Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: X8sRNrXcvdSreFnHs22TZGOyXVBBAudRSnF90eYACek=
Subject key identifier: 0A:D0:EB:EB:19:2C:70:32:A4:43:CC:C7:C1:F0:1D:B5:DE:3D:11:F5
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 01A10700F69C453E7FC6DE1259AD27C9641F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 1A8A
Signing time: Sun 04 Oct 2026 13:01:05 +0000
Manifest this update: Sun 04 Oct 2026 13:01:05 +0000
Manifest next update: Mon 05 Oct 2026 13:01:05 +0000
Files and hashes: 1: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (hash: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI=)
2: eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa (hash: H/3q1BtGSjB92oCZLbkV7NIIOrg6Uo4fxj4GnvbKnFk=)
3: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: EwdSWEZz5cQE47bBKDNb9PGOjqFVipYha3o40Xdfobg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:00:f6:9c:45:3e:7f:c6:de:12:59:ad:27:c9:64:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Oct 4 13:01:05 2026 GMT
Not After : Oct 5 13:01:05 2026 GMT
Subject: CN=0ad0ebeb192c7032a443ccc7c1f01db5de3d11f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5c:4a:e6:c8:63:d9:c7:a1:e7:51:72:d2:2d:
d0:68:2c:70:63:fc:a5:7f:54:aa:49:1b:bb:96:3e:
d7:b4:c7:e9:81:53:ea:58:cb:a5:fa:02:f9:80:97:
37:8c:10:61:68:5d:30:f5:3a:1d:61:bf:ef:7e:1e:
1a:5a:f2:e1:4d:24:0c:e6:8e:a3:31:0a:07:8a:ab:
3d:a4:64:aa:f0:d0:42:cb:74:3e:e8:22:cb:63:63:
03:3a:e6:43:fa:cb:5d:b2:08:61:5b:df:99:d1:d1:
00:1c:8f:b5:02:20:73:3e:f5:88:2f:f7:2c:41:38:
54:51:da:57:3a:cc:89:8b:e0:ef:0c:28:09:4d:82:
71:af:e9:b9:0b:23:65:29:f9:d2:1f:55:9d:b9:b8:
75:a8:ea:69:0f:05:1a:09:86:a0:65:6c:6d:72:84:
ce:f2:ad:ef:92:36:b1:fc:f2:80:e1:64:7b:ed:97:
23:81:e0:be:0d:f4:f3:3c:fe:4e:4f:e3:ba:14:e6:
98:ca:f5:b2:00:c5:e7:0e:35:00:6a:75:ff:bd:eb:
de:9d:dc:08:ae:4e:7b:84:54:b4:dd:90:22:bf:aa:
76:2b:19:50:a8:0f:30:af:51:85:23:2a:82:ae:47:
fc:cc:4f:e3:55:8b:69:2a:aa:0e:6a:ce:91:3f:5f:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D0:EB:EB:19:2C:70:32:A4:43:CC:C7:C1:F0:1D:B5:DE:3D:11:F5
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:81:2d:b8:3f:5e:0e:e4:20:7a:91:d3:e4:66:ea:b5:9e:f1:
a6:87:8f:c6:56:c7:b0:77:96:45:c0:d5:ac:b1:7d:87:e3:bd:
ae:88:b0:f0:cd:75:0b:fd:2f:34:b9:4c:b5:7f:1b:3a:fe:c2:
13:16:67:5a:e4:d7:25:0a:0a:22:c8:2d:9e:b3:51:9e:fa:f2:
24:cc:1b:31:8a:2c:97:ad:79:76:3b:0a:ed:60:f2:81:a4:df:
ae:bc:86:37:e9:7b:93:1d:0b:a5:bc:a4:50:1d:8a:37:58:b1:
1d:87:56:4d:d2:36:2d:90:b2:ca:da:2d:46:6d:01:70:c5:86:
c6:89:88:5c:5e:c2:f3:dd:47:aa:b6:a3:ee:40:a0:3e:f4:9e:
7a:3d:8b:ff:6d:78:bc:a0:36:73:79:5f:c1:a3:08:74:7c:30:
5a:97:ec:10:ec:f7:6b:67:e2:02:35:c2:47:1e:ef:6a:45:1c:
f4:b7:54:7b:05:a8:86:d3:07:c7:49:18:80:e8:f8:80:71:44:
54:03:ee:d4:bc:99:8b:28:72:15:83:af:7a:e7:d5:a2:59:94:
74:95:ca:07:45:cd:dd:1a:d3:f2:21:8f:46:02:eb:e6:9b:e0:
0c:d3:fe:53:ea:32:73:41:b1:87:09:dc:8e:a3:7e:cd:3c:9c:
69:96:2c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:40:03 2026 by rpki-client