Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: LHd/RCr0ww+8MISMDnoCc74ALVbKeW7WFR9hJkUD3bc=
Subject key identifier: 64:1A:71:12:45:44:CA:2E:00:11:71:54:54:82:A2:D8:11:87:86:18
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 019E29272D8ED48114295E66705B56AA2BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 190E
Signing time: Fri 15 May 2026 01:01:33 +0000
Manifest this update: Fri 15 May 2026 01:01:33 +0000
Manifest next update: Sat 16 May 2026 01:01:33 +0000
Files and hashes: 1: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (hash: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI=)
2: eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa (hash: H/3q1BtGSjB92oCZLbkV7NIIOrg6Uo4fxj4GnvbKnFk=)
3: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: 8CLY2ZtH1RDOKMoCcTxRIsqnuDC1Xy+bul8wc0v3pds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:27:2d:8e:d4:81:14:29:5e:66:70:5b:56:aa:2b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: May 15 01:01:33 2026 GMT
Not After : May 16 01:01:33 2026 GMT
Subject: CN=641a71124544ca2e001171545482a2d811878618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:99:c0:7d:08:8c:f3:6f:21:ca:c0:be:22:
90:35:10:ac:b3:15:ca:32:00:6b:ce:03:85:02:bd:
e6:47:90:cd:5d:8e:05:4a:d1:5c:3c:2e:da:22:fe:
a7:ef:f8:4d:72:71:25:0e:65:f5:fc:fc:85:aa:21:
bc:14:69:62:0d:0e:6c:27:9a:ba:ee:b0:0f:e7:f2:
d9:3d:6d:56:7d:9e:5d:a7:3f:64:4b:85:16:76:4e:
04:1b:2d:e6:31:ac:38:15:dc:9e:bb:c6:b5:5d:5f:
5f:5c:75:23:4f:24:c3:f8:85:dd:d8:22:90:0f:39:
4a:0a:3c:5c:8e:8c:2f:20:a9:ee:b3:2a:e9:18:f5:
cb:79:83:97:96:d3:fa:3a:fe:78:be:82:fa:76:f4:
ca:00:af:33:10:2b:28:cf:65:21:44:fa:db:5d:75:
20:6f:2a:c7:13:6b:b6:e2:db:ae:ca:0d:c7:e2:43:
da:86:7e:0b:0a:1a:00:03:a7:5b:b1:48:9a:8a:74:
93:5f:0e:96:ac:ee:b8:86:9e:8a:0b:ab:b6:9b:9b:
98:19:90:f7:1e:0d:a0:17:d5:84:6c:76:9f:e8:eb:
cb:71:ac:d0:f4:d1:f1:75:c4:0d:1d:a7:bf:83:cd:
2b:83:79:9a:85:62:3c:8c:0f:ec:7f:ff:78:dc:58:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1A:71:12:45:44:CA:2E:00:11:71:54:54:82:A2:D8:11:87:86:18
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1a:74:0e:6c:5f:7e:53:3c:9a:77:55:55:26:6b:e2:9c:03:
87:50:b6:ba:ab:14:1d:8e:2c:8f:ca:2c:81:99:5b:3a:10:52:
da:e7:17:f2:1f:54:52:4d:9c:3e:59:38:2e:9d:fc:2f:56:49:
62:69:9e:2b:06:78:10:e8:88:76:3a:cd:28:3c:81:02:bb:30:
62:5d:d9:1a:33:02:0c:c3:54:af:6b:70:2d:0e:d1:8b:92:b1:
95:74:99:26:1a:fe:bd:57:7b:a1:52:4a:79:28:85:fa:0b:01:
3a:d2:a9:7d:7c:53:57:be:59:7f:29:18:02:fc:77:7d:6b:7d:
6d:c9:f5:d4:f7:dc:e9:02:cf:27:3e:27:60:8c:27:e9:86:62:
00:ee:e7:6b:89:ad:6e:30:69:c0:81:da:fb:24:cc:48:28:ee:
6b:eb:36:38:64:62:dc:a0:17:e8:4b:e4:82:f5:0c:d5:e0:52:
9f:3a:b5:34:dd:15:81:9d:e1:3a:bc:ae:f6:1c:e1:a6:49:7c:
f7:d0:6e:75:e7:53:69:5d:ae:3f:b6:1b:7b:26:41:2d:c1:98:
c8:9f:99:c5:37:d6:53:28:af:c4:6a:94:85:85:98:b3:93:20:
3e:6a:24:30:fe:23:8e:4c:74:bb:a4:43:f2:a2:6c:90:4d:99:
12:a4:2a:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pJy2O1IEUKV5mcFtWqiulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ODQ3ZjY0NTY3ZTRhYTRhZDVjYjdmYzIyZjIyZGY0ZTJi
YzY5NzgwHhcNMjYwNTE1MDEwMTMzWhcNMjYwNTE2MDEwMTMzWjAzMTEwLwYDVQQD
Eyg2NDFhNzExMjQ1NDRjYTJlMDAxMTcxNTQ1NDgyYTJkODExODc4NjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIWZwH0IjPNvIcrAviKQNRCssxXK
MgBrzgOFAr3mR5DNXY4FStFcPC7aIv6n7/hNcnElDmX1/PyFqiG8FGliDQ5sJ5q6
7rAP5/LZPW1WfZ5dpz9kS4UWdk4EGy3mMaw4Fdyeu8a1XV9fXHUjTyTD+IXd2CKQ
DzlKCjxcjowvIKnusyrpGPXLeYOXltP6Ov54voL6dvTKAK8zECsoz2UhRPrbXXUg
byrHE2u24tuuyg3H4kPahn4LChoAA6dbsUiainSTXw6WrO64hp6KC6u2m5uYGZD3
Hg2gF9WEbHaf6OvLcazQ9NHxdcQNHae/g80rg3mahWI8jA/sf/943FjrTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQacRJFRMouABFxVFSCotgRh4YYMB8GA1UdIwQY
MBaAFKiEf2RWfkqkrVy3/CLyLfTivGl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQt
MTAyNTU3MThhMTg1LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQtMTAyNTU3MThhMTg1
LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRp0Dmxf
flM8mndVVSZr4pwDh1C2uqsUHY4sj8osgZlbOhBS2ucX8h9UUk2cPlk4Lp38L1ZJ
YmmeKwZ4EOiIdjrNKDyBArswYl3ZGjMCDMNUr2twLQ7Ri5KxlXSZJhr+vVd7oVJK
eSiF+gsBOtKpfXxTV75ZfykYAvx3fWt9bcn11Pfc6QLPJz4nYIwn6YZiAO7na4mt
bjBpwIHa+yTMSCjua+s2OGRi3KAX6EvkgvUM1eBSnzq1NN0VgZ3hOryu9hzhpkl8
99BudedTaV2uP7YbeyZBLcGYyJ+ZxTfWUyivxGqUhYWYs5MgPmokMP4jjkx0u6RD
8qJskE2ZEqQqIQ==
-----END CERTIFICATE-----
Generated at Fri May 15 06:22:36 2026 by rpki-client