Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
File: qiK__S1aBw4uyKP8RueRGvlv6q0.mft (raw, json)
Hash identifier: bHUzGsRDL+qdSv5PzynPmVyQeL+Q8r/rIFMZLDcsxBY=
Subject key identifier: BF:01:90:6E:27:F8:A4:71:80:D2:78:48:93:08:0D:2C:C6:29:F2:D3
Authority key identifier: AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
Certificate issuer: /CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Certificate serial: 01A17C6057FAC3F432FDDBAC3D88F2A3E6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 08:00:51 +0000
Manifest this update: Tue 27 Oct 2026 08:00:51 +0000
Manifest next update: Wed 28 Oct 2026 08:00:51 +0000
Files and hashes: 1: 7YANPaBOudIhma7IYGlIsUfJssM.roa (hash: fZcCCTn32h40SxZnIf2kzDNVc0kaioy+LsHW2s0itcI=)
2: qiK__S1aBw4uyKP8RueRGvlv6q0.crl (hash: IMpcFrrxKHkcI7Sq0F0HGdslhnIhxrCAbZU97asUjp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:57:fa:c3:f4:32:fd:db:ac:3d:88:f2:a3:e6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Validity
Not Before: Oct 27 08:00:51 2026 GMT
Not After : Oct 28 08:00:51 2026 GMT
Subject: CN=bf01906e27f8a47180d2784893080d2cc629f2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:9b:f7:a4:86:75:ea:ba:57:fd:51:5f:93:
f9:3a:0a:89:78:c4:f4:15:11:33:21:b7:ba:05:b7:
73:91:2a:c3:e0:24:01:c1:c3:e3:5f:42:16:19:36:
26:14:c1:45:80:8e:35:a1:4a:e4:ab:e4:22:d0:8c:
95:ff:ab:32:8a:9c:8f:63:85:81:4e:e1:13:46:47:
94:2b:f8:34:5c:d9:08:67:8c:1e:d7:dc:25:8f:04:
5c:45:d1:68:ad:5a:2e:9a:f8:eb:be:4f:37:b0:39:
90:e1:17:47:08:29:8b:d1:33:f9:13:4c:09:31:11:
55:c5:72:fb:e5:13:7f:8d:f0:1d:87:8a:52:f7:31:
e8:a9:94:16:7c:85:2d:84:3c:bb:82:d0:cc:fa:ea:
7a:d2:37:a6:d3:23:5d:28:9d:44:c4:81:f4:3f:3f:
d2:7c:51:d8:90:8f:1f:a2:55:4f:37:b6:a0:ab:1d:
f0:a1:a1:8a:fb:ca:b9:6b:a4:62:a3:85:ac:58:f5:
8b:4f:20:11:c5:cd:75:d3:d1:5a:e5:e9:41:10:33:
c7:2d:67:e8:47:ce:7c:b7:f4:48:e0:6b:be:5d:aa:
b8:c7:c1:1f:53:15:29:5d:7d:01:37:f7:f6:74:8b:
5d:fb:f2:3f:bb:21:6e:ac:5f:e2:16:71:c0:ba:e0:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:01:90:6E:27:F8:A4:71:80:D2:78:48:93:08:0D:2C:C6:29:F2:D3
X509v3 Authority Key Identifier:
keyid:AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f8:74:2b:bc:f6:eb:64:0a:f6:37:bf:78:41:fd:8d:78:c0:
db:c1:61:62:ec:ce:60:52:17:dd:79:60:58:64:51:b4:a5:9d:
0e:fd:1e:ad:ea:64:b2:47:ec:69:bd:3c:13:3b:88:b9:71:f6:
