Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: AelBpWzY/BjOGj/uwPPBQc4DumDWlCdDw/Y7Hp+Fx90=
Subject key identifier: 8C:88:F3:B3:55:54:B9:11:F4:43:F6:2E:BF:91:F5:73:BC:4D:87:E1
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019CADFE9518DBBDBAD0345957720F7A17CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 17D3
Signing time: Mon 02 Mar 2026 10:01:08 +0000
Manifest this update: Mon 02 Mar 2026 10:01:08 +0000
Manifest next update: Tue 03 Mar 2026 10:01:08 +0000
Files and hashes: 1: BaOM7EQowAQp3mVPiVLG92UAT5o.roa (hash: Vir9bCNKr3xiAR3YQztvr+gFcAXrFl1bsNs/wks4Tw0=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: yryz+1/mc8J/dh89DKK2JmHoN33Mn52TQPx71wcLKvE=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:95:18:db:bd:ba:d0:34:59:57:72:0f:7a:17:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Mar 2 10:01:08 2026 GMT
Not After : Mar 3 10:01:08 2026 GMT
Subject: CN=8c88f3b35554b911f443f62ebf91f573bc4d87e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:5e:67:b2:1c:bb:1f:a4:ab:e0:fd:ce:63:
77:e2:25:f5:df:73:6e:01:3e:18:d6:5d:0b:ec:67:
25:8a:73:e9:9e:3b:7b:96:97:b2:f5:af:1e:c0:e5:
83:57:e2:7a:8a:73:57:ca:b9:7b:18:43:81:16:ae:
50:e8:69:3d:c9:f0:fc:92:fd:b5:f0:14:ea:a6:9b:
fa:01:99:ae:df:15:f7:33:92:e1:3e:db:04:8d:41:
19:b0:e6:9c:ef:0b:ad:dd:75:d4:27:95:d2:47:66:
de:5c:c9:a5:fa:b5:71:f6:b3:f9:d1:d7:db:07:b8:
56:6e:c3:83:b7:e3:84:f9:9b:5f:a5:45:9e:33:05:
1e:0e:d2:dc:81:49:bd:bf:d1:c5:c9:53:e4:19:0c:
de:06:b1:ac:50:ff:2e:02:7d:3d:7e:d2:07:18:e9:
9d:26:7e:42:a3:4e:55:0c:af:db:af:7e:81:d9:d7:
6e:1b:b3:27:df:01:a0:51:61:17:9c:0f:69:32:38:
38:35:d0:1f:88:c8:fe:f2:46:9b:71:5e:c5:9f:17:
00:94:3e:73:28:bd:a8:36:40:70:44:ff:21:bf:4f:
b6:a1:b5:e8:af:13:51:78:39:6f:79:a8:da:72:1e:
75:52:99:27:1f:12:4b:c8:1d:59:02:ee:56:08:bf:
2d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:88:F3:B3:55:54:B9:11:F4:43:F6:2E:BF:91:F5:73:BC:4D:87:E1
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d3:a1:48:d6:0c:fc:53:9e:80:16:da:54:1b:1f:02:2c:a5:
6b:13:59:e2:d1:63:f0:fa:e3:c9:94:64:5b:47:fc:a7:29:c3:
26:ce:87:09:0e:5f:75:73:47:f9:ae:b7:17:f0:d8:18:b2:24:
95:3e:ce:02:34:af:5f:41:cf:e4:a3:bb:32:ba:12:1d:74:53:
44:c9:4d:95:97:06:7e:4b:eb:a2:8e:1b:4b:cc:1e:d7:ba:42:
ed:c9:fa:29:b3:ec:4d:59:b4:09:50:31:53:af:3b:7d:63:bb:
d4:ca:99:e9:15:35:c4:be:4a:42:9d:15:d7:77:17:cb:4c:b5:
9c:ad:fa:a6:17:97:67:d1:2e:f9:74:97:25:dd:51:e8:e5:35:
2d:1b:81:37:5b:a6:9e:93:dc:87:3e:5b:d9:c7:a7:c9:6b:55:
7b:61:f8:1c:15:12:d3:f7:fa:c6:d8:24:b1:ee:30:06:61:2c:
40:40:c1:78:46:96:27:0f:52:ad:be:bc:6b:2f:88:b8:b4:d3:
ad:c2:39:5d:da:82:c7:84:64:56:10:61:38:59:b1:04:c7:db:
07:c9:23:00:e3:45:2e:a8:14:dd:99:11:8e:fb:23:90:99:ea:
9e:af:66:ce:88:a9:cd:30:28:d8:e1:39:b2:e8:db:13:20:3d:
6d:18:2e:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/pUY27260DRZV3IPehfLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZGZjMDY2Y2U3Y2QzZTM4MjU3NGE2ODY2Nzk3M2IwYjQ2
OGRmM2MwHhcNMjYwMzAyMTAwMTA4WhcNMjYwMzAzMTAwMTA4WjAzMTEwLwYDVQQD
Eyg4Yzg4ZjNiMzU1NTRiOTExZjQ0M2Y2MmViZjkxZjU3M2JjNGQ4N2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznNeZ7Icux+kq+D9zmN34iX133Nu
AT4Y1l0L7GclinPpnjt7lpey9a8ewOWDV+J6inNXyrl7GEOBFq5Q6Gk9yfD8kv21
8BTqppv6AZmu3xX3M5LhPtsEjUEZsOac7wut3XXUJ5XSR2beXMml+rVx9rP50dfb
B7hWbsODt+OE+ZtfpUWeMwUeDtLcgUm9v9HFyVPkGQzeBrGsUP8uAn09ftIHGOmd
Jn5Co05VDK/br36B2dduG7Mn3wGgUWEXnA9pMjg4NdAfiMj+8kabcV7FnxcAlD5z
KL2oNkBwRP8hv0+2obXorxNReDlveajach51UpknHxJLyB1ZAu5WCL8tBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyI87NVVLkR9EP2Lr+R9XO8TYfhMB8GA1UdIwQY
MBaAFEPfwGbOfNPjgldKaGZ5c7C0aN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUt
MjUwOTc0M2FkMjllLzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUtMjUwOTc0M2FkMjll
LzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdOhSNYM
/FOegBbaVBsfAiylaxNZ4tFj8PrjyZRkW0f8pynDJs6HCQ5fdXNH+a63F/DYGLIk
lT7OAjSvX0HP5KO7MroSHXRTRMlNlZcGfkvroo4bS8we17pC7cn6KbPsTVm0CVAx
U687fWO71MqZ6RU1xL5KQp0V13cXy0y1nK36pheXZ9Eu+XSXJd1R6OU1LRuBN1um
npPchz5b2cenyWtVe2H4HBUS0/f6xtgkse4wBmEsQEDBeEaWJw9Srb68ay+IuLTT
rcI5XdqCx4RkVhBhOFmxBMfbB8kjAONFLqgU3ZkRjvsjkJnqnq9mzoipzTAo2OE5
sujbEyA9bRgufQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:11 2026 by rpki-client