6chBCekRWQbou5gWRpJ3mc1giW
h0d6lIj+3DkAkQ/kgYyeH3Td2Z1Uk3AJXLtvnxM2aqDNh48n/1XF9eqEzI0fVsDt
lRy6wzqKpde1PA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 09:03:23 2026 by rpki-client