Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: o6IYjNW5UmeUpVbV+npvcjP1vv8Ogsz0UMJg3xVVubk=
Subject key identifier: 03:36:4A:05:4C:0B:23:3C:F2:8E:02:80:BF:84:85:2D:6D:B7:01:BD
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 01A19BB4CDD6F90F747A9C0D20C9816F1D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 1AD7
Signing time: Mon 02 Nov 2026 10:01:19 +0000
Manifest this update: Mon 02 Nov 2026 10:01:19 +0000
Manifest next update: Tue 03 Nov 2026 10:01:19 +0000
Files and hashes: 1: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (hash: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI=)
2: eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa (hash: H/3q1BtGSjB92oCZLbkV7NIIOrg6Uo4fxj4GnvbKnFk=)
3: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: GDHtmAez4Zy0dcVUNr/lCmsQ2Kswoq2NOcT8lPLjHXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:b4:cd:d6:f9:0f:74:7a:9c:0d:20:c9:81:6f:1d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Nov 2 10:01:19 2026 GMT
Not After : Nov 3 10:01:19 2026 GMT
Subject: CN=03364a054c0b233cf28e0280bf84852d6db701bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:d1:33:c1:61:1b:d8:14:c2:4f:ef:28:9a:
4e:e8:b8:46:e1:f0:4b:22:29:a1:28:c3:ff:f3:5f:
b5:67:8b:94:8d:b9:db:38:5a:24:ca:4b:ea:c2:7e:
d2:93:7b:37:91:67:ed:18:be:7c:7a:e9:af:18:86:
ee:e1:a3:bf:fa:fd:71:22:4f:3d:c1:a1:ab:6f:b9:
97:a3:19:76:d3:08:47:7a:de:3c:cf:bd:ef:43:07:
f2:86:be:4e:3f:8a:13:7a:4c:5b:e2:f6:15:c8:7b:
b9:61:93:52:6f:f4:1e:76:b8:61:47:c2:1e:af:69:
28:8c:a1:82:7c:56:78:7a:bb:f1:a6:88:c8:d8:ca:
62:a6:a0:58:17:28:e0:25:6c:8d:e2:d4:c1:87:d2:
9c:63:18:2e:1a:92:21:95:bb:c3:ea:35:35:ff:37:
7a:b4:07:38:c5:17:a7:da:46:2e:aa:b3:44:3f:ed:
44:d8:92:d9:de:2b:e8:7a:8c:47:91:18:1a:48:8f:
17:fb:3b:b5:11:c6:65:e4:e7:33:ac:66:99:67:2c:
1e:6e:df:ec:bb:41:0e:c7:d0:06:91:b1:da:3e:ff:
4e:25:41:1c:7f:f8:01:35:c1:3c:b7:e7:2c:91:2d:
de:4c:5a:a3:1c:58:5a:93:57:d9:bd:4b:bf:1d:54:
96:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:4A:05:4C:0B:23:3C:F2:8E:02:80:BF:84:85:2D:6D:B7:01:BD
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:84:c7:94:94:5d:0f:72:c7:e1:5f:09:9e:d8:24:b8:62:d0:
a7:70:3e:3d:96:11:21:d1:65:84:f2:00:a4:20:4a:4d:46:01:
20:ea:ab:9c:84:d7:9c:f6:53:10:e1:72:92:6e:7e:44:9a:0a:
92:25:b4:e2:d5:06:89:0d:ce:1d:cc:5b:c4:f3:ad:9c:08:bf:
c7:99:a8:79:9f:eb:4b:c3:21:a4:b4:06:55:ac:db:46:b0:bd:
78:cf:d0:e1:7d:6a:c5:c1:71:90:ca:5a:77:89:62:b2:dd:80:
d4:0b:00:e3:5f:9d:01:b4:ed:71:12:84:0f:2c:df:aa:a3:2f:
42:f9:09:15:10:a1:b1:e2:57:49:1b:dc:49:dc:20:b1:1f:89:
71:26:21:02:5e:46:be:ad:2d:9e:a0:94:2d:a6:08:f5:36:6e:
3c:b7:87:7c:87:3a:60:a3:f0:93:12:2c:df:d7:0c:ae:9e:cf:
0a:2b:f7:3c:d9:e3:11:59:03:e7:da:b0:98:51:a2:87:96:ed:
ea:eb:9a:14:48:d7:2f:b6:2c:a5:90:27:3f:52:48:40:12:ac:
e9:ee:a8:60:eb:59:db:a5:d1:21:81:ee:91:8c:d5:83:8d:e2:
1a:fe:af:0d:8c:89:bb:bc:44:da:6e:12:58:0a:e6:82:e5:e9:
98:37:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 20:50:18 2026 by rpki-client