ad:e4:83:04:53:a9:83:ab:e3:0c:ec:7b:3f:e9:4b:39:e8:df:
42:7b:a4:c6:f6:7b:c6:87:9c:83:d3:2f:f6:8c:9c:e3:32:ef:
74:63:3f:c3:56:17:68:8a:ea:08:16:2d:0a:1c:e0:9d:87:e9:
17:97:fd:c0:49:b3:1a:44:eb:e7:18:42:b5:5a:7b:92:74:46:
4c:93:0c:35:ec:34:67:ba:ee:d6:b7:89:92:86:93:5d:07:3a:
86:3a:4e:37:cc:b4:4a:64:ed:a4:7e:46:69:7e:4b:4a:4d:e2:
5d:c3:76:86:ae:21:d8:52:fe:24:0f:a1:76:c1:42:a0:cb:d5:
c5:f7:9a:75:70:a8:78:ab:7b:6e:25:e1:da:c3:63:6a:83:0a:
38:8a:2b:f2:12:77:cf:cb:27:c5:e5:47:ab:20:a6:2c:1a:8f:
9e:a4:a9:26:e7:f6:a4:8c:a8:35:ed:5e:35:ee:33:fb:de:db:
e1:94:97:64:cc:aa:f1:2f:47:be:45:30:55:73:a5:05:7e:fa:
0f:b0:39:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8YFf6w/Qy/dusPYjyo+a8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMjJiZmZkMmQ1YTA3MGUyZWM4YTNmYzQ2ZTc5MTFhZjk2
ZmVhYWQwHhcNMjYxMDI3MDgwMDUxWhcNMjYxMDI4MDgwMDUxWjAzMTEwLwYDVQQD
EyhiZjAxOTA2ZTI3ZjhhNDcxODBkMjc4NDg5MzA4MGQyY2M2MjlmMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Sb96SGdeq6V/1RX5P5OgqJeMT0
FREzIbe6BbdzkSrD4CQBwcPjX0IWGTYmFMFFgI41oUrkq+Qi0IyV/6syipyPY4WB
TuETRkeUK/g0XNkIZ4we19wljwRcRdForVoumvjrvk83sDmQ4RdHCCmL0TP5E0wJ
MRFVxXL75RN/jfAdh4pS9zHoqZQWfIUthDy7gtDM+up60jem0yNdKJ1ExIH0Pz/S
fFHYkI8folVPN7agqx3woaGK+8q5a6Rio4WsWPWLTyARxc1109Fa5elBEDPHLWfo
R858t/RI4Gu+Xaq4x8EfUxUpXX0BN/f2dItd+/I/uyFurF/iFnHAuuA8dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8BkG4n+KRxgNJ4SJMIDSzGKfLTMB8GA1UdIwQY
MBaAFKoiv/0tWgcOLsij/EbnkRr5b+qtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlLX19TMWFCdzR1eUtQOFJ1ZVJHdmx2NnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84NzhkMGMtMjIwMC00YzI3LTk0YzAt
NWM2ZTE5ZDA3MGU1LzEvcWlLX19TMWFCdzR1eUtQOFJ1ZVJHdmx2NnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84NzhkMGMtMjIwMC00YzI3LTk0YzAtNWM2ZTE5ZDA3MGU1
LzEvcWlLX19TMWFCdzR1eUtQOFJ1ZVJHdmx2NnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfh0K7z2
62QK9je/eEH9jXjA28FhYuzOYFIX3XlgWGRRtKWdDv0erepkskfsab08EzuIuXH2
reSDBFOpg6vjDOx7P+lLOejfQnukxvZ7xoecg9Mv9oyc4zLvdGM/w1YXaIrqCBYt
ChzgnYfpF5f9wEmzGkTr5xhCtVp7knRGTJMMNew0Z7ru1reJkoaTXQc6hjpON8y0
SmTtpH5GaX5LSk3iXcN2hq4h2FL+JA+hdsFCoMvVxfeadXCoeKt7biXh2sNjaoMK
OIor8hJ3z8snxeVHqyCmLBqPnqSpJuf2pIyoNe1eNe4z+97b4ZSXZMyq8S9HvkUw
VXOlBX76D7A50Q==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:44:37 2026 by rpki-client