Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: TTMaTKJZZeVNJD7HsflnrUQtRSfN04uPzr7Vqy1EwnA=
Subject key identifier: 6F:35:77:79:46:0D:C0:FA:B1:EA:05:7A:0B:07:11:52:F8:C2:96:AC
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 019CA97CD741F0A7B8AEF29A09EB891C02AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 13:00:56 +0000
Manifest this update: Sun 01 Mar 2026 13:00:56 +0000
Manifest next update: Mon 02 Mar 2026 13:00:56 +0000
Files and hashes: 1: 6hDAm0v4kLNXMlHTdn5oc7FnCXo.asa (hash: 1Yy/1TmKAfo7LlpBier34giZqhsePwZG9T2lPH9vV2E=)
2: 8Xpu1O4i8G8YveSzPyz09_fdc98.roa (hash: Bt1xJ3q8KPzlgWyoG3A3cctJyDzyf6F3KbGu2rLkM5I=)
3: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: yuLw8RwF7zWR59HQETbRBXWhXpe+X7QP++o+4roPniI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:d7:41:f0:a7:b8:ae:f2:9a:09:eb:89:1c:02:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Mar 1 13:00:56 2026 GMT
Not After : Mar 2 13:00:56 2026 GMT
Subject: CN=6f357779460dc0fab1ea057a0b071152f8c296ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9f:eb:d5:72:0a:09:db:4a:af:58:0f:a0:76:
b8:40:80:ce:0c:46:24:e2:88:e1:8f:8d:f7:59:af:
d9:1f:62:49:62:4e:87:0d:5f:0d:10:3e:32:00:fb:
b6:b8:c7:43:c4:72:e2:66:f3:0f:c7:0e:95:e9:ab:
68:94:8a:78:45:37:2a:ec:99:cc:89:56:c2:db:d0:
a7:56:8e:a2:84:18:8e:e4:fc:a6:06:72:0c:95:5f:
40:1a:df:09:79:88:0f:5c:85:57:50:dc:58:25:27:
81:3f:4b:58:94:71:39:3c:c3:c1:d5:17:12:48:ba:
d5:06:44:e0:f8:f4:f1:14:aa:5e:7f:7d:1d:ec:25:
60:08:bf:cc:31:48:28:01:31:dc:d2:ef:f1:2a:0c:
1f:44:13:ad:8b:d8:8d:69:25:9f:7c:2a:ac:2c:ea:
ee:1b:e5:08:4b:2c:7c:8b:f2:21:b1:9b:5e:47:94:
08:01:28:ee:51:b3:4b:56:a5:42:a6:73:8a:db:0f:
68:b7:84:d6:da:e9:ef:1a:17:23:0b:aa:60:4f:80:
29:6c:fc:7b:4b:9e:01:3c:67:c3:34:63:ea:bb:0c:
eb:ab:1c:d8:d9:83:fe:63:a0:8a:5c:53:08:c7:37:
e4:8b:99:2b:12:99:39:fa:b4:b9:02:92:56:b9:d6:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:35:77:79:46:0D:C0:FA:B1:EA:05:7A:0B:07:11:52:F8:C2:96:AC
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e1:c8:fd:4c:7d:c1:dc:13:57:87:ab:dd:1a:f7:e6:96:03:
6d:15:5f:3a:8e:e2:c2:ec:78:74:f6:f4:ad:76:5c:76:2d:07:
b3:9e:17:c4:ea:bb:24:ea:5c:72:43:bf:70:2f:c1:fd:ad:28:
37:0d:a8:41:41:34:55:bd:3e:fc:57:7a:1d:a4:55:5a:d2:b8:
fa:47:1a:b6:ce:d3:2d:a8:55:2e:2d:62:7d:d6:58:82:09:83:
80:5b:7b:68:bc:f1:ce:80:ef:7a:49:d5:f2:2d:60:a4:e5:3d:
8d:01:ee:99:02:19:92:aa:7d:a5:29:1a:51:68:cf:35:5a:ed:
bf:90:36:99:c9:a2:74:c7:d4:09:56:93:65:21:95:74:d9:55:
a4:01:ba:10:5f:9d:24:57:1c:14:00:7a:5e:ae:8e:66:eb:e2:
73:2b:94:b0:0a:e7:38:7f:d8:7b:f5:69:d8:c1:e4:50:f9:7e:
d6:62:13:46:4e:d9:1e:cc:14:0c:d0:2d:86:1a:97:83:91:2d:
aa:a5:d7:90:bf:58:24:12:26:3f:92:5c:e9:b1:34:7a:7d:75:
ae:5d:06:ed:ed:d6:ed:f5:55:23:47:c7:cf:69:d1:5f:5b:0b:
10:ca:bd:b4:d5:da:51:b6:7c:04:4c:e2:1f:51:a1:b3:ab:8c:
c4:d3:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:49:03 2026 by rpki-client