Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: eWnTQrYlIIfH7YnDrFpqK83Ckj3oiyJoKl5b+SJQAEs=
Subject key identifier: FC:AE:C7:DD:56:53:E6:85:B6:3A:DF:9D:57:73:3E:48:47:0C:DB:08
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 019E1C46E0A8E65B7DEA11B4D5B2AD01F4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 13:01:07 +0000
Manifest this update: Tue 12 May 2026 13:01:07 +0000
Manifest next update: Wed 13 May 2026 13:01:07 +0000
Files and hashes: 1: 6hDAm0v4kLNXMlHTdn5oc7FnCXo.asa (hash: 1Yy/1TmKAfo7LlpBier34giZqhsePwZG9T2lPH9vV2E=)
2: 8Xpu1O4i8G8YveSzPyz09_fdc98.roa (hash: Bt1xJ3q8KPzlgWyoG3A3cctJyDzyf6F3KbGu2rLkM5I=)
3: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: 4uY4ThB7+hpG1KT6xqnJryW6QRbjoqY+2gBnZgKb5IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:e0:a8:e6:5b:7d:ea:11:b4:d5:b2:ad:01:f4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: May 12 13:01:07 2026 GMT
Not After : May 13 13:01:07 2026 GMT
Subject: CN=fcaec7dd5653e685b63adf9d57733e48470cdb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:70:b7:a8:dd:67:6a:8c:34:95:be:1b:d1:f6:
cd:b5:a4:1f:7e:40:a1:4d:ed:bc:ef:42:34:67:a3:
37:13:d5:47:78:41:2b:f4:94:1d:8f:70:31:03:9b:
02:1b:4a:d1:9a:d2:72:d6:52:ef:3e:82:a6:e7:51:
5f:00:53:9c:fe:a9:99:21:a4:27:13:22:8d:02:c6:
cb:a4:2d:21:6b:64:a1:b0:a3:d2:b0:10:3f:7f:25:
a2:40:7a:8e:08:e5:f1:81:33:84:93:fa:31:d9:5e:
45:4b:49:78:1b:ac:2b:2e:aa:7c:72:80:dd:ff:4e:
74:2d:20:37:32:83:56:8d:8f:f3:be:3b:ef:a1:45:
e0:e4:3a:0b:81:20:97:c7:52:b1:47:ee:19:c1:54:
e0:77:36:cd:eb:2e:1e:e9:97:27:57:cd:48:d0:d2:
75:47:93:b0:ab:9c:59:54:65:fd:ca:85:d4:5a:2d:
60:c2:d4:9e:ee:f2:6b:14:f5:ea:48:6c:a4:9a:63:
bf:3c:66:bc:31:11:de:d7:56:0d:3d:93:36:38:28:
36:fb:98:f0:4f:37:f5:95:5a:24:2b:f9:57:3d:a3:
f0:7c:91:bc:0a:22:2c:30:cf:7a:3e:b7:78:f9:cb:
80:38:07:b3:ec:aa:14:26:69:40:dc:46:8b:6b:1d:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AE:C7:DD:56:53:E6:85:B6:3A:DF:9D:57:73:3E:48:47:0C:DB:08
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:86:65:46:72:cf:6a:cb:a2:65:42:69:2f:d3:e6:56:65:cb:
fc:d0:10:64:32:e3:62:3d:8c:ce:d7:dc:99:01:02:56:cc:0b:
0b:d5:61:ec:7e:43:02:f6:f8:e1:77:ce:f9:5d:ef:97:bc:e3:
6c:04:e0:89:c1:fd:0c:8c:b5:e1:76:ee:37:6a:5e:f9:34:17:
c3:87:c3:e8:6d:09:84:2f:7e:a1:cf:65:85:6c:1e:a8:3d:15:
24:bb:5a:c0:ab:f7:e2:c4:68:09:d5:14:4e:fa:a4:78:60:be:
e0:92:c3:19:6c:28:5e:d2:5f:1e:62:e8:ca:03:17:70:9f:7f:
7e:d2:57:fc:57:67:32:e8:55:54:6c:13:c5:51:1c:f4:79:57:
87:f9:01:39:c5:4f:06:5c:5f:8d:9c:e0:1a:58:ec:61:ab:58:
ca:ab:91:c7:f2:3a:d7:1f:73:2c:44:67:a7:d2:29:bf:56:46:
25:7e:98:38:7c:14:ac:7d:5b:ab:74:b3:b0:e9:a8:ec:d5:cc:
54:7c:47:fa:ff:07:00:34:0d:6e:fd:7e:84:8e:0f:b9:08:24:
cc:29:c0:d3:51:ae:39:07:fc:b7:34:9a:84:f0:9f:1e:78:e8:
6f:e7:71:4a:bc:17:3c:87:7a:85:3f:9a:fb:cb:8a:21:14:57:
f8:6d:c8:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRuCo5lt96hG01bKtAfTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjdkZmI4ODJhZTdkOGU1NWQyNTg2NTE3NDJmNGU2Y2U0
MzcwMTkwHhcNMjYwNTEyMTMwMTA3WhcNMjYwNTEzMTMwMTA3WjAzMTEwLwYDVQQD
EyhmY2FlYzdkZDU2NTNlNjg1YjYzYWRmOWQ1NzczM2U0ODQ3MGNkYjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HC3qN1naow0lb4b0fbNtaQffkCh
Te2870I0Z6M3E9VHeEEr9JQdj3AxA5sCG0rRmtJy1lLvPoKm51FfAFOc/qmZIaQn
EyKNAsbLpC0ha2ShsKPSsBA/fyWiQHqOCOXxgTOEk/ox2V5FS0l4G6wrLqp8coDd
/050LSA3MoNWjY/zvjvvoUXg5DoLgSCXx1KxR+4ZwVTgdzbN6y4e6ZcnV81I0NJ1
R5Owq5xZVGX9yoXUWi1gwtSe7vJrFPXqSGykmmO/PGa8MRHe11YNPZM2OCg2+5jw
Tzf1lVokK/lXPaPwfJG8CiIsMM96Prd4+cuAOAez7KoUJmlA3EaLax2qkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyux91WU+aFtjrfnVdzPkhHDNsIMB8GA1UdIwQY
MBaAFKpn37iCrn2OVdJYZRdC9ObOQ3AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgt
ZTFmZjg2Mzg2MzRiLzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgtZTFmZjg2Mzg2MzRi
LzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIZlRnLP
asuiZUJpL9PmVmXL/NAQZDLjYj2MztfcmQECVswLC9Vh7H5DAvb44XfO+V3vl7zj
bATgicH9DIy14XbuN2pe+TQXw4fD6G0JhC9+oc9lhWweqD0VJLtawKv34sRoCdUU
TvqkeGC+4JLDGWwoXtJfHmLoygMXcJ9/ftJX/FdnMuhVVGwTxVEc9HlXh/kBOcVP
BlxfjZzgGljsYatYyquRx/I61x9zLERnp9Ipv1ZGJX6YOHwUrH1bq3SzsOmo7NXM
VHxH+v8HADQNbv1+hI4PuQgkzCnA01GuOQf8tzSahPCfHnjob+dxSrwXPId6hT+a
+8uKIRRX+G3Iog==
-----END CERTIFICATE-----
Generated at Tue May 12 21:34:01 2026 by rpki-client