Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: 0IU3F5rg05Kpo79YIvUHWjDpS0uW/zDouM50hpFW30M=
Subject key identifier: FE:05:D5:78:71:82:39:39:B9:11:E8:75:34:DB:B6:08:79:B7:AB:F6
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 019F11F79D36DDD05F04093FBB7A488043DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 198A
Signing time: Mon 29 Jun 2026 06:01:07 +0000
Manifest this update: Mon 29 Jun 2026 06:01:07 +0000
Manifest next update: Tue 30 Jun 2026 06:01:07 +0000
Files and hashes: 1: UcL950VNXfeGMnUK-Fw9xlceECk.roa (hash: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8=)
2: Voryts3H0G0caI1RibG37Pl0zCw.roa (hash: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: 3LPuRIPMZX1/rjcR/Zx4C2LVT7JMrb+P9TQjA6l8aZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:9d:36:dd:d0:5f:04:09:3f:bb:7a:48:80:43:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Jun 29 06:01:07 2026 GMT
Not After : Jun 30 06:01:07 2026 GMT
Subject: CN=fe05d57871823939b911e87534dbb60879b7abf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:66:1a:93:71:ad:4d:22:5d:ac:4c:29:d8:
ef:7a:9b:fd:fc:e2:61:93:4c:9a:bb:07:df:19:4d:
36:64:81:9e:c2:95:64:3b:00:2f:3a:c2:e5:81:58:
56:87:8b:78:8a:10:d6:20:f8:5c:e4:32:2e:ad:4d:
b4:ee:9a:c9:2a:b8:ff:67:f6:fc:a9:b5:96:95:2f:
88:98:70:42:48:28:d7:18:28:87:df:11:18:af:f9:
45:73:a1:b1:89:1e:1f:08:94:6d:09:78:91:bd:4a:
17:b1:07:8d:87:94:0f:80:3d:4e:d8:3c:4e:1f:e4:
56:a8:b6:98:34:8a:0e:53:4d:aa:b3:e5:43:c9:d5:
48:9b:86:16:57:d0:11:ec:e5:6b:56:40:38:44:0a:
32:2c:d2:c2:9c:1f:81:6f:e7:89:c3:08:dc:e8:6e:
19:71:bd:fd:e0:a6:20:c1:30:0f:93:ce:01:40:a7:
47:f2:72:71:98:5e:76:32:2b:6b:e5:5c:05:56:e2:
b0:2e:c4:f3:f0:46:27:04:a3:5f:03:15:59:d1:70:
f4:0b:7e:5e:51:1e:dd:32:7b:96:76:bf:3a:d9:c8:
23:0d:c7:c5:59:c3:37:ec:b0:d7:21:6a:5c:1a:dc:
ca:c6:20:3a:ab:7e:00:3d:ab:03:c2:0e:08:67:37:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:05:D5:78:71:82:39:39:B9:11:E8:75:34:DB:B6:08:79:B7:AB:F6
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:35:25:a5:8b:80:96:ef:2d:ad:db:62:f9:94:7b:0d:2c:65:
0c:54:b2:09:f0:a4:05:be:53:ed:67:e2:c6:54:3c:25:b9:72:
6c:62:34:64:e4:b8:63:11:21:de:af:d7:92:94:14:54:d3:e0:
0e:85:e3:7b:d4:c3:f0:3e:15:28:f0:63:e9:cf:1d:5e:17:69:
35:f0:97:36:6b:54:e5:10:23:b3:df:0c:ac:c7:d1:82:50:c8:
33:83:c1:a1:80:ef:4a:c9:a4:b7:24:85:aa:47:84:58:c4:4a:
8e:aa:16:2a:a9:42:85:17:ab:4d:ec:43:22:a2:55:e5:f8:56:
43:77:79:b3:01:2b:a8:96:4b:c3:cd:b2:d4:cd:7f:98:44:49:
95:3a:e5:68:4c:2e:57:ff:8e:e6:36:60:7f:42:c0:b3:3c:56:
0c:b7:c0:9a:de:46:3d:b7:c3:b3:65:bc:6b:80:c4:20:d6:fb:
e8:d1:21:9a:e3:41:cb:6d:bd:f9:09:53:7e:25:79:3d:e3:3d:
1f:be:34:ab:12:6b:26:44:76:4e:da:c6:53:44:87:91:e6:28:
1f:99:f9:92:fb:df:01:b8:e7:de:e2:1c:9c:97:20:62:55:8b:
b1:32:a9:7d:71:18:6b:7a:be:21:1c:d1:55:52:b0:c7:14:3b:
f5:e9:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:44:11 2026 by rpki-client