Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
File: qiK__S1aBw4uyKP8RueRGvlv6q0.mft (raw, json)
Hash identifier: 5tLSy6mAzLO+sj6XgOvCJDjcnReG7DpB4PPGlGdZbxM=
Subject key identifier: 48:00:1A:8A:6A:FB:75:3D:A0:45:EB:CC:EF:DC:62:EA:17:3C:50:9A
Authority key identifier: AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
Certificate issuer: /CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Certificate serial: 0199FB0ECC041C2A50034D4484D06D4BF31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 06:01:14 +0000
Manifest this update: Sun 19 Oct 2025 06:01:14 +0000
Manifest next update: Mon 20 Oct 2025 06:01:14 +0000
Files and hashes: 1: eo9SLFo6ECy5DSd_dzNUwxtWG90.roa (hash: rwEptqLCRKuvmeB6qGhTimOttQv2kDracTxXGRGGlyc=)
2: qiK__S1aBw4uyKP8RueRGvlv6q0.crl (hash: omb0VsWO/p/3KRuiE/vpAdDsJc4xkzmCfA/G4EfENL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:cc:04:1c:2a:50:03:4d:44:84:d0:6d:4b:f3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Validity
Not Before: Oct 19 06:01:14 2025 GMT
Not After : Oct 20 06:01:14 2025 GMT
Subject: CN=48001a8a6afb753da045ebccefdc62ea173c509a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:fe:19:49:25:a8:51:a4:35:08:b9:a9:e5:
45:19:58:64:e9:c2:30:1a:36:6e:3d:d4:59:b2:ad:
37:af:ba:77:c4:9d:3f:a6:a6:4a:af:b2:01:77:bf:
24:9e:e1:1e:1d:41:70:db:74:3a:e6:e8:0e:0b:f4:
3e:73:ec:7e:7f:db:ae:7a:72:64:a4:dc:38:68:b5:
28:14:0a:54:94:8a:74:0f:b4:78:a3:c4:77:b4:44:
e2:e4:72:c7:6a:25:12:6f:b8:5d:62:ef:50:31:ed:
75:59:a9:0f:d1:fe:1e:18:12:0b:47:9e:85:72:88:
b9:69:fe:00:07:ab:21:cb:6f:d7:b2:0c:e2:d7:14:
96:78:ef:4d:1d:96:02:a1:28:46:ee:54:77:6b:50:
dd:2e:dc:48:3e:10:d9:9f:8a:52:f2:ec:48:0f:d4:
31:56:bd:f7:73:22:4a:28:ab:2e:a4:f9:5a:5e:de:
b8:b8:5d:99:3c:06:39:35:cd:d7:a4:70:44:b6:a5:
e8:db:0a:74:05:ea:59:a8:c6:e2:e4:cf:45:80:0f:
55:b6:63:2d:6e:54:d3:3b:51:79:1c:01:98:84:8a:
4a:4c:f0:02:85:a8:7f:32:28:41:32:da:07:04:55:
6b:45:1a:a8:6a:65:9c:95:e3:94:d4:7c:6f:5f:e5:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:00:1A:8A:6A:FB:75:3D:A0:45:EB:CC:EF:DC:62:EA:17:3C:50:9A
X509v3 Authority Key Identifier:
keyid:AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ff:28:f9:06:c8:b9:e9:36:4d:8e:d8:e1:7c:6e:0a:ce:95:
47:98:fe:ea:b1:2d:d3:47:49:a9:10:28:03:c2:10:dd:92:31:
5c:72:60:52:6a:a6:1b:70:1f:46:b3:26:3d:4b:f8:53:b9:18:
