Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: hpU7ZuAk+qWb+H/HeCikZCdw0s+lNf+EtVkfD3wQOSw=
Subject key identifier: A5:CA:5F:AE:80:56:F5:AE:D4:06:5F:12:38:3F:AC:70:21:AE:CE:02
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 01A0E92DC314A3C738553392D73673CB912C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1A7E
Signing time: Mon 28 Sep 2026 18:01:25 +0000
Manifest this update: Mon 28 Sep 2026 18:01:25 +0000
Manifest next update: Tue 29 Sep 2026 18:01:25 +0000
Files and hashes: 1: UcL950VNXfeGMnUK-Fw9xlceECk.roa (hash: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8=)
2: Voryts3H0G0caI1RibG37Pl0zCw.roa (hash: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: mL22MJpaPh02brmcGYDQGNE13S25IfrtPsFrNdZTzu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:c3:14:a3:c7:38:55:33:92:d7:36:73:cb:91:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Sep 28 18:01:25 2026 GMT
Not After : Sep 29 18:01:25 2026 GMT
Subject: CN=a5ca5fae8056f5aed4065f12383fac7021aece02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:7c:7c:8b:81:91:82:a8:bc:1b:b2:5d:db:
0e:c4:1e:17:36:5f:62:47:a0:a7:89:48:be:1a:cb:
36:1d:db:86:3d:4a:50:15:1b:39:86:17:78:8d:38:
07:2f:5a:de:57:20:ed:d9:8e:bb:21:8d:49:96:da:
10:5b:b0:07:87:28:c1:43:ef:49:b0:6f:0d:df:5e:
f7:03:d1:fc:b9:b9:da:90:86:88:d1:87:42:84:c8:
4b:f5:7a:aa:22:9c:b9:cb:82:7e:6d:43:38:39:10:
e5:c9:d6:4d:42:d5:bc:c4:97:5f:51:b6:b3:9e:49:
ba:10:00:f2:ae:b9:7d:56:af:0a:11:c9:7c:4f:14:
6e:95:3f:45:d8:91:28:2b:2c:e4:79:6c:a9:57:0a:
3e:f9:72:7d:ab:54:17:c1:ce:49:30:64:05:78:d4:
89:80:4a:c8:eb:e3:87:6f:13:07:50:4e:e1:95:9d:
91:53:cb:6d:9a:54:fb:21:46:89:fa:62:04:ff:70:
48:9a:d8:91:a6:cc:38:6e:eb:bf:b0:82:34:a9:ae:
70:fc:5a:6d:b2:09:10:35:b9:05:2b:63:c4:66:1b:
d7:74:5a:f0:94:f5:e3:bc:dd:92:a7:b5:f5:84:09:
22:4c:dc:45:8f:1a:a0:ae:35:75:7d:d0:cb:71:09:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:5F:AE:80:56:F5:AE:D4:06:5F:12:38:3F:AC:70:21:AE:CE:02
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:40:1e:09:bf:9f:f2:b3:3e:cc:55:0e:66:cb:21:ca:a9:46:
87:d9:d9:1b:30:d1:75:5c:d5:02:fd:ff:17:d9:76:01:6e:35:
da:f0:78:d7:41:c5:3c:c9:10:da:ff:7b:cc:49:da:d9:2c:fe:
b8:18:99:c5:52:3f:4e:5a:74:74:7f:0f:ad:49:0e:f0:dd:91:
ca:e4:ad:e9:1b:9d:c9:69:24:b4:b9:d1:aa:2f:56:e3:a6:a6:
fc:6e:32:f5:b8:3e:5f:42:a3:25:78:83:98:4c:6e:65:1b:60:
9f:2d:33:61:3e:62:71:42:6d:e0:a1:64:b6:ea:17:61:f6:1f:
19:5a:22:46:da:12:db:eb:6f:aa:e3:1b:bc:86:38:af:a3:a8:
c5:8e:0a:b1:55:c8:6f:b0:d6:8e:29:79:20:34:7c:10:02:68:
d3:10:69:52:f0:14:22:08:88:f9:8e:1a:83:4b:01:b4:2e:9d:
86:90:3b:cb:2a:ad:da:4f:b6:e9:58:c7:a1:24:73:76:81:04:
d2:f4:01:c6:18:20:f3:00:ae:0d:8d:7c:99:d1:2e:e7:76:34:
9a:00:56:21:ce:42:54:ca:27:78:ab:6c:d3:a6:e1:96:bb:22:
8f:eb:a9:cf:26:1d:fc:98:fa:61:7e:9f:a4:27:8a:2c:c2:43:
8c:7f:43:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:46:10 2026 by rpki-client