Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: 6yO3Rt925VH1zC/FSwQiJfx19sHVcBNOwCxBIMxAVh8=
Subject key identifier: FA:A8:03:A0:FF:0F:82:42:3B:4F:47:24:B1:5B:19:81:3D:7F:71:7E
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 019FA974CB8AF1D162493EE94ECFCB9D9846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 16:00:31 +0000
Manifest this update: Tue 28 Jul 2026 16:00:31 +0000
Manifest next update: Wed 29 Jul 2026 16:00:31 +0000
Files and hashes: 1: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (hash: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI=)
2: eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa (hash: H/3q1BtGSjB92oCZLbkV7NIIOrg6Uo4fxj4GnvbKnFk=)
3: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: hQhTp4FEs8Oqlflc87W2TGLnijuPCEFt6Kj2ciZwML4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:cb:8a:f1:d1:62:49:3e:e9:4e:cf:cb:9d:98:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Jul 28 16:00:31 2026 GMT
Not After : Jul 29 16:00:31 2026 GMT
Subject: CN=faa803a0ff0f82423b4f4724b15b19813d7f717e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:31:6d:0e:32:94:0c:02:f6:8e:b5:f8:07:
0c:50:0a:0f:49:29:a3:17:03:29:c7:46:30:b9:6b:
1f:ed:54:cb:4a:2e:e6:13:f5:5f:0e:2d:f3:73:aa:
e4:31:8a:e4:f6:7b:62:00:81:c6:1f:b5:22:e4:fa:
b9:7f:40:c9:68:d1:cb:91:61:f6:81:2d:d8:65:9a:
04:91:cb:ac:82:70:90:bf:02:c2:82:43:3c:0e:e9:
2a:14:8f:47:68:c1:63:90:b8:7d:ef:5e:1d:96:81:
31:e3:7a:32:27:1b:03:db:fe:94:9b:53:d4:23:11:
0d:b1:6c:a4:81:93:0a:f0:ac:38:71:1c:b2:a7:e4:
46:68:21:fd:65:05:a3:67:bd:82:7e:b9:37:f3:c1:
8c:73:7d:03:5b:ee:76:d2:26:7f:2d:ce:2c:35:bc:
3f:29:e5:7b:bd:30:24:b9:21:41:58:f9:00:96:45:
24:3f:26:c8:60:75:e3:92:6d:1c:86:e2:2c:7a:0c:
41:eb:96:60:6c:0e:d0:c7:6b:c9:84:9f:5e:f6:5c:
54:79:80:2a:cd:28:e2:9d:91:eb:75:64:2c:2a:1c:
d7:e4:71:06:21:dc:c8:90:79:55:6d:c5:64:05:b4:
97:28:6e:a1:1a:16:86:d5:0b:6c:00:0d:89:f6:34:
c0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A8:03:A0:FF:0F:82:42:3B:4F:47:24:B1:5B:19:81:3D:7F:71:7E
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bf:65:e3:82:7f:45:cb:66:ed:64:99:14:e7:88:98:e9:1d:
28:88:89:96:60:d1:a1:ea:d4:80:89:80:5f:47:b6:44:50:01:
62:7b:17:90:e1:77:eb:83:ed:64:c1:8d:ee:68:52:09:f2:6e:
8d:a3:f9:4a:42:06:56:30:2a:45:d3:93:dc:93:d8:3b:61:f3:
60:d1:ae:5d:82:aa:6e:b2:34:51:1a:38:59:f4:12:8e:80:99:
4e:d1:83:9c:83:d1:01:c7:df:61:6b:aa:78:c5:11:1f:8c:fa:
a0:4b:58:09:fc:db:7b:96:c4:83:0c:0e:38:ee:8a:04:0d:76:
2e:bd:2f:98:1d:18:07:ce:52:37:72:3c:38:0d:f6:5d:7b:5e:
f1:aa:17:2f:dc:6b:e4:b6:fd:37:e0:e6:22:f4:0c:b6:2e:93:
1b:fd:a4:5c:59:e6:b7:3d:ac:d4:2d:d2:03:f8:4a:a7:cb:36:
b9:32:10:d3:c1:7a:fc:cc:0c:44:ad:7c:42:7a:ab:12:c6:59:
53:9f:76:6d:d5:5b:fb:c3:75:38:6a:9b:c5:7f:ae:fc:ec:ba:
6d:65:c7:f6:29:a1:b6:2c:41:51:be:4b:bf:2a:ad:1a:4f:2f:
5d:12:a8:2e:8e:8e:10:20:04:16:f3:c8:f1:0d:2b:55:ed:6e:
ca:1b:85:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:59 2026 by rpki-client