Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: dgZ4funLleMzkAopszxZOsM5NwClgy2oQvfIO48hE3o=
Subject key identifier: 5F:C5:B2:13:C0:6B:CD:B4:86:0E:03:D6:F4:84:AE:A8:CC:FB:D1:EC
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 01A03A4C49CB566478F501BCE800A11C9BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 1A20
Signing time: Tue 25 Aug 2026 19:01:13 +0000
Manifest this update: Tue 25 Aug 2026 19:01:13 +0000
Manifest next update: Wed 26 Aug 2026 19:01:13 +0000
Files and hashes: 1: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (hash: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI=)
2: eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa (hash: H/3q1BtGSjB92oCZLbkV7NIIOrg6Uo4fxj4GnvbKnFk=)
3: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: FcbGvnQ2SepQ/lni3z/eeZmAUQKDxC6/oxbNzbiZbY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:4c:49:cb:56:64:78:f5:01:bc:e8:00:a1:1c:9b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Aug 25 19:01:13 2026 GMT
Not After : Aug 26 19:01:13 2026 GMT
Subject: CN=5fc5b213c06bcdb4860e03d6f484aea8ccfbd1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fb:f0:b5:5b:66:d3:12:67:f6:40:f7:a4:ce:
f6:4e:e1:64:99:38:45:a3:3f:80:eb:e8:53:da:66:
77:f8:a0:24:e1:36:45:31:2e:5a:31:b7:c2:80:cd:
98:5f:ec:8c:7d:f7:45:a8:0c:98:bc:98:b6:6d:3a:
f0:c6:e6:c3:a2:08:19:bf:95:a0:9e:59:95:fa:68:
3d:37:c7:3d:a8:f2:b2:bd:95:79:13:a0:cb:5b:81:
e9:89:ad:72:71:54:98:aa:21:e2:df:29:e5:06:14:
5c:b3:68:3e:e7:7c:5e:a2:7a:27:be:4e:b7:48:f1:
5e:c7:35:d1:c3:fc:8d:35:e2:41:91:3a:e4:10:27:
3d:b8:d9:d4:ce:e3:93:70:d0:46:0a:4f:bd:ab:c2:
02:62:6f:b0:6b:59:f2:8f:0f:0b:cc:29:c3:02:5f:
9d:c2:b8:96:87:5b:8d:b3:7f:7d:b0:49:d3:d4:37:
d7:73:55:29:8b:91:02:be:c6:3e:d0:ed:06:33:c0:
ae:5f:b2:0f:05:22:2e:ae:b2:96:f3:73:b1:49:d8:
1f:c2:07:14:5a:48:78:ef:74:b9:4b:3e:42:8e:f4:
bf:b0:94:40:b9:c5:a9:ca:c0:41:f2:66:f0:e7:3d:
95:fa:2a:00:8f:74:99:b7:85:bd:94:18:ce:99:5b:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C5:B2:13:C0:6B:CD:B4:86:0E:03:D6:F4:84:AE:A8:CC:FB:D1:EC
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4c:7a:49:2a:0e:27:45:ec:00:63:a2:b7:83:04:60:28:b4:
12:12:02:78:26:c3:0c:db:d8:e0:d3:93:7b:01:0d:f2:01:99:
b9:e8:a6:08:7f:d3:2d:a0:1a:b1:90:66:cc:8c:75:e6:3b:cf:
aa:38:13:b6:54:98:14:d4:c1:d7:18:83:e4:0a:13:fc:f8:b2:
00:df:dc:9f:a7:05:54:f7:f5:88:cf:5d:b7:55:8e:3e:10:78:
41:05:c9:f3:48:b5:2a:d8:2f:32:f5:5a:b3:0d:5e:27:15:46:
19:db:b0:a1:9a:9c:05:33:63:8b:ef:58:1d:5c:32:74:2e:00:
0c:f4:08:7e:28:75:52:05:73:b7:22:6c:1f:b5:a1:5e:17:e5:
18:15:09:22:c5:9a:6a:f9:d1:0c:c0:27:0e:00:09:96:03:d2:
92:12:9c:b0:26:b1:8d:f7:8c:e9:c2:49:d1:cb:4c:a8:16:51:
e0:2d:29:58:21:9c:38:42:53:7c:65:3b:44:d5:a8:69:a0:a9:
d9:31:94:55:61:95:15:fb:66:74:15:52:7f:43:29:2a:14:64:
91:db:8b:5d:54:26:ff:1c:89:28:36:ae:65:e4:a6:be:24:ae:
97:90:b2:87:2b:aa:20:3f:76:b6:61:c7:28:08:02:57:b7:bb:
6b:81:9d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 04:55:53 2026 by rpki-client