Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
File: QyB1WWVFCTwGpvz4-rV7GS53kKo.mft (raw, json)
Hash identifier: YPepeKQWlmngohjbpJYmj0uoFcHH+R/D/fBgDz4Ege8=
Subject key identifier: AC:C0:37:F9:2A:9E:E1:E6:B4:56:18:17:BF:94:9E:41:5A:9D:80:96
Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
Certificate issuer: /CN=432075596545093c06a6fcf8fab57b192e7790aa
Certificate serial: 01A17AA89DD61EA7A54E2A562BB2D16313E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 00:00:33 +0000
Manifest this update: Tue 27 Oct 2026 00:00:33 +0000
Manifest next update: Wed 28 Oct 2026 00:00:33 +0000
Files and hashes: 1: 7Ajy7T_IXat5EHnX5jOdCl3BXSs.roa (hash: Rn+5opWUGoRW49OpMrdlbpM9u9h2SBCx0mFY1z5Li4g=)
2: QyB1WWVFCTwGpvz4-rV7GS53kKo.crl (hash: Ks5C4MMBKexT6iY51FIRQjcEpruXKYMxPYbdCnHKI8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:9d:d6:1e:a7:a5:4e:2a:56:2b:b2:d1:63:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa
Validity
Not Before: Oct 27 00:00:33 2026 GMT
Not After : Oct 28 00:00:33 2026 GMT
Subject: CN=acc037f92a9ee1e6b4561817bf949e415a9d8096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:bc:63:5a:b6:c4:cd:1f:5d:f4:28:77:23:
6b:01:c8:a0:f9:fd:d6:56:53:1c:c5:97:15:0a:22:
01:fb:30:48:75:e0:66:07:2a:99:e3:7f:a3:71:09:
a7:8b:ed:b0:ec:92:35:02:3e:98:19:43:04:1d:2e:
5a:43:0a:81:6e:1f:fe:12:d2:4d:3b:6e:bf:9f:1d:
14:bf:e6:15:f1:c6:82:c9:dd:38:f1:42:65:6e:63:
6e:52:45:6a:1e:8c:f0:dc:d2:98:77:b2:c4:23:e7:
00:c6:b0:8c:6e:aa:b6:86:63:72:22:29:67:81:58:
41:33:93:bb:ef:68:3d:8b:48:2b:98:fb:58:fd:6c:
3b:70:c3:88:95:a9:f8:b1:af:54:ef:51:40:07:c3:
9b:0c:28:b0:08:41:68:37:af:90:f7:79:c6:24:03:
50:a4:c4:4c:e0:6f:f2:77:5f:83:0b:44:7b:da:de:
e2:22:96:b8:c3:1b:18:26:d7:1c:26:d6:f3:cd:09:
d5:4c:e7:bd:e7:60:b5:32:e5:bc:05:c6:e3:57:c9:
b1:3b:02:5e:87:3d:2f:bd:e0:f6:63:4e:fd:63:6d:
1e:05:d4:df:9d:a6:cf:d9:06:04:b5:a2:19:43:2e:
a5:37:c1:75:94:13:b6:b5:45:99:66:b3:c9:16:31:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C0:37:F9:2A:9E:E1:E6:B4:56:18:17:BF:94:9E:41:5A:9D:80:96
X509v3 Authority Key Identifier:
keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:dd:e7:28:a2:be:47:62:3d:52:11:0f:5d:55:19:67:98:59:
58:42:b3:db:fc:5f:8c:d4:47:b6:c7:30:d8:2a:d8:27:99:c3:
be:d2:ba:de:01:97:e3:ed:32:e4:28:38:26:e1:af:fb:1c:df:
