Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: viZsK6pkNZYg0A5p80c3ctsCczbSxfVlZh3ThFeHu5Y=
Subject key identifier: 9A:69:F7:05:DC:D1:C4:56:95:3F:D9:22:69:8D:82:E4:DD:0F:6A:0B
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 019F10E5913D81946138F64086B444811DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 01:01:48 +0000
Manifest this update: Mon 29 Jun 2026 01:01:48 +0000
Manifest next update: Tue 30 Jun 2026 01:01:48 +0000
Files and hashes: 1: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (hash: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI=)
2: eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa (hash: H/3q1BtGSjB92oCZLbkV7NIIOrg6Uo4fxj4GnvbKnFk=)
3: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: 0fMOkszfuMmbUk+3ZI6QMRljpwO0ouQSYFbsjrVcesY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:91:3d:81:94:61:38:f6:40:86:b4:44:81:1d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Jun 29 01:01:48 2026 GMT
Not After : Jun 30 01:01:48 2026 GMT
Subject: CN=9a69f705dcd1c456953fd922698d82e4dd0f6a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:8c:fe:3f:83:45:b9:d0:b0:f9:d4:ff:6c:
b2:81:1e:69:34:32:6c:d4:98:4a:76:fe:b4:80:9e:
d0:e3:b3:03:54:f3:0c:85:3c:99:96:45:57:17:93:
75:4b:ea:7f:da:3e:2e:c0:d6:56:12:01:0e:2c:33:
fe:29:86:d9:25:fb:56:1d:f8:20:c4:9a:c5:79:58:
9d:4e:bb:98:ed:25:82:f6:f5:99:05:01:37:da:90:
ee:71:c8:5e:3e:59:77:34:5c:72:14:33:f6:fa:8d:
9f:3a:71:fe:9b:51:80:91:fb:37:c4:d9:d5:65:ec:
2f:8e:61:e0:bf:a5:69:74:63:3c:63:5a:c1:7b:d1:
fe:cb:ed:62:de:31:26:20:41:d7:5f:3a:ff:46:d3:
f7:66:48:36:f3:40:9b:7d:44:8a:47:82:d5:cb:81:
40:b8:b5:5c:64:8f:52:5c:f4:5c:31:fe:bd:4e:d3:
25:b1:9e:b2:81:01:71:dd:4c:67:19:d2:2d:15:c3:
77:f2:da:1b:b4:82:ac:21:1e:17:24:e7:d6:0f:b6:
dc:27:c4:f9:01:b2:d0:ee:e9:d5:5f:58:a0:94:dc:
ce:f7:a9:ff:8a:be:c0:4c:aa:14:22:f8:79:74:e8:
44:ae:da:c4:86:84:0a:fb:56:04:c5:26:dd:62:2c:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:69:F7:05:DC:D1:C4:56:95:3F:D9:22:69:8D:82:E4:DD:0F:6A:0B
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:84:ba:7e:50:56:23:36:05:27:f0:c4:3f:68:6e:19:c2:b8:
78:9c:f7:a2:26:23:c6:57:de:3a:63:21:f7:55:24:93:79:c8:
1b:b3:73:c5:43:fa:c1:58:ac:33:d7:41:f5:55:29:5b:bc:50:
3b:e3:cc:27:5d:31:fb:a8:af:0a:86:6d:42:60:e6:91:32:84:
7a:e3:67:c3:2a:f6:b0:79:7f:5b:2d:9d:55:67:f9:34:44:04:
92:87:58:d3:96:50:e7:c1:b6:a9:14:ed:71:b0:1f:3c:52:1f:
3d:5d:e5:52:4d:30:6b:96:0b:85:c7:75:35:06:d6:96:b7:34:
9d:17:0f:6b:cf:77:76:4a:ff:74:b2:be:78:f2:fb:01:73:55:
cf:84:e2:5a:ca:5f:8e:65:20:bf:b5:9c:b1:63:fc:5a:91:b8:
ea:ba:c6:3e:26:43:3c:38:71:0d:23:4e:95:19:06:a6:d8:71:
d2:6e:e9:b2:6f:9c:df:db:a1:28:6b:fb:e8:8e:a4:f7:de:60:
27:8f:7e:7b:74:ac:4a:26:5f:58:ba:55:92:7d:29:59:a7:5a:
72:6b:99:cd:6a:95:0a:0f:6c:13:8f:c3:63:09:f9:b4:5c:e2:
4c:41:29:e3:07:55:92:e4:d6:b6:43:99:bc:48:e3:8c:a9:d1:
a8:ed:8b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:46 2026 by rpki-client