Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: Wd3OgcP9UA+DQONj0NjuTNMACvWh2R7BsOd0M54sg6E=
Subject key identifier: ED:23:46:B8:EF:62:44:88:B0:F4:15:88:92:17:E3:76:17:E4:42:A2
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 01A119756615E1965833A83DE7FA2079ABB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1A97
Signing time: Thu 08 Oct 2026 03:01:26 +0000
Manifest this update: Thu 08 Oct 2026 03:01:26 +0000
Manifest next update: Fri 09 Oct 2026 03:01:26 +0000
Files and hashes: 1: UcL950VNXfeGMnUK-Fw9xlceECk.roa (hash: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8=)
2: Voryts3H0G0caI1RibG37Pl0zCw.roa (hash: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: 6PGHVHXkmfItgBfh/c+jjKzq5aHoApfGN99NwUmxXik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:75:66:15:e1:96:58:33:a8:3d:e7:fa:20:79:ab:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Oct 8 03:01:26 2026 GMT
Not After : Oct 9 03:01:26 2026 GMT
Subject: CN=ed2346b8ef624488b0f415889217e37617e442a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:fa:83:19:2e:1a:17:e1:4d:c2:8c:2f:be:
bd:14:95:25:80:3d:40:7a:25:17:aa:a3:7a:14:71:
61:e6:03:a6:6f:f4:17:21:45:74:dd:de:dc:c1:b0:
2b:eb:e0:75:f7:99:49:00:3f:cb:5b:16:a1:2c:d9:
eb:b9:70:0d:7e:e9:d7:44:1a:04:f0:92:15:98:75:
dc:34:c5:d7:35:b5:d3:cd:8f:80:a6:9f:a1:cd:8c:
c4:6b:75:b8:43:4d:c6:d7:4e:e8:21:4c:bc:2c:34:
6e:69:e4:b0:8c:32:c2:30:a3:13:31:07:6e:fc:21:
f9:15:98:ad:fe:68:88:9b:fe:63:04:64:77:20:04:
bf:fa:d2:0c:a0:e7:7b:27:98:5d:5d:5f:63:4e:79:
2b:3f:7e:af:fd:b4:30:e7:aa:b6:fa:af:f6:a6:69:
23:d2:fe:a2:09:7b:45:e9:34:6a:30:a5:40:98:4e:
4b:fc:56:2f:fd:0c:bc:26:b4:2e:a9:8c:57:77:94:
fe:cd:0d:ce:68:29:bb:69:8d:95:1b:e2:ad:a6:a0:
71:29:18:84:11:69:ee:4b:38:b6:22:63:90:b9:b6:
8e:e3:9b:e4:04:1d:79:1a:f1:5c:53:69:32:a0:b0:
9d:9c:a5:a7:21:71:82:5e:63:71:ca:e8:9e:58:92:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:23:46:B8:EF:62:44:88:B0:F4:15:88:92:17:E3:76:17:E4:42:A2
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4e:ae:7e:67:25:8b:04:9f:90:31:28:7e:16:14:12:12:5a:
5a:80:a0:f2:01:9f:47:9c:ff:0a:1e:ca:72:5f:0d:1e:c7:9b:
e1:39:c0:92:ae:be:b8:f9:05:45:38:2d:e4:8e:5a:e9:10:53:
de:25:f2:e0:87:85:cb:ee:9f:d4:f5:e1:ff:c3:9c:69:9d:88:
db:d5:07:1b:b4:a5:fe:b8:89:68:e2:d6:63:06:23:5e:21:96:
18:df:8d:56:64:a5:66:52:71:03:6a:18:52:8b:b2:35:52:4c:
4e:8b:47:bf:d1:50:e1:0d:aa:da:c4:c6:02:8a:02:fc:ee:89:
ea:5c:73:de:d9:f5:7f:f7:22:f6:3f:cc:c3:fd:24:6a:a0:2c:
32:6e:28:0e:30:34:42:38:6d:e4:4f:74:b8:96:ff:df:fd:56:
c1:a2:4b:4b:4a:4f:14:8d:cc:c1:cc:b9:3d:4c:73:50:6a:7a:
a2:92:44:2d:25:34:a1:e0:f9:4a:2d:25:ee:4e:ff:a3:34:8b:
d1:4c:50:48:80:e3:df:3d:12:b8:31:4f:7b:42:b6:11:25:ca:
b0:33:8c:ae:c6:1d:bf:95:b9:2e:83:74:34:dc:4a:b7:d9:d6:
31:80:36:e6:7a:71:bb:73:b6:14:8b:57:e9:99:29:03:29:58:
47:12:2e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:48:51 2026 by rpki-client