35:e6:4b:83:16:aa:17:e0:d8:89:e5:da:49:01:85:1c:c7:55:
26:53:1b:e6:f6:d8:c7:36:09:4a:5b:66:93:48:90:79:f8:0a:
21:b3:21:ec:05:b6:99:1c:31:32:9c:fa:72:a8:15:d9:98:7c:
27:fa:31:07:9e:fc:87:13:bb:bf:d7:cc:e0:20:5f:39:64:58:
f5:e5:a5:ea:a9:94:76:e8:48:e8:22:be:be:b6:2d:aa:0d:7a:
97:96:59:19:70:c5:c4:40:61:fa:02:70:25:a9:4b:97:a1:05:
e5:f5:9c:70:c1:16:fc:0f:56:96:ca:e5:01:65:22:d9:2b:d5:
2d:a9:75:6e:cc:a1:18:df:9d:9f:1b:f4:de:e9:d5:a5:48:07:
07:03:c3:20:9e:b8:e4:0f:da:c4:fd:78:88:2d:93:96:8c:73:
7e:f2:9d:3d:e1:8b:2f:a9:54:7b:c3:4e:1b:bd:aa:67:ae:ad:
8d:1f:bb:ca:f9:42:4f:48:6c:76:71:6b:56:90:d5:74:93:a0:
5c:e0:bc:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6qJ3WHqelTipWK7LRYxPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMjA3NTU5NjU0NTA5M2MwNmE2ZmNmOGZhYjU3YjE5MmU3
NzkwYWEwHhcNMjYxMDI3MDAwMDMzWhcNMjYxMDI4MDAwMDMzWjAzMTEwLwYDVQQD
EyhhY2MwMzdmOTJhOWVlMWU2YjQ1NjE4MTdiZjk0OWU0MTVhOWQ4MDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgy8Y1q2xM0fXfQodyNrAcig+f3W
VlMcxZcVCiIB+zBIdeBmByqZ43+jcQmni+2w7JI1Aj6YGUMEHS5aQwqBbh/+EtJN
O26/nx0Uv+YV8caCyd048UJlbmNuUkVqHozw3NKYd7LEI+cAxrCMbqq2hmNyIiln
gVhBM5O772g9i0grmPtY/Ww7cMOIlan4sa9U71FAB8ObDCiwCEFoN6+Q93nGJANQ
pMRM4G/yd1+DC0R72t7iIpa4wxsYJtccJtbzzQnVTOe952C1MuW8BcbjV8mxOwJe
hz0vveD2Y079Y20eBdTfnabP2QYEtaIZQy6lN8F1lBO2tUWZZrPJFjF/bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzAN/kqnuHmtFYYF7+UnkFanYCWMB8GA1UdIwQY
MBaAFEMgdVllRQk8Bqb8+Pq1exkud5CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXlCMVdXVkZDVHdHcHZ6NC1yVjdHUzUza0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iZGEyNDUtNTc2Yi00OTQwLWE5ZjUt
OTI3OThkYWNhZjc1LzEvUXlCMVdXVkZDVHdHcHZ6NC1yVjdHUzUza0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9iZGEyNDUtNTc2Yi00OTQwLWE5ZjUtOTI3OThkYWNhZjc1
LzEvUXlCMVdXVkZDVHdHcHZ6NC1yVjdHUzUza0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHN3nKKK+
R2I9UhEPXVUZZ5hZWEKz2/xfjNRHtscw2CrYJ5nDvtK63gGX4+0y5Cg4JuGv+xzf
NeZLgxaqF+DYieXaSQGFHMdVJlMb5vbYxzYJSltmk0iQefgKIbMh7AW2mRwxMpz6
cqgV2Zh8J/oxB578hxO7v9fM4CBfOWRY9eWl6qmUduhI6CK+vrYtqg16l5ZZGXDF
xEBh+gJwJalLl6EF5fWccMEW/A9WlsrlAWUi2SvVLal1bsyhGN+dnxv03unVpUgH
BwPDIJ645A/axP14iC2TloxzfvKdPeGLL6lUe8NOG72qZ66tjR+7yvlCT0hsdnFr
VpDVdJOgXOC8Qw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:21:31 2026 by rpki-client