Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: /yLExgZLPYqtZXEMikENefAwMbQnliKt1c61tAYSfEc=
Subject key identifier: E7:41:EF:C5:67:DA:8A:FF:25:89:FA:2A:2E:B9:83:F7:51:9E:39:3A
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 019D9B510FAC04BCE345A3B5F037EFAD79EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 12:01:13 +0000
Manifest this update: Fri 17 Apr 2026 12:01:13 +0000
Manifest next update: Sat 18 Apr 2026 12:01:13 +0000
Files and hashes: 1: UcL950VNXfeGMnUK-Fw9xlceECk.roa (hash: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8=)
2: Voryts3H0G0caI1RibG37Pl0zCw.roa (hash: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: +JDgvq5fpm/f+VMA6UcJUIiSOSPfSScyGBpR7WICjA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:0f:ac:04:bc:e3:45:a3:b5:f0:37:ef:ad:79:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Apr 17 12:01:13 2026 GMT
Not After : Apr 18 12:01:13 2026 GMT
Subject: CN=e741efc567da8aff2589fa2a2eb983f7519e393a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:75:f1:86:3e:36:ba:cf:29:58:6a:af:d2:
a9:b7:3a:da:c2:3c:49:ab:b6:b5:11:c1:6c:f8:cc:
9c:d5:c0:8c:a4:88:54:3c:8c:61:d4:68:75:49:66:
2f:c5:ea:64:2a:73:0a:2f:7a:76:5a:24:cd:ed:48:
31:0c:b5:44:dc:6c:63:36:fd:fd:72:07:50:c9:88:
66:cd:e1:d3:41:f6:9b:ed:fc:52:2e:35:97:27:25:
c3:17:c7:23:3a:42:e6:52:d1:9a:52:43:34:9e:31:
d2:61:5c:04:70:2d:05:01:35:7e:ff:10:44:8e:08:
66:02:96:ed:69:08:05:61:47:a3:6a:f9:73:9e:04:
68:d8:90:db:ed:0f:03:1d:38:9a:02:57:3e:07:9e:
e8:63:53:8d:7e:88:97:0a:53:c1:7f:1f:3b:df:f2:
76:ed:01:7c:44:03:b2:0e:f8:ad:df:a6:a2:df:08:
8c:a1:75:7b:be:b5:90:70:a5:b4:05:8b:16:62:a7:
12:fe:a4:47:7d:61:da:e7:60:ec:2d:76:b5:79:31:
df:4e:e9:eb:6f:81:70:bc:63:51:16:b5:0f:cb:52:
ab:15:58:f4:ec:30:72:53:0a:f9:bb:bb:d8:9c:12:
50:33:8e:a8:c4:19:93:af:4a:fa:d1:11:05:02:32:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:41:EF:C5:67:DA:8A:FF:25:89:FA:2A:2E:B9:83:F7:51:9E:39:3A
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f2:73:ea:42:15:c3:eb:df:48:cd:e2:71:41:12:29:ca:fc:
2d:d1:6a:2f:06:a7:2b:b3:92:62:4f:62:42:6a:04:7a:1c:f0:
be:58:fa:c3:19:ca:12:ec:fd:fa:0c:5a:37:5f:e2:01:11:99:
ac:dc:5f:73:b9:c9:52:cb:5c:1d:2f:c3:51:9a:37:89:50:c9:
12:7b:5d:69:99:6c:56:18:93:0c:5b:11:90:3e:b1:eb:4b:56:
d8:ec:b3:50:ed:fa:29:da:9e:fd:1a:64:ee:7b:1e:c0:59:55:
f8:b8:c2:5d:78:57:95:71:f7:16:bd:ed:10:e2:5a:27:46:a2:
ba:38:95:e6:29:82:4f:15:4e:8c:a4:41:14:b9:08:3b:52:6e:
29:f3:59:bc:b1:95:df:68:b0:1f:9c:8e:66:74:f8:ae:f9:a5:
eb:63:a2:f1:2e:11:0d:63:4f:c6:ee:79:fe:84:09:80:ce:4a:
0f:f4:c9:7c:74:1c:12:24:87:38:2d:fb:9b:e8:14:84:ed:43:
f9:83:5f:4b:b2:f2:7c:30:d7:81:55:93:5f:75:2c:83:ba:6b:
87:7e:1a:7e:d8:fb:63:ce:da:32:95:ae:76:d7:88:0d:b9:f2:
49:80:2a:30:73:c4:53:2c:3b:10:7b:9f:ef:ec:ce:80:b1:25:
b6:a3:4a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUQ+sBLzjRaO18DfvrXnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOWExNjRjNjU2NDEyYjdkYWFmYWU4NTcxY2M2NzljYzZm
NTg3ZDAwHhcNMjYwNDE3MTIwMTEzWhcNMjYwNDE4MTIwMTEzWjAzMTEwLwYDVQQD
EyhlNzQxZWZjNTY3ZGE4YWZmMjU4OWZhMmEyZWI5ODNmNzUxOWUzOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5J18YY+NrrPKVhqr9KptzrawjxJ
q7a1EcFs+Myc1cCMpIhUPIxh1Gh1SWYvxepkKnMKL3p2WiTN7UgxDLVE3GxjNv39
cgdQyYhmzeHTQfab7fxSLjWXJyXDF8cjOkLmUtGaUkM0njHSYVwEcC0FATV+/xBE
jghmApbtaQgFYUejavlzngRo2JDb7Q8DHTiaAlc+B57oY1ONfoiXClPBfx873/J2
7QF8RAOyDvit36ai3wiMoXV7vrWQcKW0BYsWYqcS/qRHfWHa52DsLXa1eTHfTunr
b4FwvGNRFrUPy1KrFVj07DByUwr5u7vYnBJQM46oxBmTr0r60REFAjKnhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdB78Vn2or/JYn6Ki65g/dRnjk6MB8GA1UdIwQY
MBaAFKqaFkxlZBK32q+uhXHMZ5zG9YfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjIt
Mjg4MjljMDNjNjlhLzEvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjItMjg4MjljMDNjNjlh
LzEvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/Jz6kIV
w+vfSM3icUESKcr8LdFqLwanK7OSYk9iQmoEehzwvlj6wxnKEuz9+gxaN1/iARGZ
rNxfc7nJUstcHS/DUZo3iVDJEntdaZlsVhiTDFsRkD6x60tW2OyzUO36Kdqe/Rpk
7nsewFlV+LjCXXhXlXH3Fr3tEOJaJ0aiujiV5imCTxVOjKRBFLkIO1JuKfNZvLGV
32iwH5yOZnT4rvml62Oi8S4RDWNPxu55/oQJgM5KD/TJfHQcEiSHOC37m+gUhO1D
+YNfS7LyfDDXgVWTX3Usg7prh34aftj7Y87aMpWudteIDbnySYAqMHPEUyw7EHuf
7+zOgLEltqNKVw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:44 2026 by rpki-client