Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: Eui+5aItODKlCfEGZGaBTt1BHP8qbiqHLDM+LvD433M=
Subject key identifier: D3:CC:30:8A:38:59:24:7D:FA:13:10:87:92:7F:3E:B7:6D:D7:7A:EF
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 019E2092027F7D04F168D402B2EC63803CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 09:01:40 +0000
Manifest this update: Wed 13 May 2026 09:01:40 +0000
Manifest next update: Thu 14 May 2026 09:01:40 +0000
Files and hashes: 1: UcL950VNXfeGMnUK-Fw9xlceECk.roa (hash: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8=)
2: Voryts3H0G0caI1RibG37Pl0zCw.roa (hash: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: TAAF7VRPi/DBbF/EijlV8RJOcE5UAH6vQxbZ5CJBt6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:02:7f:7d:04:f1:68:d4:02:b2:ec:63:80:3c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: May 13 09:01:40 2026 GMT
Not After : May 14 09:01:40 2026 GMT
Subject: CN=d3cc308a3859247dfa131087927f3eb76dd77aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:3d:b2:c4:0d:c6:2f:38:85:88:6c:f5:c8:
cf:79:c5:55:1f:3c:06:99:ce:b9:1c:5a:51:41:5f:
f7:fc:09:91:8b:a4:59:38:e0:0c:01:4e:14:59:66:
20:4d:11:46:57:27:b7:f8:c2:28:d0:71:9d:b5:3e:
22:3a:99:78:45:ae:cc:02:58:b1:8a:cd:b2:1d:33:
fc:09:d8:23:b6:9e:c3:ff:1b:8b:d9:f4:8b:a5:a3:
cb:d0:97:36:ef:e5:b0:f2:bc:99:52:29:3e:41:ea:
d2:5d:42:fc:65:63:1d:86:94:97:84:ed:39:12:81:
93:8f:56:4d:9a:65:da:92:14:90:ec:5f:bb:72:ec:
7e:2c:0c:32:43:79:04:c8:00:83:74:1c:29:31:65:
dc:25:2f:ae:e8:06:05:b7:be:2e:b4:0a:1a:d1:68:
bf:33:fa:67:61:9f:76:6f:1c:14:af:10:40:ca:ac:
37:e2:7a:a8:81:e0:9a:4c:d8:19:a7:27:26:f1:d6:
67:9f:8b:d9:a0:47:ac:1e:45:ca:e1:e1:a7:2b:f6:
c5:b5:a1:26:bd:09:80:3d:80:35:85:eb:c4:1d:c0:
a8:c7:c6:4d:eb:58:75:5a:5d:bc:23:27:a3:c8:33:
f2:89:09:14:f1:f0:c6:72:8f:7a:35:0e:fb:fa:01:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:30:8A:38:59:24:7D:FA:13:10:87:92:7F:3E:B7:6D:D7:7A:EF
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:89:8a:25:11:df:b1:b4:74:6e:c7:93:8e:b1:8e:c5:15:e5:
8f:22:a0:d2:50:6c:3b:1f:f8:43:48:f3:d3:f3:7b:eb:0f:1d:
e4:2e:03:14:ef:31:4c:57:8b:40:a0:78:75:a0:bf:a7:11:31:
ab:a2:77:d2:04:49:bb:de:a4:97:dc:0b:07:6c:86:d6:94:83:
d2:5c:cf:df:88:ce:1c:ec:ec:4b:75:8f:2b:26:1c:9b:f4:11:
21:f5:80:98:f0:08:f6:08:33:5b:b5:02:2a:a2:2e:2d:c1:00:
81:0e:8a:db:d6:ba:35:ba:a7:c0:f3:6e:49:5e:72:3c:d6:dd:
37:ed:1d:c5:9d:89:0e:5f:7f:16:fa:2d:f9:ee:fb:d9:06:9a:
f0:6a:83:dc:89:3d:51:d6:2b:fc:86:ac:32:3e:0f:3f:22:a4:
00:1d:fe:32:68:f1:cd:62:2a:c1:97:77:6f:0d:36:ce:8e:a2:
2e:ca:56:cb:86:2e:53:49:3c:d8:15:df:1b:a2:50:dc:06:2a:
eb:23:d9:c7:9e:f3:aa:8b:be:95:e5:9b:ff:d6:47:c1:ad:4f:
7c:0c:5e:02:a6:2e:01:28:15:70:6c:5f:b4:8b:f3:5d:01:fc:
c7:83:7a:ea:4c:0b:ea:90:ae:4a:e4:54:64:f2:b1:26:48:1c:
b2:b2:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:13 2026 by rpki-client