Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: H7TAfn9ylNdp1Anrmmu4NXlNE7BAPNNoBAel7G/7C/c=
Subject key identifier: EC:68:85:92:00:11:94:70:4A:DC:B9:EA:AB:0C:51:6F:37:11:F7:75
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 019EC2C9674403FE67D48C10C483D2827117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1961
Signing time: Sat 13 Jun 2026 21:00:39 +0000
Manifest this update: Sat 13 Jun 2026 21:00:39 +0000
Manifest next update: Sun 14 Jun 2026 21:00:39 +0000
Files and hashes: 1: UcL950VNXfeGMnUK-Fw9xlceECk.roa (hash: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8=)
2: Voryts3H0G0caI1RibG37Pl0zCw.roa (hash: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: 3fZr81+3tqLlXTsrOkSrAixEpBla9oiDuoBvH0gZyYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:67:44:03:fe:67:d4:8c:10:c4:83:d2:82:71:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Jun 13 21:00:39 2026 GMT
Not After : Jun 14 21:00:39 2026 GMT
Subject: CN=ec688592001194704adcb9eaab0c516f3711f775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3f:ed:e5:ac:05:ff:8a:73:ee:ae:c4:c8:86:
9b:28:06:19:c9:4b:e5:53:20:77:6e:46:ae:a7:d3:
71:04:3a:0e:4d:6f:f2:1c:9e:00:f6:a3:f7:f1:0e:
ae:cf:bb:0f:5b:62:a6:d2:53:ad:a6:2e:e5:f5:5b:
ca:9f:15:ad:ab:69:91:75:2e:f7:2c:a4:97:13:32:
c6:34:88:3e:3f:ce:10:32:11:5a:25:96:0f:75:2c:
e9:df:45:67:87:89:b9:c1:f6:51:b3:cf:62:b4:58:
60:36:07:73:62:c6:24:9c:23:2f:78:e0:1a:34:e2:
c5:ff:6c:e8:50:e6:d1:51:64:66:79:73:a6:05:20:
fa:28:82:26:db:21:ef:b1:07:b4:be:00:f1:5e:71:
59:57:33:6e:f5:b5:fd:36:d4:f6:d1:e4:ad:20:27:
af:e1:e9:86:9b:4c:a7:29:39:71:b1:30:5d:1c:77:
c6:4f:12:20:cd:a7:bb:74:32:d7:f7:a9:03:b8:8b:
d9:e9:10:22:ef:7b:47:64:ca:d1:16:cf:77:f4:5d:
55:4d:40:35:60:6d:ec:25:57:40:ea:3b:e5:6b:63:
33:79:8e:b7:79:db:f5:69:81:4a:a9:cc:43:d1:b3:
f6:43:e7:74:90:04:d1:0f:d7:79:e1:fd:79:72:db:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:68:85:92:00:11:94:70:4A:DC:B9:EA:AB:0C:51:6F:37:11:F7:75
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e8:3c:3d:be:a6:0b:e3:01:d1:1e:bc:36:0c:93:7a:24:da:
3f:97:38:2d:80:24:5b:0a:8a:79:42:e7:b4:4f:02:c8:67:45:
3c:2b:01:8b:44:9f:c1:d8:02:26:de:27:00:a8:86:0b:b1:7c:
d8:10:d8:7d:12:33:b8:b3:0a:60:fe:56:ec:d6:4f:29:46:7b:
27:65:0a:69:95:04:14:02:85:b0:09:c4:44:bf:e2:ff:41:90:
eb:9a:0e:66:2d:1f:87:37:85:b4:a3:20:43:02:9a:12:1c:92:
4f:10:f1:25:38:07:e2:7d:9d:9e:57:97:6f:86:76:33:ec:4f:
72:25:57:94:7b:e3:a8:8d:9a:8e:7c:32:82:85:ed:ea:96:84:
d9:fe:3f:a0:96:76:73:e7:ac:16:fb:18:1b:c6:70:df:b2:b7:
6e:d1:f2:b9:f1:02:bb:04:b6:82:5f:6f:a1:1c:a0:b2:68:89:
e3:76:89:5b:9e:0d:d4:71:14:55:6c:43:f2:b2:80:4d:06:0a:
ba:e4:ec:56:ad:ae:6f:73:3d:d4:93:3b:9e:56:57:24:28:35:
16:39:2c:ce:5a:1b:47:a7:3a:8e:a0:66:24:81:7c:19:2f:88:
73:74:d4:4b:30:96:14:cb:13:02:d4:7e:b2:4c:e2:63:1b:77:
b8:95:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:53:58 2026 by rpki-client