Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: DTH9IFKfm1lISNtGC6MafKv0kyv8Yw4lXfbflzJ+P7g=
Subject key identifier: 04:0B:7D:6E:3A:4E:66:CF:B4:B3:D3:0F:46:CA:AB:81:51:19:D0:F7
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 019D9AE2BC3D4A5FA3CA70C82340766BB108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 10:00:43 +0000
Manifest this update: Fri 17 Apr 2026 10:00:43 +0000
Manifest next update: Sat 18 Apr 2026 10:00:43 +0000
Files and hashes: 1: 6hDAm0v4kLNXMlHTdn5oc7FnCXo.asa (hash: 1Yy/1TmKAfo7LlpBier34giZqhsePwZG9T2lPH9vV2E=)
2: 8Xpu1O4i8G8YveSzPyz09_fdc98.roa (hash: Bt1xJ3q8KPzlgWyoG3A3cctJyDzyf6F3KbGu2rLkM5I=)
3: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: acGE0a2MWvJM27rry/H30rU7f9uyRrDBsLWkeUstEF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:bc:3d:4a:5f:a3:ca:70:c8:23:40:76:6b:b1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Apr 17 10:00:43 2026 GMT
Not After : Apr 18 10:00:43 2026 GMT
Subject: CN=040b7d6e3a4e66cfb4b3d30f46caab815119d0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:31:68:3a:be:ac:5e:81:a0:47:ce:2c:05:
91:b7:4b:5e:99:6e:8e:44:2d:a6:a8:23:8a:be:a6:
9a:5a:53:65:d3:73:65:7a:f3:14:d7:f2:92:13:f4:
26:fa:4e:0e:e4:2b:80:1d:f5:94:7f:06:a8:45:52:
ee:8d:4c:fd:6e:87:eb:c2:28:fe:e0:4b:bc:3a:83:
6f:84:f7:38:b6:54:3b:e0:ec:2d:0d:23:ae:1e:a2:
03:08:bd:61:3c:cf:6d:01:6e:e5:19:f2:04:ec:57:
e6:3c:8a:63:39:d8:d2:7c:67:4e:b7:ea:ce:1a:60:
fe:53:35:42:74:d8:69:29:e1:ba:45:fe:03:f5:29:
95:aa:8f:77:d2:ea:ad:30:4f:25:90:a6:51:b6:b1:
fb:9a:07:f9:51:ae:19:d1:77:34:2c:59:58:2a:e0:
ed:68:d2:35:84:c0:b6:88:65:81:e4:5e:94:fa:d2:
2a:48:b3:b9:21:58:b6:6a:b3:a3:4d:14:b9:a5:66:
19:c9:f9:50:48:5c:0f:57:e7:01:2d:94:1c:93:9b:
55:0d:20:a9:a9:d1:bb:a8:6c:1d:a3:91:25:e5:ce:
a7:43:0e:d9:4e:9a:b8:ed:5a:e0:00:28:5f:cc:09:
e4:6a:52:0e:38:76:bc:55:16:4c:be:13:01:a9:e4:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0B:7D:6E:3A:4E:66:CF:B4:B3:D3:0F:46:CA:AB:81:51:19:D0:F7
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c0:c5:25:68:25:44:67:48:6b:b2:61:33:61:80:b7:6c:4f:
85:99:d6:fc:61:04:58:a1:ae:03:84:22:f3:93:67:a6:6c:9e:
48:64:a0:28:61:2b:3d:74:5e:df:51:38:94:ce:93:cf:f1:6b:
2f:50:62:f2:95:9f:db:5f:6c:a8:b5:22:03:52:21:75:07:32:
6a:e0:47:da:72:5a:89:a2:d0:dc:72:b4:49:9f:a6:d0:04:88:
28:4b:18:34:11:5a:d2:4c:3d:18:26:30:2a:f7:3d:6f:6b:d4:
8e:59:24:2f:17:05:38:98:67:64:4a:ad:d6:ff:24:88:e2:43:
a7:b6:b1:72:ea:23:a5:a0:d9:88:60:f9:98:03:6b:46:11:72:
51:ad:11:27:55:b7:c3:14:76:65:12:4c:55:45:cf:cc:49:19:
ee:0d:95:d2:26:e3:7c:cb:60:2c:0e:cb:f2:6a:43:9c:b7:5b:
1a:59:c3:56:c1:7a:2e:6d:95:e5:fa:5e:e3:ac:db:bf:c5:82:
29:e6:4c:5c:1c:49:53:b5:aa:2f:f2:fc:dc:3c:be:9b:d7:5a:
f7:7d:eb:37:29:b7:df:94:2b:b2:23:3e:1b:dc:6f:1e:b6:33:
e9:35:14:35:61:af:ec:80:86:f1:e7:3f:97:19:b1:03:8f:71:
f1:64:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:14 2026 by rpki-client