Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: r5yjuNDzXOpvIzV4iFMwibI/Ib24xVWTrVB0rWKYMg4=
Subject key identifier: 92:7C:49:4A:72:9A:5C:60:1C:B2:16:8B:62:7C:4C:CF:03:2B:8A:DA
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 01A0E363627944BC97E14030BD2AC7118908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1A7B
Signing time: Sun 27 Sep 2026 15:02:16 +0000
Manifest this update: Sun 27 Sep 2026 15:02:16 +0000
Manifest next update: Mon 28 Sep 2026 15:02:16 +0000
Files and hashes: 1: UcL950VNXfeGMnUK-Fw9xlceECk.roa (hash: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8=)
2: Voryts3H0G0caI1RibG37Pl0zCw.roa (hash: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: 2UrkGukqhCIidNxT8O7IakuQ/zV4M6gllOouqdOx4jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 15:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:62:79:44:bc:97:e1:40:30:bd:2a:c7:11:89:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Sep 27 15:02:16 2026 GMT
Not After : Sep 28 15:02:16 2026 GMT
Subject: CN=927c494a729a5c601cb2168b627c4ccf032b8ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9b:42:6c:fc:bb:36:c9:1a:11:a3:aa:6a:e0:
f2:d5:29:a2:da:65:47:b0:39:29:85:82:aa:1e:6c:
65:cb:ee:ca:47:bb:6f:3d:69:ad:49:c8:23:8d:91:
b3:98:2e:87:91:64:3d:3e:59:1d:cd:60:33:63:4c:
16:1b:84:5c:7d:5e:4d:29:31:4f:16:02:f8:da:3a:
ac:77:d9:fb:ce:d7:c9:10:24:e6:c8:f0:9d:6e:c2:
b3:fb:89:bb:39:27:18:7e:be:46:cc:7b:61:b4:39:
37:dd:28:5b:3e:6e:ad:53:c1:a3:57:c9:83:28:71:
dc:8a:71:ba:91:4d:c5:05:fd:1a:2e:03:fd:91:95:
25:46:c1:2f:67:bf:86:8e:20:be:41:ba:3e:68:4d:
da:a1:6e:19:48:77:22:5c:f1:e4:36:65:17:aa:92:
85:fb:9b:f9:39:34:60:9f:78:c3:bf:ac:4e:6f:84:
f6:c2:1c:38:af:f9:f7:b7:19:2f:22:71:f8:a9:04:
af:98:d4:52:3b:fe:62:26:0f:7e:36:f3:6c:38:8f:
60:e4:c1:30:af:ac:2d:24:d7:0b:c6:f8:33:30:ad:
c8:b3:59:38:c3:33:2b:a7:ff:1f:8c:18:96:41:7d:
6b:2a:3c:d7:ea:a3:9b:15:d3:6a:f3:18:84:20:49:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7C:49:4A:72:9A:5C:60:1C:B2:16:8B:62:7C:4C:CF:03:2B:8A:DA
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ac:b4:b6:ff:91:95:59:59:d2:ae:e3:1e:22:01:b7:ea:58:
cb:54:b1:97:43:d0:a7:db:7e:d0:6e:f4:21:49:ed:21:88:81:
9f:7a:6c:0c:4a:28:a9:ca:be:1d:51:a5:68:db:05:2d:ea:30:
22:f5:20:4b:a6:f7:da:97:e5:02:dc:5e:e6:79:84:5d:d2:68:
84:bf:b9:2c:6d:69:9b:33:ad:2f:e1:7b:3c:f1:4c:6a:fc:a1:
e3:a6:10:27:9b:9c:8b:40:00:0a:74:23:16:bc:fb:ed:bc:d1:
7c:b9:e3:ee:0e:4a:f8:7d:14:73:36:44:3f:5d:e2:fa:5f:31:
5f:61:d7:3d:2a:04:29:a7:3e:59:5a:07:3b:86:ee:ca:4c:4b:
7e:73:4a:c4:8c:b2:36:a7:fc:9c:a0:5f:e0:a5:94:04:9f:ea:
d3:b5:4e:e7:18:5f:e4:53:ee:e0:bd:ca:4d:ca:cf:77:b6:f4:
65:7b:f1:9d:4b:d5:f9:13:a7:74:7a:af:2e:a7:11:60:06:bc:
0e:16:c5:41:77:8e:c1:3b:5a:0a:e7:6a:a3:de:dd:98:d8:54:
9d:6b:d1:2d:0c:71:93:5e:77:fa:cf:63:b7:4c:51:3e:14:f7:
d6:2e:c8:93:5f:9a:80:28:d7:4d:9f:58:78:e7:53:13:91:82:
f9:84:0d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:45:25 2026 by rpki-client