Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: 66HoV7ahKY3uHmDqCN7Z9EFJVQYHkGfMXBjfRcw6x4E=
Subject key identifier: 03:42:A1:46:EE:9D:4D:E0:C3:37:B2:0B:E2:97:90:2B:44:FB:2C:44
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 01A001703084340E5833D11271F228DBFC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1A06
Signing time: Fri 14 Aug 2026 18:02:04 +0000
Manifest this update: Fri 14 Aug 2026 18:02:04 +0000
Manifest next update: Sat 15 Aug 2026 18:02:04 +0000
Files and hashes: 1: UcL950VNXfeGMnUK-Fw9xlceECk.roa (hash: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8=)
2: Voryts3H0G0caI1RibG37Pl0zCw.roa (hash: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: GeokCI8VoTTc/JcCPojyAeHEclRWVo5h4ImQW4Ltmn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:30:84:34:0e:58:33:d1:12:71:f2:28:db:fc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Aug 14 18:02:04 2026 GMT
Not After : Aug 15 18:02:04 2026 GMT
Subject: CN=0342a146ee9d4de0c337b20be297902b44fb2c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:52:bc:d3:8d:22:81:b9:4c:30:4a:cd:b5:
ab:90:f6:44:c8:e7:cc:c6:2f:ff:71:46:df:d4:a4:
c9:73:84:34:ed:dd:c3:7d:e1:b4:5c:27:d9:1b:0d:
ef:d2:f1:39:d8:55:97:ff:20:43:a4:e2:0d:48:56:
b2:fd:76:35:38:82:ca:43:16:aa:23:e1:72:5f:c2:
b7:45:bf:61:af:fb:b4:42:ff:3a:d6:dd:96:08:3f:
69:ca:38:f5:9f:ce:a5:a4:d4:43:4e:a0:8d:ed:c8:
57:af:1b:52:f3:b6:66:dd:7a:ef:fa:f3:b9:8f:5c:
7b:fa:c7:0e:0f:96:39:ad:be:9c:de:7a:9d:c2:9c:
0a:85:85:5f:c7:b4:6e:ce:7d:e4:26:50:8d:cd:9a:
8b:93:71:1f:a7:0f:16:ef:7c:af:bd:46:0b:34:ae:
1c:58:22:06:22:36:15:a8:b4:e6:8b:93:eb:d6:c5:
2c:8f:6e:80:8e:bf:cf:77:bb:b0:b9:37:e8:3b:0a:
c2:21:7e:79:1a:c0:fc:d4:94:47:8c:71:09:1b:46:
80:18:bb:8f:df:c6:4b:7a:c8:86:89:26:6b:e9:a1:
86:b1:0d:8a:65:76:ce:61:c4:6d:c7:8c:4b:2f:9a:
6e:b9:63:d9:e5:2c:e8:0d:5c:55:32:29:07:0b:81:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:42:A1:46:EE:9D:4D:E0:C3:37:B2:0B:E2:97:90:2B:44:FB:2C:44
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cf:9e:9c:6f:77:12:04:f7:f3:81:41:cb:16:9f:21:53:5b:
a8:c0:d0:2a:6c:d3:92:35:09:7a:15:c0:be:9a:32:af:83:20:
62:80:e2:16:3c:ac:8d:42:2e:b9:9a:05:01:dc:da:8d:62:26:
ea:43:d2:85:b4:33:0a:1c:08:f1:96:f7:c8:39:f1:92:66:50:
b6:db:51:16:3b:22:87:24:94:4a:8c:c0:c2:46:70:03:2d:04:
a0:06:ab:90:2b:1e:b0:64:7e:ce:e4:10:bf:49:5b:5d:31:93:
e5:d1:33:b4:10:61:bc:83:01:d3:94:31:99:c5:ff:ea:e4:43:
cb:10:98:e6:31:95:a3:bf:af:08:36:a9:ce:31:26:71:79:f3:
6c:7f:7d:ec:55:75:83:22:f9:c8:d7:7f:59:a8:6e:a4:d3:23:
f2:52:82:64:03:c1:24:1a:65:7b:d8:c4:b8:a5:19:4a:1f:3d:
c6:28:2c:9a:86:1c:b1:07:b0:f8:f1:ac:9c:0b:da:06:eb:1f:
d3:19:ee:2d:68:f0:a9:87:d4:fe:7d:ad:6d:5d:74:7d:3b:a3:
26:1c:ce:37:54:27:a1:5a:0d:9e:ce:95:3a:dc:ea:eb:fb:fa:
38:13:93:4f:fd:1d:95:5b:c9:03:72:9e:73:5f:be:27:84:1b:
a3:ae:7a:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABcDCENA5YM9EScfIo2/xdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOWExNjRjNjU2NDEyYjdkYWFmYWU4NTcxY2M2NzljYzZm
NTg3ZDAwHhcNMjYwODE0MTgwMjA0WhcNMjYwODE1MTgwMjA0WjAzMTEwLwYDVQQD
EygwMzQyYTE0NmVlOWQ0ZGUwYzMzN2IyMGJlMjk3OTAyYjQ0ZmIyYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPRSvNONIoG5TDBKzbWrkPZEyOfM
xi//cUbf1KTJc4Q07d3DfeG0XCfZGw3v0vE52FWX/yBDpOINSFay/XY1OILKQxaq
I+FyX8K3Rb9hr/u0Qv861t2WCD9pyjj1n86lpNRDTqCN7chXrxtS87Zm3Xrv+vO5
j1x7+scOD5Y5rb6c3nqdwpwKhYVfx7Ruzn3kJlCNzZqLk3Efpw8W73yvvUYLNK4c
WCIGIjYVqLTmi5Pr1sUsj26Ajr/Pd7uwuTfoOwrCIX55GsD81JRHjHEJG0aAGLuP
38ZLesiGiSZr6aGGsQ2KZXbOYcRtx4xLL5puuWPZ5SzoDVxVMikHC4HkPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANCoUbunU3gwzeyC+KXkCtE+yxEMB8GA1UdIwQY
MBaAFKqaFkxlZBK32q+uhXHMZ5zG9YfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjIt
Mjg4MjljMDNjNjlhLzEvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjItMjg4MjljMDNjNjlh
LzEvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArM+enG93
EgT384FByxafIVNbqMDQKmzTkjUJehXAvpoyr4MgYoDiFjysjUIuuZoFAdzajWIm
6kPShbQzChwI8Zb3yDnxkmZQtttRFjsihySUSozAwkZwAy0EoAarkCsesGR+zuQQ
v0lbXTGT5dEztBBhvIMB05QxmcX/6uRDyxCY5jGVo7+vCDapzjEmcXnzbH997FV1
gyL5yNd/WahupNMj8lKCZAPBJBple9jEuKUZSh89xigsmoYcsQew+PGsnAvaBusf
0xnuLWjwqYfU/n2tbV10fTujJhzON1QnoVoNns6VOtzq6/v6OBOTT/0dlVvJA3Ke
c1++J4Qbo656zw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:27 2026 by rpki-client