Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: tFiajnsZZ8MFZnzBMS7or5XpVKFuJYwvn7cHvi4CxiQ=
Subject key identifier: 05:3F:87:C4:17:E3:F5:01:26:AF:D3:0D:D2:2A:69:DA:AA:CB:50:7E
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 019D37C00C13035D44002ECBCD30F82BD1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:25 +0000
Manifest this update: Sun 29 Mar 2026 04:00:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (hash: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI=)
2: eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa (hash: H/3q1BtGSjB92oCZLbkV7NIIOrg6Uo4fxj4GnvbKnFk=)
3: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: fjetwSG5DvJMVgVTpELBN8qtUPiZPcRXOsE33Cmcc+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:0c:13:03:5d:44:00:2e:cb:cd:30:f8:2b:d1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Mar 29 04:00:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=053f87c417e3f50126afd30dd22a69daaacb507e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:15:e0:44:59:00:ad:df:c8:09:cc:44:47:
e9:a9:0e:e3:27:0b:a3:a9:07:5d:b1:91:d2:d7:31:
66:ad:36:4c:03:9f:88:9d:bc:11:db:18:a6:8b:8d:
37:ec:e7:95:8a:0a:c1:16:5b:e9:74:b2:31:d3:de:
66:8e:af:a3:a7:d6:8c:81:75:ed:38:c2:ba:30:6b:
81:e5:a0:1f:c6:8d:dc:d1:80:04:af:99:14:1a:06:
2d:42:88:b5:00:f1:22:a6:ec:55:3a:dd:ae:a8:26:
77:43:22:67:96:95:ce:f5:2b:fe:3d:1f:0e:31:ef:
a1:61:60:29:ed:56:fd:b5:8c:32:e6:70:dc:d0:d2:
ae:cb:bb:5a:7e:1f:b6:21:a0:ea:df:f5:f6:d2:5b:
d2:e4:94:f1:93:b1:58:98:a4:91:b6:a0:95:26:3d:
f7:e9:59:9b:78:60:a9:71:c1:89:5a:e7:99:d3:51:
aa:96:37:f5:31:86:78:35:64:4f:94:ea:fe:3b:6d:
85:f6:d5:8b:b0:a4:b9:fa:cb:60:7c:10:c3:f3:9a:
0d:36:f9:d9:fc:a4:0d:24:ce:d5:15:04:db:7d:7c:
0c:4e:5d:95:cf:be:ad:4e:e3:ad:27:37:08:d0:3b:
c3:cc:11:b6:67:1b:7a:71:77:f9:fe:df:ac:20:ff:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3F:87:C4:17:E3:F5:01:26:AF:D3:0D:D2:2A:69:DA:AA:CB:50:7E
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1f:08:05:82:31:84:b7:a7:77:da:d6:e2:4d:db:37:5d:45:
c5:26:ce:c0:c2:b4:b1:22:de:1b:fb:74:e2:28:85:17:06:f8:
be:98:39:32:f7:0e:8e:1d:7d:6d:72:81:e4:be:b2:04:ed:74:
5c:23:5d:6e:57:18:70:4d:7f:62:75:d5:34:44:ba:27:50:cd:
55:47:02:22:15:f4:64:01:8d:be:c2:2f:be:b5:de:b8:07:2a:
2c:59:95:34:cf:b3:fc:3f:f1:85:b1:9c:8c:f3:0a:17:64:7b:
39:5c:15:0e:d4:d0:54:9a:51:85:4f:63:5e:5f:ec:ce:51:3d:
8f:cf:47:41:b0:4d:f4:28:fb:0c:49:17:04:be:0c:ac:95:bd:
96:74:d0:17:12:96:34:12:91:84:85:36:68:92:8b:7a:7f:68:
bc:a3:3b:cb:fb:dd:c9:0e:cb:e3:26:a1:f5:f3:68:7d:4a:45:
0f:11:89:48:be:57:dc:6d:29:fb:12:13:f0:ba:d8:cc:bb:b7:
3d:63:71:fe:30:54:df:2b:df:c3:f8:11:1a:44:29:9d:67:41:
f3:1f:df:dd:07:2f:7c:c9:f3:50:00:0a:a6:40:0f:0b:c4:a4:
37:4b:74:3f:9a:94:12:06:bc:a9:fa:fb:d5:7e:45:f1:69:93:
94:4b:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:45 2026 by rpki-client