Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: M0M7QMHPmkdQT/mCY6R5ClgP2rWLAzeZGkFf1tZo+WQ=
Subject key identifier: 26:32:CA:BC:12:5C:C0:A2:A3:F6:03:08:68:21:B7:77:53:AB:67:E4
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 019EBFC8F695AD1AAC252C78D64E255180A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 07:01:19 +0000
Manifest this update: Sat 13 Jun 2026 07:01:19 +0000
Manifest next update: Sun 14 Jun 2026 07:01:19 +0000
Files and hashes: 1: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (hash: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI=)
2: eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa (hash: H/3q1BtGSjB92oCZLbkV7NIIOrg6Uo4fxj4GnvbKnFk=)
3: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: ehkB9IQsxqelnscKjcXmpwSbTX2mTknroHgema9T6C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:f6:95:ad:1a:ac:25:2c:78:d6:4e:25:51:80:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Jun 13 07:01:19 2026 GMT
Not After : Jun 14 07:01:19 2026 GMT
Subject: CN=2632cabc125cc0a2a3f603086821b77753ab67e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:e0:b9:08:7c:1b:5f:96:db:d0:b8:07:ed:
89:ea:c8:b5:59:8b:1f:ed:63:7b:cf:38:12:d2:b3:
1b:6e:2a:eb:41:f9:cd:d9:7f:1f:b6:3a:11:b3:9c:
10:eb:37:0a:8d:70:09:37:4b:fb:ef:ea:e4:5c:36:
be:b2:52:ce:1d:43:21:98:55:10:c7:09:3f:0c:ef:
17:e8:05:40:e9:a3:5f:7c:ec:0e:22:f1:53:f3:92:
67:d1:c1:d8:9c:d9:60:0c:43:0a:5d:85:0f:22:ad:
fb:ee:4a:87:e6:9d:bd:b0:07:2d:dd:fb:30:f4:06:
6f:5d:0c:c4:00:6a:86:0d:99:4d:bb:ea:da:a5:24:
1c:91:ee:61:f9:d2:6a:83:ea:e5:98:fd:4b:d3:ba:
19:97:7a:85:00:f5:9b:c1:14:68:f6:4d:f1:e7:19:
8c:5c:98:2c:2f:ca:5a:2e:d0:dc:0f:e9:f5:59:4b:
8f:16:4b:c3:67:b5:69:d0:60:29:06:e1:bf:87:c6:
61:46:98:79:24:20:47:5a:65:5a:65:bb:54:47:66:
fb:d3:b0:6e:84:b8:8a:bf:c1:43:1e:a1:de:9b:18:
7d:b5:9f:c3:fe:56:4c:1d:bd:90:dc:06:4e:ba:d5:
3b:94:b7:e5:3c:d7:ea:a7:8a:2d:bf:29:15:3b:c4:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:32:CA:BC:12:5C:C0:A2:A3:F6:03:08:68:21:B7:77:53:AB:67:E4
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f2:23:1f:79:af:40:42:a9:b6:84:8c:b5:91:98:94:0a:aa:
89:a1:43:c8:d7:3c:97:0f:e7:ab:9b:6b:4a:23:d7:44:7c:ef:
2c:61:9f:67:bb:9d:ba:e5:91:0c:af:22:0c:74:58:2a:e1:0c:
c7:a7:98:3a:bc:fb:43:f4:9a:2b:14:8f:29:31:60:b5:6f:02:
6d:a3:c1:e9:7a:59:fd:fd:44:23:6a:1c:e1:42:f0:07:f1:40:
19:bc:16:7a:a1:76:77:69:21:6d:cd:09:e8:52:41:86:2f:c3:
f8:ba:03:7b:e7:cc:a4:5c:65:0b:6f:8b:c8:66:a1:31:9b:79:
54:cc:a9:c4:c6:6c:d4:25:3a:6f:f4:54:87:ed:6d:66:72:95:
42:ef:0d:ca:d8:69:3b:e4:00:df:fd:71:2a:c8:87:c2:4e:e1:
48:ff:fa:3b:3f:68:bc:36:1f:0d:5a:31:24:27:01:24:09:46:
4b:4d:89:13:5e:ea:87:f8:bf:43:c4:89:64:d3:f7:ea:47:f4:
49:4e:d0:0b:2c:96:6e:6d:5d:c3:c7:58:ba:95:f2:9f:2d:38:
2b:9c:7f:39:ad:0f:3f:78:ff:18:27:0f:83:09:37:c8:ef:a9:
e0:3f:c4:d6:58:2e:f7:9c:ce:11:26:a0:46:fa:38:07:d4:c8:
06:2e:cf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:53:13 2026 by rpki-client