Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: Sm849eQ2p3Z8X/shC629+Z+vyyV1sdbHhz4wQxuRBPQ=
Subject key identifier: A5:1C:F7:AF:D5:4D:F2:E1:32:94:5C:1E:13:8A:5B:E8:F4:90:5E:B9
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 019D9A3E21A005CA3CB022BE1854E5C34A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:00:56 +0000
Manifest this update: Fri 17 Apr 2026 07:00:56 +0000
Manifest next update: Sat 18 Apr 2026 07:00:56 +0000
Files and hashes: 1: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (hash: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI=)
2: eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa (hash: H/3q1BtGSjB92oCZLbkV7NIIOrg6Uo4fxj4GnvbKnFk=)
3: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: Moc8idONTeHTC/RPq813BZfa4G89ed46nLGFlnbUoRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:21:a0:05:ca:3c:b0:22:be:18:54:e5:c3:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Apr 17 07:00:56 2026 GMT
Not After : Apr 18 07:00:56 2026 GMT
Subject: CN=a51cf7afd54df2e132945c1e138a5be8f4905eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:a2:52:35:4c:02:7e:bf:bd:86:6f:d4:03:
47:28:1a:7a:3f:15:66:0e:8d:7e:a9:51:17:1f:d4:
1b:fe:d2:30:54:37:1a:77:dc:93:5a:9c:cc:f4:45:
f9:ef:69:a0:f2:b0:8e:0b:8a:84:9d:52:99:2b:16:
ca:66:94:52:5b:f4:4e:92:ae:2e:74:8e:63:3c:64:
66:d0:bf:4c:db:55:64:13:a6:fc:2d:a2:4c:b2:04:
0a:f8:fc:3b:24:24:21:ed:86:eb:51:f9:51:63:dc:
64:13:57:a3:a9:b2:92:c0:e9:55:3b:b7:f1:18:cf:
6c:d3:35:2d:b4:69:07:62:43:70:f1:8a:31:24:e8:
1e:03:b4:00:97:65:d9:1a:fe:33:86:e5:e1:0c:51:
20:4a:41:9d:0b:b8:05:9b:4e:92:b8:44:6d:0e:20:
a3:44:85:1d:b7:44:96:d2:5a:4f:3d:f6:9f:f9:ba:
d9:40:4e:0a:35:76:e6:eb:aa:f8:89:1d:8b:4b:5e:
08:c6:70:65:fe:ed:cd:4c:1b:94:22:4c:d6:70:c7:
ec:66:53:db:51:44:20:c3:a2:46:08:b9:c8:d4:e5:
66:45:23:62:d6:d1:81:ed:06:72:d1:35:c1:17:6a:
47:a9:ad:9b:7e:c2:c7:72:9f:f9:71:c0:a7:9a:9e:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1C:F7:AF:D5:4D:F2:E1:32:94:5C:1E:13:8A:5B:E8:F4:90:5E:B9
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fc:61:99:a0:2c:e1:98:d0:44:49:13:c4:d4:cd:8c:f5:87:
3e:c2:d1:66:29:4c:83:1b:9e:3a:31:41:2b:ba:50:10:19:78:
3c:a1:70:28:96:10:5a:06:96:80:f4:16:59:d5:5b:ea:78:e9:
b7:a1:84:78:32:f5:53:60:a2:12:0b:52:ca:ad:3b:e9:73:a6:
43:cf:2f:b0:8f:36:c8:68:9e:b7:5d:f4:9d:0a:04:db:77:d3:
2b:f8:62:12:f3:5c:69:ab:e9:90:39:30:dd:f5:ce:69:3b:b4:
5e:1f:16:7b:56:66:bc:87:3c:a7:e2:be:52:7b:42:34:20:64:
59:f8:c3:d4:c8:e3:bd:de:59:95:79:9a:75:a0:68:00:85:d8:
f9:31:07:6a:9b:7e:b2:37:ba:ec:8d:da:47:c5:44:ac:e6:ab:
31:c1:c1:d4:8a:67:4e:fe:c6:6c:9b:ce:82:b1:ea:1a:e5:97:
e7:49:24:37:26:53:13:07:a0:b2:49:0c:58:9f:c9:d6:6a:98:
c2:7d:e3:d0:11:f9:86:e8:08:7a:56:f3:75:80:10:c9:ea:e7:
db:f4:05:0f:e2:c4:f7:56:a5:eb:cc:2e:20:f2:cb:f1:6c:96:
1d:c1:ab:3f:33:71:61:ff:99:e0:a5:9d:8b:8c:86:b3:6b:5b:
1f:d9:44:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:21:29 2026 by rpki-client