Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: FmvelsmwT3iE8kbP+gETxd9IFCRY5qLeYYk7TiaijcU=
Subject key identifier: 27:41:2B:36:6E:F8:C5:A0:7F:97:AC:7D:9A:8C:5B:D4:CD:BE:1E:EA
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 019D29615450E55A7ACBDC39DC0A21C767A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:02:17 +0000
Manifest this update: Thu 26 Mar 2026 09:02:17 +0000
Manifest next update: Fri 27 Mar 2026 09:02:17 +0000
Files and hashes: 1: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (hash: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI=)
2: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: 9n55LQGJ7Wvp3XG/86Fb9DuKsjRSV7REYu4oQuadlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:54:50:e5:5a:7a:cb:dc:39:dc:0a:21:c7:67:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Mar 26 09:02:17 2026 GMT
Not After : Mar 27 09:02:17 2026 GMT
Subject: CN=27412b366ef8c5a07f97ac7d9a8c5bd4cdbe1eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:1a:fc:49:79:d7:7b:d0:be:07:5a:52:ff:
40:5c:94:b4:46:9a:8d:d5:79:72:80:1f:25:89:cd:
66:43:cb:57:cc:75:2f:7a:f5:62:ef:17:e9:ac:01:
99:db:fa:22:aa:1c:4f:ad:a8:f4:d4:e3:09:67:d2:
ba:b2:c5:74:f6:04:0b:da:8e:47:71:da:93:b1:a9:
88:04:d4:80:ca:3d:8b:06:6c:c5:3e:62:ed:8c:e1:
9b:cb:89:25:c4:dd:11:6e:45:65:61:ba:47:ff:4e:
68:5e:58:0f:78:ee:5f:2c:84:d9:07:ed:e4:02:5f:
14:1c:50:72:4d:ee:01:b0:e6:e4:dc:14:12:b2:31:
d2:5a:cc:12:62:fd:37:8b:5a:e6:88:95:7d:6e:65:
d4:7b:b4:63:02:f9:3d:79:4f:af:17:f8:ab:32:39:
a4:d8:0c:1e:3b:2a:07:ee:c1:09:97:c9:f4:b7:b5:
ab:24:b8:69:ac:9d:c2:46:dc:37:3c:3a:bd:67:7f:
62:94:4f:16:0b:39:76:d6:58:98:0a:b1:03:00:d6:
22:d8:e5:19:3a:64:08:1b:b4:14:6e:33:a6:a2:fc:
c5:92:b6:7e:88:2c:fb:05:2c:a0:51:48:b9:7a:3f:
f4:85:aa:01:fe:fa:c6:4b:9e:63:ac:9d:dd:1e:e1:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:41:2B:36:6E:F8:C5:A0:7F:97:AC:7D:9A:8C:5B:D4:CD:BE:1E:EA
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cb:47:32:ff:67:2a:37:b4:14:27:8e:0a:e6:75:10:07:c8:
2c:7a:01:e9:9d:4f:cc:c3:8b:7d:ca:8d:b7:f9:dc:57:6d:2d:
20:27:16:df:9a:89:e6:41:c6:05:8d:e3:52:52:d5:92:e5:25:
cf:cd:30:97:69:10:8a:28:90:76:21:a6:48:8e:bd:20:dc:e2:
fc:5d:44:37:20:5f:44:42:2d:a9:e7:bd:e0:1d:ab:3e:8a:3a:
5e:fe:44:cf:da:cf:f0:7a:ed:e3:70:05:31:cd:5a:2f:cc:82:
5f:b2:b8:cf:58:04:7c:ec:b7:83:12:fa:b1:db:87:27:6f:6e:
a6:1e:81:7f:05:b9:66:1d:ae:82:44:2c:52:67:6f:14:54:35:
16:19:95:8c:15:cd:e0:a4:85:67:fe:c6:ef:f6:e8:ba:1e:7e:
b6:ae:97:fb:4b:71:c9:ce:a4:73:ab:c7:07:fe:0a:22:bb:46:
4b:50:16:00:e4:8d:c2:19:f1:1e:cb:d7:c0:47:dd:44:78:4f:
59:57:f6:a9:e2:f3:1f:12:ab:ec:ee:bc:a5:59:bf:e3:a2:4d:
06:cb:1d:77:9a:84:11:40:25:1f:a2:83:47:fd:46:b7:83:66:
55:e2:23:ec:81:a6:43:90:32:a2:a8:3e:99:a7:a7:6c:8f:d2:
22:29:d3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:02 2026 by rpki-client