Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: noMIIzSrYDbOVsOIotfa915/qCV5jvTo4cRfopkQyHM=
Subject key identifier: 3E:CD:7E:D6:54:2A:A4:C1:A9:FC:65:7B:F6:69:05:CF:A0:39:28:01
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 01A105B798143671DF70ECC97D501EA0B790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 1A86
Signing time: Sun 04 Oct 2026 07:01:20 +0000
Manifest this update: Sun 04 Oct 2026 07:01:20 +0000
Manifest next update: Mon 05 Oct 2026 07:01:20 +0000
Files and hashes: 1: 6hDAm0v4kLNXMlHTdn5oc7FnCXo.asa (hash: 1Yy/1TmKAfo7LlpBier34giZqhsePwZG9T2lPH9vV2E=)
2: 8Xpu1O4i8G8YveSzPyz09_fdc98.roa (hash: Bt1xJ3q8KPzlgWyoG3A3cctJyDzyf6F3KbGu2rLkM5I=)
3: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: N6Su+3zfbfzFtobCQmcNcW++S2wNJ+9N/mDBTsj32k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b7:98:14:36:71:df:70:ec:c9:7d:50:1e:a0:b7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Oct 4 07:01:20 2026 GMT
Not After : Oct 5 07:01:20 2026 GMT
Subject: CN=3ecd7ed6542aa4c1a9fc657bf66905cfa0392801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:86:b3:02:d0:19:f3:bc:ed:c4:7f:8f:c7:
5a:21:f2:81:9e:d9:74:4a:13:24:59:04:b5:15:23:
c1:83:94:21:7e:7f:26:2f:00:47:83:8a:08:7c:ea:
cf:a1:b3:40:86:64:ab:57:d8:c3:14:ed:e3:ba:8a:
a9:cf:29:4a:9d:96:22:66:ea:09:1b:4b:ea:07:4c:
70:b8:6d:90:40:c2:3a:02:c8:64:56:a8:a1:d5:ee:
f8:86:1e:a9:37:bf:33:53:d9:7f:9e:44:5e:52:fa:
04:2c:d5:2e:b9:fd:9a:fb:29:4a:76:48:a5:4e:3d:
46:0a:d5:6f:03:2f:d4:ed:60:8f:95:4c:b0:3c:a0:
88:d9:af:88:ba:67:91:24:ec:39:72:0b:bf:82:30:
44:2f:e9:35:44:ca:30:8a:62:4d:74:9f:de:dc:8a:
f0:ad:0d:38:bf:b6:c2:34:0c:4a:70:ac:72:eb:b5:
0d:99:64:9c:d3:5f:35:10:ea:01:94:ad:53:b6:ca:
be:bc:7e:ea:d4:1f:70:cd:11:de:cc:84:93:e7:40:
33:0e:8e:cc:f2:b4:e6:29:1e:0c:85:76:88:88:ab:
33:36:67:06:81:a2:14:89:08:6f:ec:8c:4a:91:48:
75:62:9a:09:29:33:8c:12:ff:b4:5f:13:e4:ad:c4:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:7E:D6:54:2A:A4:C1:A9:FC:65:7B:F6:69:05:CF:A0:39:28:01
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:19:9b:a0:a5:d8:dd:89:e7:c3:8f:d0:2e:e1:c9:3a:50:26:
8c:74:a4:04:d5:89:84:7e:f5:58:d5:c3:74:6e:f8:e5:15:b5:
d1:43:20:d6:5d:50:c4:20:cf:5b:e7:a4:c2:f7:b3:c0:1a:9e:
59:42:64:c4:f0:da:41:8a:e2:1f:6a:87:31:91:05:b5:b8:41:
8e:5a:fb:2e:f9:a1:14:a7:8c:d6:91:f0:63:c3:49:cd:7a:cc:
6f:36:bc:bc:aa:dc:65:a0:a8:ab:a4:a8:30:2b:47:83:6b:b3:
c1:81:ae:31:6e:bc:d0:b3:03:99:d1:fc:70:23:b2:ea:7c:8b:
ea:03:49:8d:44:8f:59:f3:8b:08:42:78:bd:85:b4:b0:8d:47:
de:fb:45:eb:22:c0:8b:60:b5:6d:86:20:f5:52:8d:b3:42:9c:
65:34:17:2f:e7:ef:4c:bd:7c:df:0a:53:ac:c7:06:99:21:54:
3f:02:a4:3a:b2:88:46:c6:a7:7e:33:06:80:88:45:19:b4:73:
f3:74:d8:3e:1c:98:0a:bb:6a:ec:e2:97:52:0b:a6:39:d9:16:
d9:86:7d:ea:88:b1:4a:ac:28:e1:0c:d6:96:15:93:92:83:24:
48:f6:52:9b:8e:12:8f:07:fb:bf:c8:b7:f4:72:a3:0c:a3:0f:
89:66:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:36:43 2026 by rpki-client