Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: e8kapzH7eBtYcvwOnKL+6bBrP5xae+FO9e/Zm9yXEq8=
Subject key identifier: E0:31:D4:2C:10:C9:3E:3F:AF:8B:2F:7D:A6:7E:25:49:D3:08:4C:D9
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 019E1D90FFBB433C2D51848D8254874A6A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 19:01:42 +0000
Manifest this update: Tue 12 May 2026 19:01:42 +0000
Manifest next update: Wed 13 May 2026 19:01:42 +0000
Files and hashes: 1: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (hash: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI=)
2: eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa (hash: H/3q1BtGSjB92oCZLbkV7NIIOrg6Uo4fxj4GnvbKnFk=)
3: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: wwT28jJKXful+ivus8j1r5UwrGuojoqlh6FEIWji4pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ff:bb:43:3c:2d:51:84:8d:82:54:87:4a:6a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: May 12 19:01:42 2026 GMT
Not After : May 13 19:01:42 2026 GMT
Subject: CN=e031d42c10c93e3faf8b2f7da67e2549d3084cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:90:e2:29:0d:62:c9:52:48:36:eb:9e:e5:
16:a7:fa:f3:0e:4e:1c:99:f0:71:e4:33:66:8c:c8:
9a:ce:d1:44:b0:08:6b:59:0e:03:9f:16:d8:c6:7b:
d6:6e:24:4c:c5:0b:4f:4c:f6:80:2f:87:7b:59:4a:
2b:59:16:23:50:9c:9c:7e:be:83:a2:51:66:fb:d6:
81:83:c0:dc:04:6a:ca:4f:3a:0b:ac:d1:51:85:82:
66:0e:10:06:65:b6:ea:fe:92:79:37:a6:78:8c:dd:
3c:62:b7:5a:7e:ae:47:20:5c:32:3a:3c:34:6e:d7:
e7:76:d9:ab:76:77:e8:6c:4c:7f:ee:46:7d:6f:6a:
6a:a3:bc:0e:9c:2d:1c:dd:4b:1d:0e:5b:62:43:69:
89:ad:09:e3:25:27:f3:38:ab:d5:0f:cd:85:a6:1b:
5c:95:7f:d8:87:01:d7:a4:f2:d6:e9:88:d9:c9:a8:
7a:ce:20:43:93:7f:6c:c2:80:d4:7d:fd:25:4f:51:
5a:cd:69:82:05:ad:69:5c:70:47:88:0a:22:b2:03:
5a:2c:ce:12:0d:68:19:12:3a:a9:6d:d1:6c:65:35:
d5:ef:ef:1d:9c:f8:d8:18:5f:a6:dd:73:cc:55:96:
ca:e8:99:63:a1:07:4f:36:1c:91:c9:f6:95:01:0f:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:31:D4:2C:10:C9:3E:3F:AF:8B:2F:7D:A6:7E:25:49:D3:08:4C:D9
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:69:16:f4:81:bb:bd:8d:38:54:a1:ee:a5:8b:69:fb:77:8c:
24:5f:36:c2:06:22:50:da:e9:a1:86:48:8b:b4:a5:b1:a0:0e:
0c:9b:2a:73:0e:14:30:26:e8:a5:8c:a6:5c:25:be:e8:8b:f7:
5d:0c:58:65:f8:72:b5:86:3a:a4:df:d2:fe:ae:05:83:e0:7f:
1c:4f:c5:26:f0:e3:da:18:7d:94:06:00:50:97:c5:c8:25:2f:
12:2d:f7:20:e2:dc:f4:92:99:de:56:26:ad:bd:b6:fc:57:63:
a5:98:d3:55:17:82:b7:cf:43:c4:d2:be:b6:7c:5e:c7:8f:01:
2a:67:b7:91:f4:34:53:70:9e:93:7a:34:36:49:92:02:07:94:
1a:d2:5c:75:1e:ac:d9:3c:51:da:04:56:6c:d3:47:13:d4:20:
f0:f3:6f:5b:16:5c:ab:26:e1:52:e9:2c:e4:1a:94:98:6d:36:
b4:1e:ab:41:45:e9:e1:51:86:cc:4e:21:cf:bb:27:cb:b8:a0:
09:dd:c2:f2:1a:8e:c8:f0:6c:82:4d:f0:2e:c7:96:4c:01:01:
50:40:29:cd:9b:07:a4:a3:1f:69:bf:3e:c2:1f:47:61:12:15:
d5:4a:ce:f3:74:0c:03:7c:be:9b:01:70:9c:53:36:1e:73:fd:
ff:f0:db:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkP+7QzwtUYSNglSHSmoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ODQ3ZjY0NTY3ZTRhYTRhZDVjYjdmYzIyZjIyZGY0ZTJi
YzY5NzgwHhcNMjYwNTEyMTkwMTQyWhcNMjYwNTEzMTkwMTQyWjAzMTEwLwYDVQQD
EyhlMDMxZDQyYzEwYzkzZTNmYWY4YjJmN2RhNjdlMjU0OWQzMDg0Y2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj2Q4ikNYslSSDbrnuUWp/rzDk4c
mfBx5DNmjMiaztFEsAhrWQ4DnxbYxnvWbiRMxQtPTPaAL4d7WUorWRYjUJycfr6D
olFm+9aBg8DcBGrKTzoLrNFRhYJmDhAGZbbq/pJ5N6Z4jN08Yrdafq5HIFwyOjw0
btfndtmrdnfobEx/7kZ9b2pqo7wOnC0c3UsdDltiQ2mJrQnjJSfzOKvVD82Fphtc
lX/YhwHXpPLW6YjZyah6ziBDk39swoDUff0lT1FazWmCBa1pXHBHiAoisgNaLM4S
DWgZEjqpbdFsZTXV7+8dnPjYGF+m3XPMVZbK6JljoQdPNhyRyfaVAQ9rMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAx1CwQyT4/r4svfaZ+JUnTCEzZMB8GA1UdIwQY
MBaAFKiEf2RWfkqkrVy3/CLyLfTivGl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQt
MTAyNTU3MThhMTg1LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQtMTAyNTU3MThhMTg1
LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGkW9IG7
vY04VKHupYtp+3eMJF82wgYiUNrpoYZIi7SlsaAODJsqcw4UMCbopYymXCW+6Iv3
XQxYZfhytYY6pN/S/q4Fg+B/HE/FJvDj2hh9lAYAUJfFyCUvEi33IOLc9JKZ3lYm
rb22/FdjpZjTVReCt89DxNK+tnxex48BKme3kfQ0U3Cek3o0NkmSAgeUGtJcdR6s
2TxR2gRWbNNHE9Qg8PNvWxZcqybhUuks5BqUmG02tB6rQUXp4VGGzE4hz7sny7ig
Cd3C8hqOyPBsgk3wLseWTAEBUEApzZsHpKMfab8+wh9HYRIV1UrO83QMA3y+mwFw
nFM2HnP9//Dbcg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:25:31 2026 by rpki-client