Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: os2Y1lK4ToI5glH96fsRGpK50pAV8KwpfTgXfG/QlRM=
Subject key identifier: 06:5D:22:8B:7C:DD:FA:96:DD:A2:F1:09:2C:C2:EF:CA:FB:92:23:7C
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 019EC25C8F6BB10CF6E7947FA5BDB742B166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 19:01:46 +0000
Manifest this update: Sat 13 Jun 2026 19:01:46 +0000
Manifest next update: Sun 14 Jun 2026 19:01:46 +0000
Files and hashes: 1: 6hDAm0v4kLNXMlHTdn5oc7FnCXo.asa (hash: 1Yy/1TmKAfo7LlpBier34giZqhsePwZG9T2lPH9vV2E=)
2: 8Xpu1O4i8G8YveSzPyz09_fdc98.roa (hash: Bt1xJ3q8KPzlgWyoG3A3cctJyDzyf6F3KbGu2rLkM5I=)
3: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: 3/qA+i6xLr9VoDpyJspfojH5H4xxXSNHYO3uRTiMsfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:8f:6b:b1:0c:f6:e7:94:7f:a5:bd:b7:42:b1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Jun 13 19:01:46 2026 GMT
Not After : Jun 14 19:01:46 2026 GMT
Subject: CN=065d228b7cddfa96dda2f1092cc2efcafb92237c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:b2:cf:cb:ba:1c:b1:61:f7:91:52:5e:bd:
4c:fd:d5:8f:ba:41:02:d6:74:20:ec:6d:11:fd:a7:
be:1d:24:50:9c:b8:36:2a:16:6a:f5:0c:b4:21:84:
c3:69:bb:56:cb:1f:63:64:eb:63:f5:5b:a5:bf:2d:
86:7b:14:16:2e:66:b9:94:21:56:f6:90:3b:71:32:
fe:0b:3c:d8:e5:e0:2c:e1:dd:45:ce:66:8a:f8:ea:
1e:b5:f9:01:71:38:04:05:1a:9d:06:c2:b6:ac:f9:
49:e9:9f:63:76:83:51:1e:34:b6:30:a3:00:6d:55:
dd:1a:c4:9d:20:69:ff:0f:40:c5:f3:93:f5:10:32:
75:86:a8:6c:80:79:3a:5d:6e:86:27:a5:de:de:14:
fa:a2:27:4f:01:61:f9:38:2d:64:f5:d3:4b:77:d3:
f5:1f:5d:3d:58:aa:dd:53:9e:8a:a6:e5:c8:b4:6a:
d8:23:ac:36:aa:a0:d8:bf:65:03:20:3f:18:6d:c5:
a5:ea:6f:69:d0:28:c6:34:ad:58:aa:91:69:69:ce:
5a:10:2f:52:b8:ab:16:97:25:ba:3a:01:80:5c:95:
ce:b6:84:87:4e:07:ab:53:31:82:d6:bd:41:cb:9e:
a0:c5:5e:53:cc:77:6a:d8:9e:bb:95:94:91:43:41:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5D:22:8B:7C:DD:FA:96:DD:A2:F1:09:2C:C2:EF:CA:FB:92:23:7C
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:4a:78:f3:4e:0a:1c:39:3b:63:d5:a4:65:20:01:8f:e9:1d:
4e:f6:70:a4:23:a0:77:0e:5c:9f:f4:85:bc:0f:4d:6f:69:12:
c9:a6:28:27:99:bd:c8:c2:bf:ef:bf:ab:e9:3c:db:59:1d:5b:
56:0e:32:61:6f:90:38:28:d5:3b:10:90:26:2d:ba:1d:af:a6:
99:ff:bb:11:9f:60:50:c0:fb:18:98:23:a5:b2:81:29:e7:91:
3b:69:cb:b4:55:3d:55:f2:9f:83:5f:b6:2f:74:d7:49:59:b1:
7e:b8:1b:d6:7c:4b:be:eb:1c:95:7a:40:56:64:f1:1a:e1:5e:
5e:69:28:a3:01:7f:3a:fd:b2:47:d8:8c:29:1c:95:60:f6:37:
c1:47:6c:3a:3d:18:ba:1b:ab:fd:c5:e7:61:7c:83:f8:b6:6f:
69:33:67:e5:04:37:50:e2:81:b8:af:3c:26:58:bb:c6:ef:51:
0d:79:43:3d:f7:2f:23:a1:9d:c5:3b:5d:b1:3b:39:57:ce:e3:
cc:f2:b1:c7:9a:fa:96:9c:72:85:01:4d:a6:15:1d:46:91:18:
79:17:8f:39:7e:5a:40:35:57:ae:db:64:33:76:27:4a:64:cf:
62:71:cc:b8:50:85:fd:c8:cd:ce:0c:ee:93:a1:7d:8f:09:0b:
d8:fd:5c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:16:42 2026 by rpki-client