2c:76:63:76:7f:2d:f6:a4:37:ce:8a:42:31:57:25:14:35:26:
16:53:9e:01:ff:de:a2:d2:26:82:92:b7:2a:c3:7f:f8:05:0f:
52:e8:94:e4:b4:01:4a:74:c5:18:5d:b8:b1:e2:0b:c5:1c:26:
c6:e1:bf:e8:14:e8:e6:00:af:17:46:f5:00:a6:22:f0:16:13:
39:37:56:6b:6c:d5:6c:2f:08:c5:3f:dd:29:48:fd:8c:70:20:
22:5d:b6:b3:11:e6:f8:5a:08:86:da:5d:c4:9a:37:47:13:94:
94:bc:ba:3e:ff:49:b3:3d:cf:55:9b:df:a6:be:3b:65:5f:5e:
5d:4a:e6:36:89:10:5a:dd:d1:98:d2:14:e8:a0:9f:e9:3e:5d:
e6:ff:09:72:d9:ce:6b:de:02:37:0d:cf:41:70:c3:7d:3b:de:
86:3d:db:34:59:16:72:d4:60:40:48:c7:49:5f:7d:b3:dd:50:
01:5c:c4:fd:eb:96:0b:86:3e:55:6c:a4:5e:c0:e6:36:ff:d6:
c1:73:ec:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DswEHCpQA01EhNBtS/MbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMjJiZmZkMmQ1YTA3MGUyZWM4YTNmYzQ2ZTc5MTFhZjk2
ZmVhYWQwHhcNMjUxMDE5MDYwMTE0WhcNMjUxMDIwMDYwMTE0WjAzMTEwLwYDVQQD
Eyg0ODAwMWE4YTZhZmI3NTNkYTA0NWViY2NlZmRjNjJlYTE3M2M1MDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGf+GUklqFGkNQi5qeVFGVhk6cIw
GjZuPdRZsq03r7p3xJ0/pqZKr7IBd78knuEeHUFw23Q65ugOC/Q+c+x+f9uuenJk
pNw4aLUoFApUlIp0D7R4o8R3tETi5HLHaiUSb7hdYu9QMe11WakP0f4eGBILR56F
coi5af4AB6shy2/Xsgzi1xSWeO9NHZYCoShG7lR3a1DdLtxIPhDZn4pS8uxID9Qx
Vr33cyJKKKsupPlaXt64uF2ZPAY5Nc3XpHBEtqXo2wp0BepZqMbi5M9FgA9VtmMt
blTTO1F5HAGYhIpKTPAChah/MihBMtoHBFVrRRqoamWcleOU1HxvX+VHnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgAGopq+3U9oEXrzO/cYuoXPFCaMB8GA1UdIwQY
MBaAFKoiv/0tWgcOLsij/EbnkRr5b+qtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlLX19TMWFCdzR1eUtQOFJ1ZVJHdmx2NnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84NzhkMGMtMjIwMC00YzI3LTk0YzAt
NWM2ZTE5ZDA3MGU1LzEvcWlLX19TMWFCdzR1eUtQOFJ1ZVJHdmx2NnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84NzhkMGMtMjIwMC00YzI3LTk0YzAtNWM2ZTE5ZDA3MGU1
LzEvcWlLX19TMWFCdzR1eUtQOFJ1ZVJHdmx2NnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATP8o+QbI
uek2TY7Y4XxuCs6VR5j+6rEt00dJqRAoA8IQ3ZIxXHJgUmqmG3AfRrMmPUv4U7kY
LHZjdn8t9qQ3zopCMVclFDUmFlOeAf/eotImgpK3KsN/+AUPUuiU5LQBSnTFGF24
seILxRwmxuG/6BTo5gCvF0b1AKYi8BYTOTdWa2zVbC8IxT/dKUj9jHAgIl22sxHm
+FoIhtpdxJo3RxOUlLy6Pv9Jsz3PVZvfpr47ZV9eXUrmNokQWt3RmNIU6KCf6T5d
5v8JctnOa94CNw3PQXDDfTvehj3bNFkWctRgQEjHSV99s91QAVzE/euWC4Y+VWyk
XsDmNv/WwXPs0A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:04 2025 by rpki-client