Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: 6DYoUb4ghE/z3+QSvswJ5fXITu+3sOGr4SpsRmoDkes=
Subject key identifier: 33:22:AD:22:6F:90:A5:EA:A8:0F:05:96:F5:D9:0E:B9:E1:8A:5C:FE
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 019CA9EB2C63981FAF96A645826D467C8DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 15:01:27 +0000
Manifest this update: Sun 01 Mar 2026 15:01:27 +0000
Manifest next update: Mon 02 Mar 2026 15:01:27 +0000
Files and hashes: 1: UcL950VNXfeGMnUK-Fw9xlceECk.roa (hash: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8=)
2: Voryts3H0G0caI1RibG37Pl0zCw.roa (hash: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: olc1v3ipAecm0WR9u5S2yTwVBXh6nJTtLg/OxlVUCZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:2c:63:98:1f:af:96:a6:45:82:6d:46:7c:8d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Mar 1 15:01:27 2026 GMT
Not After : Mar 2 15:01:27 2026 GMT
Subject: CN=3322ad226f90a5eaa80f0596f5d90eb9e18a5cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:e7:3f:7a:2a:70:47:5c:b9:e7:73:e0:fd:
d7:f2:04:9c:21:72:6c:48:48:7b:26:0d:7a:a3:6f:
7a:de:38:60:f5:4d:97:de:01:a7:dc:45:18:2e:21:
e8:3c:60:9b:e0:b5:29:53:fc:6f:3a:b9:71:87:88:
d8:f2:e9:85:91:8d:bd:eb:07:68:f2:79:b4:1e:3e:
af:ed:71:ba:1c:ac:0f:49:43:73:af:64:16:20:e0:
5e:72:0e:0e:7a:74:c0:90:7e:7a:5c:7b:ff:92:b9:
66:10:1c:08:74:24:70:49:a8:bb:a6:28:01:d1:d0:
5b:f5:d0:20:6d:ee:2b:98:91:00:41:d5:3c:6d:bd:
70:fc:00:67:9d:9a:69:ad:73:39:fb:91:05:09:a7:
d5:0a:a9:35:3a:13:10:45:27:09:c7:7a:b2:e2:be:
31:fd:1e:e0:4c:55:bc:49:38:c1:e1:53:49:6b:5b:
ae:87:b4:bf:b9:1c:9f:08:e1:ae:6f:47:2e:85:c7:
d1:70:c4:50:84:fc:7c:a4:2e:2b:28:aa:d3:75:bf:
a0:7c:4a:f7:b7:7c:48:57:58:7b:df:7e:6e:77:c9:
7e:75:cd:2d:2b:d6:1f:18:44:97:63:3a:c8:51:5b:
c9:86:1a:a7:4f:64:8c:b0:9c:28:b2:38:72:fc:b2:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:22:AD:22:6F:90:A5:EA:A8:0F:05:96:F5:D9:0E:B9:E1:8A:5C:FE
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:75:b2:f0:c4:05:6a:17:39:49:fd:f7:28:86:4e:69:5a:43:
d0:fe:e6:3f:29:ca:fc:6e:7e:53:4c:7d:1b:97:a3:62:f6:49:
88:fa:cf:ff:7c:5d:15:a6:9c:e2:41:42:29:2b:a2:f0:8f:ad:
45:6d:9d:d3:3c:19:45:b9:65:4b:88:cc:3a:9f:27:3d:a3:42:
ee:96:7d:bf:d6:90:c9:e3:86:5f:74:80:6c:bf:52:76:71:da:
40:6f:e2:b4:a2:e9:0c:34:38:43:79:c0:b1:28:7b:df:e4:4f:
e7:f7:85:13:b0:d8:dd:16:4b:6a:6e:d6:bd:c9:b8:a8:1d:9f:
b8:db:51:f2:bb:57:70:0b:4c:61:ea:f2:73:a5:48:6e:25:d9:
a1:5f:90:e7:91:df:23:d7:55:44:4a:6b:07:62:87:88:62:15:
3f:75:e4:aa:ff:48:28:44:91:3b:59:ea:dc:36:9b:cc:70:e0:
f9:4f:dc:72:b5:5d:e6:d5:37:f9:c3:1f:52:16:29:a0:20:fd:
2a:6d:f9:42:d2:55:c3:26:4e:98:e6:5c:ff:15:41:87:dd:6b:
3c:a1:89:e8:1c:a1:2b:48:65:0c:dc:c1:15:d9:76:33:3f:ec:
fb:97:89:68:38:be:73:2c:4d:53:2b:40:cb:92:24:cc:89:f2:
06:3e:f7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:56 2026 by rpki-client