Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: 6q739k0GTRwa9dSSNmEDTVhn0unNx81lNgTpXbrcglg=
Subject key identifier: 4B:5C:C9:5C:91:5F:6E:0D:3A:71:FE:B3:F6:5E:45:0C:2C:AF:89:AC
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019EC2C945EB30D1E938082C0E72E52D7D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 18E7
Signing time: Sat 13 Jun 2026 21:00:30 +0000
Manifest this update: Sat 13 Jun 2026 21:00:30 +0000
Manifest next update: Sun 14 Jun 2026 21:00:30 +0000
Files and hashes: 1: 88YpHUQ6fLDeh74-HidaPCz4rbs.roa (hash: caUHmlgsNHqTmPixxtDsM5vYCINLVzDzb2yA6/5Oj2Y=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: J/ES5HDt6R0Un1RJiH/trrnuDiNxseCfRl/lVNR8HZU=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:45:eb:30:d1:e9:38:08:2c:0e:72:e5:2d:7d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jun 13 21:00:30 2026 GMT
Not After : Jun 14 21:00:30 2026 GMT
Subject: CN=4b5cc95c915f6e0d3a71feb3f65e450c2caf89ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:0c:4f:56:67:5c:b3:39:08:a5:64:89:67:
56:53:74:80:3e:9b:61:95:1e:3e:28:18:e8:09:06:
c6:d5:a6:25:42:c6:a3:4a:51:67:a5:b4:15:c8:58:
7a:79:ec:57:3f:cf:ac:77:ad:30:7d:be:25:0e:4f:
b9:e1:38:7f:b0:f9:09:47:1b:47:48:20:3d:f4:6a:
f3:7d:22:1c:0d:32:61:30:3a:df:17:d7:0c:80:fb:
48:dc:ce:7d:39:e7:32:db:c7:de:cd:3c:74:b8:7e:
3d:e4:86:be:70:ca:d1:90:1c:ec:de:df:78:80:6c:
b0:eb:4f:3c:dd:3a:ef:27:db:20:9e:47:82:36:f4:
fd:f8:e9:c8:1d:49:b8:9e:70:2b:22:3c:bf:d6:fd:
ca:40:f0:b2:d1:ef:36:0d:23:af:79:b8:c9:69:7e:
32:f5:cf:aa:71:4e:19:aa:d3:13:f2:c3:38:a6:55:
07:57:3b:11:b5:53:04:ea:59:45:5a:4a:be:c9:cf:
7b:97:dc:63:fd:de:3c:11:44:2b:c3:04:33:d4:92:
95:a5:b2:3e:0c:d7:8b:03:6f:a3:85:31:9b:8f:f2:
3e:8b:14:e2:fc:bb:64:ed:54:5b:11:76:16:b8:48:
9d:d2:60:c3:b8:04:d7:32:88:3f:29:13:f8:3c:0b:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:C9:5C:91:5F:6E:0D:3A:71:FE:B3:F6:5E:45:0C:2C:AF:89:AC
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:55:c6:fe:c9:c1:6a:43:b4:10:08:42:c4:33:32:f8:b5:bd:
8c:4e:16:14:aa:2c:0d:d2:83:c7:1b:15:fb:77:9d:26:fa:d9:
a4:28:66:15:2f:59:cd:6a:c8:22:8e:51:26:c1:f3:15:4e:79:
0e:b0:a1:93:55:95:89:c7:68:30:cd:55:52:e6:ad:7b:93:22:
9a:cb:0a:f7:2c:b6:42:9a:7b:39:89:70:a5:4d:f9:6f:86:28:
6f:92:b8:f9:2a:04:1d:02:b3:fd:59:b9:89:73:b2:a4:fc:8c:
1f:29:40:a9:10:41:bc:f0:b4:3c:82:0d:b4:74:e5:47:6d:b4:
97:9c:ec:17:3c:b0:ea:3b:e7:04:b2:87:51:71:e7:ff:37:30:
9a:c0:3e:cd:b8:77:f6:f3:5f:2e:e7:f6:7c:80:74:5a:7d:aa:
58:3a:e9:9b:6e:e7:89:82:97:7a:d2:9b:f5:43:43:7d:04:89:
9c:f1:e5:d5:ce:f9:14:57:08:5d:47:1d:64:53:b1:e6:a5:29:
43:6f:ca:9a:65:a2:90:c3:fb:68:77:dd:24:01:d9:29:ce:fd:
df:de:f1:d5:15:5f:a7:6b:24:e1:e4:c7:77:97:b5:a5:72:84:
fe:12:26:ca:9a:5a:91:22:e9:94:f3:49:b5:de:59:23:a5:9a:
d7:9f:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:32:20 2026 by rpki-client