Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: G97GPkfjVEZP0f4UPcuux6t6vBbgU9OjDRtWL5WSqD8=
Subject key identifier: 83:EA:AB:E5:64:74:B7:F2:99:3F:7A:78:97:4B:02:36:4C:F1:6F:BC
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 019D38D3A53E814A9A343283FB8740A10215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 09:01:27 +0000
Manifest this update: Sun 29 Mar 2026 09:01:27 +0000
Manifest next update: Mon 30 Mar 2026 09:01:27 +0000
Files and hashes: 1: UcL950VNXfeGMnUK-Fw9xlceECk.roa (hash: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8=)
2: Voryts3H0G0caI1RibG37Pl0zCw.roa (hash: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: K0NSIcRyfrNnunOaUridJlGTKYLJzD95WrFU8pCFZz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a5:3e:81:4a:9a:34:32:83:fb:87:40:a1:02:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Mar 29 09:01:27 2026 GMT
Not After : Mar 30 09:01:27 2026 GMT
Subject: CN=83eaabe56474b7f2993f7a78974b02364cf16fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:8e:a2:54:8a:7d:f5:bb:cd:19:36:52:57:
a1:22:26:31:7a:18:ab:eb:81:0b:a4:d7:03:48:ff:
f8:42:00:2e:58:0f:fc:80:38:55:ee:80:a5:d7:7e:
e1:4f:75:bf:35:42:dc:59:c6:b5:1b:4b:f8:5b:7b:
7d:57:38:50:d5:e7:fb:ea:38:b4:b4:15:0f:b6:0a:
0a:a4:d1:0f:1c:ae:8f:69:0d:f6:fb:3b:2a:f9:17:
75:be:d5:bd:dd:08:f6:c7:5f:bf:04:00:49:b0:14:
6b:05:39:52:58:85:be:4c:6f:5a:b2:a3:39:ef:f9:
97:82:2e:27:26:fd:58:c5:a3:26:b4:ae:13:38:4a:
fe:b6:12:80:09:fb:a3:01:1d:33:6f:10:51:c0:65:
31:d6:07:08:d9:61:1c:a0:c5:4f:52:3d:2f:d7:ba:
cc:03:72:54:cf:05:40:c9:98:ed:b5:0d:16:ac:40:
42:00:eb:fc:52:fb:f4:0f:ae:b4:1e:9d:04:c1:f3:
2d:bf:69:ee:dd:9e:c1:c2:51:06:11:e7:ea:1b:d4:
f9:40:64:99:14:87:fc:96:a9:52:b0:64:56:c3:4c:
9d:fe:9a:e3:7b:72:ce:96:8f:65:ff:57:91:87:e8:
bc:0c:f5:9e:d3:db:c4:d4:6d:de:35:d2:67:14:76:
42:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EA:AB:E5:64:74:B7:F2:99:3F:7A:78:97:4B:02:36:4C:F1:6F:BC
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:14:ed:49:97:78:e6:12:98:7c:c4:4f:22:f2:a9:c4:4f:29:
f7:85:cc:af:72:f4:06:77:9c:cc:b8:f8:d5:3c:8d:88:f9:35:
49:ff:7d:c1:28:52:5f:c1:fb:2c:b4:fc:a1:3f:0c:7b:97:92:
e1:26:1b:c4:ca:ac:77:55:84:e5:35:36:8e:54:66:b2:fc:6d:
3d:91:c3:cc:63:f2:b3:e3:8f:56:fa:f1:ed:8d:b7:3b:c5:3e:
2b:11:b6:4f:1b:8e:d5:84:4d:30:35:a0:bb:e5:b4:70:cd:b1:
cd:24:0f:d2:79:1e:44:11:20:5f:3d:51:33:0b:e8:d8:45:3e:
1b:bd:f9:25:36:e4:78:9d:35:85:f6:29:9d:8b:b6:f6:5f:e8:
cc:53:08:79:b1:8c:7d:fb:9a:f8:2f:cc:fa:5e:c4:41:d7:a3:
17:1e:3f:08:4d:b5:98:0d:e0:57:79:a4:96:e6:b4:33:ab:ef:
8f:08:c0:e2:da:e7:dd:0d:65:b9:7f:aa:92:08:05:d9:ce:a0:
98:7b:65:71:87:52:2b:a6:b6:6c:1b:7b:3b:6d:b6:ce:2c:47:
7a:fa:bf:08:41:33:61:fd:87:42:5d:db:bd:98:cb:bd:cd:c7:
eb:b6:a0:da:cf:0b:ba:84:ec:95:90:6a:b6:cb:d0:a9:0c:70:
29:af:0d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:23 2026 by rpki-client