Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
File: qiK__S1aBw4uyKP8RueRGvlv6q0.mft (raw, json)
Hash identifier: fiNV3JShQqYmsOY9/a1uNbj07n/rXbf21hzSbL302j4=
Subject key identifier: 55:9B:11:42:C7:6E:85:CF:2B:03:33:06:F4:BC:F0:9C:9C:52:C4:D6
Authority key identifier: AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
Certificate issuer: /CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Certificate serial: 019D29CE11F36A0D515605D215049847DECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:01:04 +0000
Manifest this update: Thu 26 Mar 2026 11:01:04 +0000
Manifest next update: Fri 27 Mar 2026 11:01:04 +0000
Files and hashes: 1: 7YANPaBOudIhma7IYGlIsUfJssM.roa (hash: fZcCCTn32h40SxZnIf2kzDNVc0kaioy+LsHW2s0itcI=)
2: qiK__S1aBw4uyKP8RueRGvlv6q0.crl (hash: DSvWcgE+zjztLVDE+baF440Qz9rNPZB5Q5ms2nj2jmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:11:f3:6a:0d:51:56:05:d2:15:04:98:47:de:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Validity
Not Before: Mar 26 11:01:04 2026 GMT
Not After : Mar 27 11:01:04 2026 GMT
Subject: CN=559b1142c76e85cf2b033306f4bcf09c9c52c4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:83:29:6d:b5:bc:84:e9:c5:ce:37:5d:f5:
31:6d:9d:94:df:f9:80:ef:06:5e:72:c0:36:d1:40:
91:4c:b1:b0:c6:ea:46:eb:39:e0:67:9b:c8:32:a9:
91:79:f7:83:14:3c:79:9e:9e:22:48:b8:0a:76:67:
5a:07:0e:66:98:7c:1d:8f:69:92:72:55:d5:75:a8:
08:8b:0b:13:7f:fa:f0:65:7e:76:db:24:fd:4a:87:
c9:29:25:f8:44:15:55:65:0e:04:64:23:ce:3c:2e:
f9:24:25:b3:c5:1f:1e:54:52:26:78:85:ad:35:e2:
5f:f2:5e:4a:d4:c1:f4:1b:d5:85:ed:b6:58:b9:35:
80:7b:f7:8c:ae:e6:d9:0e:df:53:7e:40:e8:60:4f:
8c:2a:f6:13:48:e3:9d:9a:0e:8c:b3:84:b0:ae:b9:
3f:1e:3e:e1:e2:88:7a:da:f9:8c:c6:b0:a1:31:e0:
ca:ed:32:71:04:80:81:40:b6:62:5e:35:31:df:f9:
f9:46:b8:77:a8:fc:02:f1:1d:b9:75:3e:e9:3c:7b:
28:20:6f:57:4f:36:31:29:ff:bd:c5:d0:82:6a:3f:
77:93:a5:15:4c:b0:05:5a:a0:30:bb:92:f8:c2:f2:
46:f8:2e:53:c3:00:56:3f:0e:1b:cb:c5:a1:19:fe:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9B:11:42:C7:6E:85:CF:2B:03:33:06:F4:BC:F0:9C:9C:52:C4:D6
X509v3 Authority Key Identifier:
keyid:AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8a:f6:ff:55:67:7b:ab:b7:ba:6a:aa:bf:87:a6:9e:f2:f6:
31:f2:13:29:75:88:2b:ac:cb:0b:19:42:b6:21:9d:d0:1a:ea:
4c:53:65:db:96:bf:34:61:3a:dc:68:fa:5d:83:da:14:0b:4f:
e0:47:5a:9e:0b:d5:44:0c:24:1e:2a:eb:6b:bd:e0:c2:a9:ea:
f3:77:73:f6:36:0c:6d:9b:52:9f:b4:0f:c0:96:d2:c6:27:c8:
4a:8a:55:83:c5:74:a0:6f:ee:dc:b7:05:90:28:a2:35:37:ef:
20:c4:76:0d:c0:f9:fb:6d:ff:04:86:d4:1b:e1:8d:b9:fb:fa:
23:46:5c:5b:1a:90:27:35:96:3e:7d:68:53:4b:8a:56:7a:ed:
1b:18:c6:da:97:80:dc:3a:50:58:b6:fb:80:a5:c9:07:3e:81:
e7:8c:8f:54:76:42:3a:cc:22:c9:c2:7c:b5:d8:00:68:43:58:
4a:b5:a7:7e:58:6b:57:66:ee:48:92:81:eb:a7:2c:f3:55:4f:
05:8a:14:7c:b1:6d:61:d2:bf:d5:dc:0c:fa:0c:ac:84:1d:ce:
75:fc:a5:f1:fd:b6:0f:22:0f:5c:2f:ad:88:6a:d5:fb:97:4a:
52:55:88:b0:64:ec:31:12:71:f8:fd:bd:7b:49:f2:b4:6b:74:
19:de:69:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:55 2026 by rpki-client