Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: csPgUl6sQuxBUFaIy7oGhrck7aM7X6GpPJEFQzevD80=
Subject key identifier: AC:F8:D1:D2:FF:3F:9D:AB:B2:6A:20:10:92:F5:48:E4:E4:3E:C3:71
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 019D25159A1123A1FE67CA1AF6257395CB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 13:01:05 +0000
Manifest this update: Wed 25 Mar 2026 13:01:05 +0000
Manifest next update: Thu 26 Mar 2026 13:01:05 +0000
Files and hashes: 1: 6hDAm0v4kLNXMlHTdn5oc7FnCXo.asa (hash: 1Yy/1TmKAfo7LlpBier34giZqhsePwZG9T2lPH9vV2E=)
2: 8Xpu1O4i8G8YveSzPyz09_fdc98.roa (hash: Bt1xJ3q8KPzlgWyoG3A3cctJyDzyf6F3KbGu2rLkM5I=)
3: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: 4b3dG7O9ExuItPOlCGLmsDjOMwwmEZHK/eVaP6abqj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:9a:11:23:a1:fe:67:ca:1a:f6:25:73:95:cb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Mar 25 13:01:05 2026 GMT
Not After : Mar 26 13:01:05 2026 GMT
Subject: CN=acf8d1d2ff3f9dabb26a201092f548e4e43ec371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:17:2e:e2:6d:a9:2a:1f:81:b5:9f:5b:76:
9c:fa:bb:44:df:94:11:27:06:08:61:53:dd:2b:50:
07:9a:0a:b2:80:00:6e:ba:d2:f5:bf:c1:07:e6:97:
8d:d9:45:14:bb:83:fe:a3:0a:61:ef:31:c0:ca:9f:
12:c6:33:7e:0c:24:a6:8b:a8:49:36:8c:2c:68:7b:
d6:f7:7b:de:7b:84:99:02:b5:4c:ed:19:76:2a:7a:
36:08:27:c3:3e:73:ff:75:e7:e1:c2:24:73:8b:84:
73:db:70:61:85:e9:c3:d6:c3:33:cb:2a:4c:ec:80:
41:70:64:4f:03:74:95:8b:af:f2:f6:f3:65:b8:f5:
ec:cd:2c:c6:c7:18:07:55:91:47:6d:35:2e:d3:4d:
1e:a7:55:c3:ed:a9:da:57:84:59:8a:8e:3c:4b:ac:
8e:4f:8f:d3:c4:f4:23:58:0f:9c:c1:92:fb:2c:76:
7c:2a:a4:ba:98:b9:b5:19:20:8e:0f:50:46:85:a7:
be:53:5d:13:a1:5a:fc:98:d6:fa:e4:5b:6d:f0:73:
83:51:76:ab:e8:cc:32:e3:b1:7a:59:5f:bf:dd:cc:
aa:78:5a:f5:64:68:da:a9:53:9e:bb:7d:64:62:6a:
fc:f3:b8:7e:d6:8e:53:83:4f:1b:78:10:89:bb:25:
5f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F8:D1:D2:FF:3F:9D:AB:B2:6A:20:10:92:F5:48:E4:E4:3E:C3:71
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:82:f9:b7:c0:88:9e:2e:80:53:0d:91:6a:73:9b:52:e6:83:
69:a1:3d:6c:f0:84:bf:42:d7:2c:27:ef:c5:7d:d6:ed:30:33:
63:23:02:cc:dd:25:98:b9:2f:91:ad:2b:dc:77:4a:53:4e:00:
3e:28:97:e8:4f:b9:b5:a7:36:01:01:f2:31:96:1b:9e:97:a6:
a9:de:1c:64:a9:6e:aa:8d:15:44:9b:b3:a9:1d:07:12:b3:be:
7f:66:9f:5d:e3:da:5d:8b:90:da:7f:fa:96:77:81:f6:fb:9c:
96:07:d4:d8:e6:3c:ff:03:2d:8b:97:dc:c9:3d:41:06:50:ce:
85:12:56:a0:61:9b:6b:a0:ca:1f:05:70:bf:4f:0f:6b:35:58:
66:5f:b7:e5:a3:8d:43:51:94:f4:4d:9a:51:36:ce:ce:48:01:
57:14:4b:94:38:d1:dc:24:dd:be:38:c4:43:bf:d6:5a:b0:b3:
64:62:d6:b2:1b:0e:2f:32:ca:5d:cf:d9:64:86:1c:ce:a8:a3:
d1:25:cb:fc:9d:80:76:b4:2d:33:d5:2d:45:65:e8:d6:92:84:
b6:3f:1e:de:6d:21:91:3c:05:70:ef:72:93:93:40:44:b4:dd:
57:7e:ee:f4:b3:e2:a6:c9:f4:1f:d6:0f:94:be:4c:d1:09:2c:
a8:05:20:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:04 2026 by rpki-client