Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: sSQ+TtqAeQCuXg+fykGPEw2aBJ/i5FAbCNYi5pSjh04=
Subject key identifier: FC:5E:D0:CF:9F:B6:A2:50:99:DE:A7:62:1F:60:F9:77:8D:53:A9:6C
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 019F8F7F6E4C5EAAC4FF94FDB6E4E668EF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 15:02:00 +0000
Manifest this update: Thu 23 Jul 2026 15:02:00 +0000
Manifest next update: Fri 24 Jul 2026 15:02:00 +0000
Files and hashes: 1: UcL950VNXfeGMnUK-Fw9xlceECk.roa (hash: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8=)
2: Voryts3H0G0caI1RibG37Pl0zCw.roa (hash: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: PC6IUpvFJ2X/Qt5vtZ1KTKzTakPIvonEvD51PPtsdVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:6e:4c:5e:aa:c4:ff:94:fd:b6:e4:e6:68:ef:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Jul 23 15:02:00 2026 GMT
Not After : Jul 24 15:02:00 2026 GMT
Subject: CN=fc5ed0cf9fb6a25099dea7621f60f9778d53a96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:1f:de:8b:78:43:74:a2:4d:56:56:b9:fe:
cb:67:0f:07:a3:60:9b:55:8a:a2:79:dd:6d:0e:20:
ed:76:c3:53:50:f9:8e:f7:e4:3d:e7:a5:78:97:ff:
75:cc:3d:10:48:e8:0e:f9:be:75:19:22:ee:dc:29:
32:0a:83:b9:9b:74:29:d6:b9:5f:93:b5:d3:bc:3e:
6f:10:22:85:b6:da:16:a5:fd:92:4b:82:f7:75:72:
b3:e3:7b:b5:b2:8f:a4:c2:35:e5:e6:d8:2d:65:d1:
ce:f7:6f:86:f0:f4:eb:0a:b3:78:84:94:f9:9e:fb:
85:15:5b:87:ed:3c:42:9f:61:93:61:0b:6c:37:64:
49:32:7e:35:a5:07:33:b7:66:11:56:44:aa:1a:4d:
59:39:36:57:be:94:a8:76:59:7c:03:c2:36:d3:8e:
5e:23:43:0b:38:af:b3:ae:8d:ec:bb:60:ae:0a:38:
87:7f:c2:c8:17:a2:fa:70:b2:6e:33:0c:a8:0e:50:
0f:f7:54:13:3e:cb:fc:b1:94:c3:3b:7f:13:44:61:
fa:bc:22:04:76:3f:32:40:1d:91:f9:d1:b8:9e:ca:
e0:5f:c8:c8:88:73:d3:8a:4d:55:db:fc:e4:c7:06:
e0:10:8a:19:e5:0b:59:17:40:0d:68:23:a3:75:f3:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:D0:CF:9F:B6:A2:50:99:DE:A7:62:1F:60:F9:77:8D:53:A9:6C
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c6:7a:21:d7:76:34:fe:d5:47:5c:c5:e1:ad:98:2c:58:ae:
ba:e6:7a:00:34:9f:9b:03:2e:1c:aa:0a:28:09:60:2a:ff:87:
db:03:8a:49:25:62:3d:67:0e:2f:85:1b:b3:3e:af:9a:ce:6a:
7d:b5:ac:b5:f2:ae:c0:67:09:ed:b2:60:93:b9:3a:01:5e:65:
a8:24:97:73:d9:2b:40:27:0a:8d:2e:7a:08:10:ec:ae:bd:e0:
fd:fc:9a:57:d5:63:a4:d0:f3:d8:42:22:6b:70:05:e8:e8:93:
8c:ce:31:2e:a6:e9:fd:5e:61:7d:16:ce:60:bb:8e:a7:4d:30:
60:2e:5a:81:5d:54:a9:7d:31:bf:5e:d6:39:95:84:5d:69:18:
9c:fa:ef:86:e0:d8:81:1d:f8:9c:83:1c:27:1d:e6:59:de:02:
b1:67:3c:9e:d4:3c:35:ac:8f:35:be:93:2a:1c:2a:e2:89:8e:
5b:d0:22:3f:9c:f8:10:68:0b:ba:66:29:97:da:ba:f1:60:10:
ed:89:d4:72:4d:8c:b0:86:8d:ae:ff:23:24:54:64:c3:af:6e:
6f:50:89:32:10:16:77:3b:e4:be:84:1c:d2:1b:83:8b:72:2c:
0b:01:f0:88:62:3f:44:b5:66:1b:ea:7d:02:f4:87:2b:3b:4b:
74:a6:18:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:10:35 2026 by rpki-client