Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: aP5rtmc19VQheB95bZy6vpjP3lOOS+jcX0mmSy4xXAw=
Subject key identifier: C6:CB:32:A4:17:04:85:54:A7:A7:C1:B1:A6:22:D6:CA:7A:36:16:22
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 019F92EDEBEA7A9CA62F95BECE5C4C269DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 07:01:33 +0000
Manifest this update: Fri 24 Jul 2026 07:01:33 +0000
Manifest next update: Sat 25 Jul 2026 07:01:33 +0000
Files and hashes: 1: 6hDAm0v4kLNXMlHTdn5oc7FnCXo.asa (hash: 1Yy/1TmKAfo7LlpBier34giZqhsePwZG9T2lPH9vV2E=)
2: 8Xpu1O4i8G8YveSzPyz09_fdc98.roa (hash: Bt1xJ3q8KPzlgWyoG3A3cctJyDzyf6F3KbGu2rLkM5I=)
3: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: vYI/l4W/0f19AsiJXE0wtMbLFD6c9+q6tLqIG7GJx5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:eb:ea:7a:9c:a6:2f:95:be:ce:5c:4c:26:9d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Jul 24 07:01:33 2026 GMT
Not After : Jul 25 07:01:33 2026 GMT
Subject: CN=c6cb32a417048554a7a7c1b1a622d6ca7a361622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:92:77:4d:ef:5b:88:0e:54:bd:f2:07:b3:
52:df:3a:e8:d0:ab:01:56:b1:60:a3:fe:ca:ed:3f:
74:05:c2:2d:f2:44:f7:4d:cc:31:7b:70:a7:ea:98:
38:a0:20:83:bc:1a:4d:f2:f3:96:4f:bb:6c:85:f2:
06:c2:dd:d0:6d:f8:92:ad:ec:ba:8a:78:01:b2:ca:
55:91:9a:72:8b:e1:03:18:65:fd:35:66:d2:62:bd:
1f:f5:b9:01:aa:7a:66:20:cb:1b:92:d9:29:c0:c2:
0c:c1:3a:2e:29:3b:10:b5:31:5d:a4:d0:ff:3a:04:
ee:dd:29:d6:72:e5:10:15:7f:e1:e4:6d:94:3c:a9:
75:fe:39:27:38:39:21:95:7a:41:12:6b:c9:a7:a6:
5e:a7:58:aa:3c:1f:b1:75:55:06:a6:b5:72:50:0c:
c2:e7:44:57:f0:a3:ef:61:eb:df:53:d5:9d:a3:3a:
97:67:1d:3f:83:4b:a5:5f:a9:29:33:c0:ee:cc:91:
83:33:69:c4:ed:bc:4b:4e:e7:ca:36:c1:7f:fd:f6:
12:37:18:de:e9:d2:c0:4b:21:d9:f8:ed:de:3c:43:
26:2a:2f:f5:17:b0:8c:9d:60:9b:2c:74:66:db:71:
62:f4:40:b3:4e:5e:48:8f:c8:8a:b4:05:3c:39:b0:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CB:32:A4:17:04:85:54:A7:A7:C1:B1:A6:22:D6:CA:7A:36:16:22
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4e:8a:30:f4:24:ab:3b:69:5c:c7:22:c0:63:e1:2b:7f:a4:
77:93:52:4e:27:a9:1a:4d:e1:02:eb:9a:79:de:01:81:6d:7b:
ff:9b:de:22:29:2b:4e:f8:ae:59:65:0e:6e:bc:2c:0a:49:e5:
c0:e8:78:03:0c:65:6b:a4:e2:93:b7:11:89:97:76:59:5b:84:
8b:9d:2c:e4:54:e1:c8:c6:54:97:a3:54:32:e5:cc:0d:6c:86:
e0:5b:ae:63:78:73:f0:a3:ca:46:a5:50:9f:42:b6:75:59:b7:
bf:ad:60:84:7e:58:e9:5d:93:3f:fc:69:21:66:5f:f0:9b:e5:
4e:20:89:97:b0:eb:d7:2f:73:14:58:e4:66:32:45:f0:04:d4:
62:08:f3:af:f5:01:f2:df:e7:aa:92:c2:0a:b7:e4:b9:d4:19:
02:3e:24:3d:07:61:a1:23:ce:6d:0d:6e:94:80:41:c0:8f:2e:
ae:e1:b2:3b:04:7e:77:7e:59:ca:07:23:1a:20:e2:09:4c:ee:
a7:45:21:69:80:14:9a:68:b4:1a:ac:de:20:8a:7d:24:be:c4:
d4:3d:79:91:69:c5:f1:6c:24:d4:42:4c:e7:2b:fa:8b:56:d5:
91:58:d0:1f:b4:84:81:4c:e8:60:5d:0d:56:ff:c5:9c:1c:5b:
77:09:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:42:19 2026 by rpki-client