Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: RI2OWVvOe86/KboabQ37PcuFYVo2f0ZARDbaspG0ck8=
Subject key identifier: A3:3B:31:02:80:D8:A6:84:CB:3B:97:9C:CC:EE:C1:8A:05:03:82:20
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019FAC768534C1D1EFDCB4786539AC68D420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 1960
Signing time: Wed 29 Jul 2026 06:01:16 +0000
Manifest this update: Wed 29 Jul 2026 06:01:16 +0000
Manifest next update: Thu 30 Jul 2026 06:01:16 +0000
Files and hashes: 1: 88YpHUQ6fLDeh74-HidaPCz4rbs.roa (hash: caUHmlgsNHqTmPixxtDsM5vYCINLVzDzb2yA6/5Oj2Y=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: JgOWu2ReLciIQz3GiFz0ICHHGEM/BiCY/DcT4PEW1yo=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:85:34:c1:d1:ef:dc:b4:78:65:39:ac:68:d4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jul 29 06:01:16 2026 GMT
Not After : Jul 30 06:01:16 2026 GMT
Subject: CN=a33b310280d8a684cb3b979ccceec18a05038220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:88:be:5e:20:9d:7f:6e:8d:fc:75:43:fd:
b5:dd:ed:42:56:62:fb:e5:f7:40:d3:bd:99:43:f4:
a5:29:bc:e3:85:3e:c4:7e:a5:66:82:42:cf:e7:05:
d2:ae:ff:07:62:76:02:3d:bd:3b:0d:fd:b8:b6:d6:
61:1c:91:af:5e:d3:e3:95:d8:28:78:2e:ec:e1:c0:
53:22:24:c9:3e:b5:58:2e:18:8b:a4:3a:8f:64:30:
70:ee:f6:fd:5a:2d:18:15:c7:d5:d5:c6:a8:de:a5:
be:ad:ad:72:45:90:dd:45:e2:3c:bd:21:5e:fe:1a:
51:3c:db:f2:49:2c:d2:a1:ab:0f:85:58:08:9d:f1:
ed:27:4b:1d:b6:bf:5e:a2:a1:1d:2f:4a:fb:e7:3d:
db:49:b0:cd:3d:aa:bd:2b:d6:45:39:2e:39:e3:52:
69:a1:56:fd:d3:7c:7e:af:dd:7d:cd:62:c5:21:4a:
6e:cb:38:7a:44:88:31:a7:08:21:95:50:c6:e3:a4:
9a:8f:b7:ba:61:f4:6e:ee:f1:92:c3:4a:d7:81:9e:
df:86:73:34:92:01:7b:53:b5:c2:b8:89:fc:ed:d3:
e4:69:46:06:e6:56:a5:21:d7:8c:90:43:30:ff:5f:
06:9f:81:5b:52:65:cd:a8:20:83:75:72:c9:d5:f6:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3B:31:02:80:D8:A6:84:CB:3B:97:9C:CC:EE:C1:8A:05:03:82:20
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:90:be:b5:0c:83:f2:c2:36:20:13:5a:55:73:1d:e1:01:5a:
a7:56:4c:72:32:d9:69:fd:13:f9:5c:73:8b:4a:02:cb:9c:bb:
75:b8:e8:84:5a:79:51:12:ce:52:74:c7:c9:f3:41:01:be:ae:
25:a8:53:b5:52:24:73:fe:4c:ef:ed:9c:9b:07:c7:ab:4d:83:
3f:76:2f:9b:86:fc:06:c0:36:51:89:32:32:c1:19:5c:74:02:
2b:56:21:e8:7f:26:7c:3c:44:4b:8b:42:61:2e:f2:42:50:57:
df:67:21:b6:01:0b:13:ea:66:c4:67:52:b7:02:a8:28:4b:ca:
a4:0d:34:8b:3b:4a:5b:eb:56:e8:8d:14:c6:df:60:53:f8:86:
ab:5e:2f:45:66:21:24:42:cd:d8:51:13:11:66:ed:c9:aa:40:
f3:64:33:49:17:4a:eb:47:a0:68:9f:ef:b9:46:d5:51:1f:2a:
9b:62:07:7c:cf:93:0a:b4:c8:39:b7:28:a8:a5:09:8e:c0:c8:
98:2a:5b:83:43:bf:47:5d:65:5c:ff:1f:61:03:ee:f5:fd:f3:
af:c0:e7:8d:c4:15:ed:00:d9:bb:ae:7f:1f:a5:52:06:f7:b8:
4d:30:2c:12:a6:40:0a:e8:4e:84:e1:1f:29:45:08:64:8d:14:
6f:8d:e0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:07:34 2026 by rpki-client