Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: 8TAGUsyHCEgMWoPobuPYibwHRx8I+rx9g11vmkRbsXw=
Subject key identifier: ED:7F:45:CE:36:CF:A8:71:A7:1C:97:44:64:88:01:51:68:26:39:7B
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019E909344A1F00601942DABD094F358A981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 1904
Signing time: Thu 04 Jun 2026 03:00:30 +0000
Manifest this update: Thu 04 Jun 2026 03:00:30 +0000
Manifest next update: Fri 05 Jun 2026 03:00:30 +0000
Files and hashes: 1: inGTc8Cd75E599vtC7r1u5PhkKU.roa (hash: pFYpNzRaoUNSfRaOJIRh3gLr+c01f2DyAkci4/rxAww=)
2: o5SCMNYhdkv7jm1bgqmzrSmljcA.roa (hash: ZHMCPsYy82t1LzUAMo46/neqha3S0r9zGdqBqSiF7jM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: lRBL8xM8/J71la4+8Tn4EeCbcKxRxmuyTUcKYgxKmp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:93:44:a1:f0:06:01:94:2d:ab:d0:94:f3:58:a9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Jun 4 03:00:30 2026 GMT
Not After : Jun 5 03:00:30 2026 GMT
Subject: CN=ed7f45ce36cfa871a71c9744648801516826397b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:8c:e6:b1:db:d9:ad:d9:1d:9a:9f:d4:92:
53:a5:b7:97:e2:e0:4b:bc:c2:4b:0f:30:7c:80:38:
14:ba:bc:40:71:2b:77:fd:ac:48:72:10:54:e8:a3:
d8:12:bd:91:83:05:25:8f:0f:54:bd:62:1b:3e:71:
b9:8e:9f:f1:c3:e1:f2:f6:c3:01:f7:99:ed:63:dc:
07:f1:f6:78:d8:9d:59:ac:2b:da:42:ea:98:e3:85:
c0:ad:2a:0c:2d:67:b6:20:df:f0:81:3b:02:4c:fb:
c5:65:78:35:5a:45:e3:70:66:eb:da:60:64:58:b0:
5f:d8:32:56:c6:06:ba:a7:e6:43:af:bd:50:9e:ea:
31:e3:77:d7:5d:bf:4f:0a:8a:56:82:29:22:59:b0:
5b:9a:72:5b:e3:24:e1:25:27:3b:c1:c0:aa:24:44:
7d:e6:c4:9a:6f:d7:41:fb:f9:b0:be:fa:0a:74:2c:
7d:49:57:24:67:1c:65:f4:b1:92:bb:3f:3c:eb:e1:
f5:11:ea:b5:50:1d:e2:19:ed:ae:0e:01:39:aa:21:
ee:87:b6:82:1b:d4:45:5c:50:58:f9:e5:16:4d:2c:
19:ac:6d:e5:e8:c1:34:38:b6:91:8b:42:03:68:f3:
49:61:c3:b7:e5:f7:1b:98:8f:e1:f1:22:c0:fa:4a:
fd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:45:CE:36:CF:A8:71:A7:1C:97:44:64:88:01:51:68:26:39:7B
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:39:a8:9b:9f:3b:4a:98:ea:e4:96:95:be:da:b9:26:24:9f:
e8:83:e8:96:40:2b:6c:48:fb:f1:db:1c:5d:7b:28:36:38:ca:
80:17:71:f8:6c:5e:b3:21:9d:ad:4d:7d:56:ab:2f:0e:c3:c0:
a0:9c:8d:89:24:ac:a1:1b:5d:1e:cb:4b:dc:b9:78:54:30:66:
ee:33:41:9c:be:7b:7b:de:bd:b1:78:00:da:dc:56:e8:ba:17:
fd:d9:87:45:d4:59:ca:6a:f6:8c:dc:e0:2e:2b:f7:20:01:98:
b9:d6:5f:bb:38:2e:5e:a1:ce:e3:45:1d:cc:c7:f5:0c:47:e6:
e6:6f:bb:11:75:b1:3f:8c:52:3d:9c:13:5c:56:aa:6f:3b:05:
a6:a8:ac:0d:8d:21:6f:29:88:62:ab:50:07:8b:e1:9a:e2:50:
87:a7:e8:2b:49:57:65:d7:d3:e0:d5:37:b6:45:99:ab:3d:7f:
7d:56:ed:cb:58:d6:26:61:4e:98:05:a9:25:ef:ca:6f:dd:ef:
a4:2d:b9:34:a7:63:32:00:03:1b:c3:0b:fa:49:9f:71:2a:4f:
de:83:27:8c:20:24:19:85:3b:ca:b7:48:53:bc:8d:ed:be:70:
81:af:4a:c9:dc:56:a2:3d:21:07:7e:94:d9:bd:76:61:41:17:
d8:b3:9f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:16:04 2026 by rpki-client