Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: +T2lSaTQDA5ffYlldzJGn1ubgPjaIuEhmUkEOYLoPBU=
Subject key identifier: 88:8A:DF:5D:26:22:A3:8F:75:D2:78:5A:14:F6:29:2E:71:9F:77:94
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 019F8E6B557349D2B0202D0D449458828E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 10:00:26 +0000
Manifest this update: Thu 23 Jul 2026 10:00:26 +0000
Manifest next update: Fri 24 Jul 2026 10:00:26 +0000
Files and hashes: 1: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (hash: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI=)
2: eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa (hash: H/3q1BtGSjB92oCZLbkV7NIIOrg6Uo4fxj4GnvbKnFk=)
3: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: RVcn4gkDjd5TjzZTv9MlUVsJI+hxdpU+hBpmfzNHVDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:55:73:49:d2:b0:20:2d:0d:44:94:58:82:8e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Jul 23 10:00:26 2026 GMT
Not After : Jul 24 10:00:26 2026 GMT
Subject: CN=888adf5d2622a38f75d2785a14f6292e719f7794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:36:99:8a:5a:cb:08:62:33:1d:de:5b:c2:28:
85:2a:0b:d7:1a:9b:38:09:5c:06:f4:a4:bd:c4:03:
5d:c1:33:2c:a4:c2:0e:76:f4:24:06:22:d3:e7:64:
33:27:76:3a:60:72:e5:7f:b6:fd:d1:d0:55:d7:6b:
ca:a6:00:30:b0:90:af:85:1b:5c:7c:0a:ee:28:ee:
9a:00:ce:b8:8d:76:b7:39:fa:1c:06:3d:e7:6f:f4:
84:8c:cc:e7:56:a2:ef:e1:d3:2b:b2:c5:f9:8e:02:
ea:65:8b:9f:b6:63:0c:e9:c8:51:03:b7:41:28:71:
59:2d:a9:13:75:f8:88:ef:e8:ec:ca:73:27:9d:0c:
7a:81:10:cf:62:2f:64:ee:8f:3c:12:03:46:bc:fe:
25:40:68:28:01:8d:60:ee:29:04:ac:ed:d5:06:d8:
a2:b1:09:e8:f6:f6:3f:20:99:26:4c:d7:be:a6:ad:
ce:00:2e:7c:8c:a0:bf:05:dd:b0:6c:0e:f6:f9:e8:
8a:e2:f0:e9:3f:50:9d:5e:38:b2:78:58:93:33:52:
fb:df:3b:6e:b7:8a:65:55:c6:23:4e:76:e3:f6:e3:
82:03:dd:31:a0:61:76:91:3d:94:bd:2a:1d:1e:a0:
ce:44:9d:a2:2f:20:80:98:40:bc:a4:73:73:18:e3:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8A:DF:5D:26:22:A3:8F:75:D2:78:5A:14:F6:29:2E:71:9F:77:94
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3e:e3:d0:7b:b0:af:e6:2d:8a:59:e3:1f:61:b7:5d:66:b3:
7b:cb:a7:46:ba:13:12:4b:0e:24:0c:b9:f1:b9:cd:05:dd:a8:
80:96:2b:a5:52:ac:8c:1e:b5:47:4b:92:9d:4c:f6:1a:06:eb:
1e:2e:e9:34:f0:41:2e:bc:e1:cc:bc:ca:e0:f9:a7:4a:db:d6:
e2:86:3f:2f:5c:83:8b:2d:2b:50:3f:1f:44:04:a9:53:dc:e0:
c0:66:6f:08:ca:21:33:cb:e9:15:c5:13:6b:f2:16:7a:f2:0c:
95:fd:45:99:6f:28:67:5e:76:de:93:59:63:c2:e6:ed:0b:0f:
7b:e3:e3:c0:92:71:48:8b:bb:55:19:d6:f9:e3:91:c6:34:61:
63:95:27:a4:4f:cc:06:20:e0:45:80:91:86:15:52:68:70:28:
dd:d4:ff:45:82:b7:dd:e0:c5:19:18:e1:9b:bc:a4:f6:11:27:
1c:9d:e1:83:90:29:60:03:9d:b2:70:78:85:b3:7f:c7:f2:36:
28:94:ee:e3:8c:78:48:50:53:98:f1:11:50:56:d3:35:f9:0d:
04:dd:70:8c:9a:1f:cf:c2:81:8c:27:cb:83:83:ad:8d:e3:80:
97:05:a1:98:de:56:25:87:b9:6b:54:cd:a7:92:19:76:8d:b9:
4d:36:eb:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Oa1VzSdKwIC0NRJRYgo4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ODQ3ZjY0NTY3ZTRhYTRhZDVjYjdmYzIyZjIyZGY0ZTJi
YzY5NzgwHhcNMjYwNzIzMTAwMDI2WhcNMjYwNzI0MTAwMDI2WjAzMTEwLwYDVQQD
Eyg4ODhhZGY1ZDI2MjJhMzhmNzVkMjc4NWExNGY2MjkyZTcxOWY3Nzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzaZilrLCGIzHd5bwiiFKgvXGps4
CVwG9KS9xANdwTMspMIOdvQkBiLT52QzJ3Y6YHLlf7b90dBV12vKpgAwsJCvhRtc
fAruKO6aAM64jXa3OfocBj3nb/SEjMznVqLv4dMrssX5jgLqZYuftmMM6chRA7dB
KHFZLakTdfiI7+jsynMnnQx6gRDPYi9k7o88EgNGvP4lQGgoAY1g7ikErO3VBtii
sQno9vY/IJkmTNe+pq3OAC58jKC/Bd2wbA72+eiK4vDpP1CdXjiyeFiTM1L73ztu
t4plVcYjTnbj9uOCA90xoGF2kT2UvSodHqDORJ2iLyCAmEC8pHNzGOP1sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiK310mIqOPddJ4WhT2KS5xn3eUMB8GA1UdIwQY
MBaAFKiEf2RWfkqkrVy3/CLyLfTivGl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQt
MTAyNTU3MThhMTg1LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQtMTAyNTU3MThhMTg1
LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXj7j0Huw
r+YtilnjH2G3XWaze8unRroTEksOJAy58bnNBd2ogJYrpVKsjB61R0uSnUz2Ggbr
Hi7pNPBBLrzhzLzK4PmnStvW4oY/L1yDiy0rUD8fRASpU9zgwGZvCMohM8vpFcUT
a/IWevIMlf1FmW8oZ1523pNZY8Lm7QsPe+PjwJJxSIu7VRnW+eORxjRhY5UnpE/M
BiDgRYCRhhVSaHAo3dT/RYK33eDFGRjhm7yk9hEnHJ3hg5ApYAOdsnB4hbN/x/I2
KJTu44x4SFBTmPERUFbTNfkNBN1wjJofz8KBjCfLg4OtjeOAlwWhmN5WJYe5a1TN
p5IZdo25TTbrvw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:10 2026 by rpki-client