Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: /uz9GfPtW1+YiK9g972y4NEC/sZ+c9KDa/enGgWYLw0=
Subject key identifier: EF:9D:E9:CF:0B:E5:91:A7:C9:A3:B7:5F:4D:92:E5:41:0B:35:17:C5
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019D9B87AFA4F098FCE6410F1BCC7FE5E1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 184E
Signing time: Fri 17 Apr 2026 13:00:53 +0000
Manifest this update: Fri 17 Apr 2026 13:00:53 +0000
Manifest next update: Sat 18 Apr 2026 13:00:53 +0000
Files and hashes: 1: BaOM7EQowAQp3mVPiVLG92UAT5o.roa (hash: Vir9bCNKr3xiAR3YQztvr+gFcAXrFl1bsNs/wks4Tw0=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: MbbcrYqpgXi9SuGEZ7V9JeymYna8DYkMfH7cHMiJFKE=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:af:a4:f0:98:fc:e6:41:0f:1b:cc:7f:e5:e1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Apr 17 13:00:53 2026 GMT
Not After : Apr 18 13:00:53 2026 GMT
Subject: CN=ef9de9cf0be591a7c9a3b75f4d92e5410b3517c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a3:94:60:83:40:ac:04:b7:67:3c:6d:22:25:
e1:cf:97:ee:fd:d3:c8:d2:a7:72:05:8f:9a:45:e2:
c6:53:60:d2:96:7a:9f:56:e8:d0:b6:13:0a:7e:61:
88:05:2f:16:62:99:65:51:5a:ec:e3:21:ab:db:7f:
28:87:8b:00:ec:5b:7d:60:a2:ae:b2:f8:18:1f:64:
ec:42:ae:2d:da:48:55:92:60:9f:c0:e0:df:26:7a:
8b:bb:c1:7a:09:70:4e:30:a9:5f:6f:b0:3b:2a:c9:
80:2c:32:dc:74:30:79:62:cd:b1:42:73:56:60:f0:
28:89:83:11:82:b6:d5:70:ff:ff:e3:13:82:82:4f:
cf:3f:56:ae:df:54:bf:89:75:75:de:c9:a8:6b:43:
ca:8d:90:62:58:93:0d:9d:c9:22:db:bf:63:5d:80:
73:1e:cc:c2:f4:9e:c9:90:b7:f9:65:1b:ee:0b:2d:
97:ee:96:c4:29:3f:a2:f1:2e:17:38:ec:eb:56:e8:
1e:91:a6:b1:d2:53:8a:b7:ef:14:4b:d1:4f:65:ad:
a5:04:52:34:ff:23:35:63:0d:79:8f:8e:21:b9:55:
08:b2:15:14:fc:c6:38:73:25:d3:80:ae:db:ef:b4:
77:7d:b1:eb:fc:62:7f:f0:d7:fd:d8:7b:0f:2d:b1:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9D:E9:CF:0B:E5:91:A7:C9:A3:B7:5F:4D:92:E5:41:0B:35:17:C5
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8f:5c:69:8d:d7:67:90:89:d6:8d:cc:dd:1f:fd:73:3d:61:
1d:29:ee:b3:87:1b:fb:3e:c3:56:70:b6:56:66:87:fd:c7:2a:
eb:a5:36:10:38:26:a6:9c:4d:76:b4:18:b3:a3:a6:42:d8:c5:
82:3c:3c:99:c2:6d:55:ac:ca:ab:f4:0c:f2:49:0f:e9:77:75:
7b:2e:f2:33:78:14:58:80:b3:ae:6b:0b:29:32:4f:67:0d:83:
b0:2e:4e:3a:d5:7e:ce:3d:67:3d:b5:5f:41:2b:c6:b8:05:f6:
7c:aa:a0:2a:c6:a3:4b:04:fe:fe:e6:2a:ae:f5:ff:43:06:76:
0b:7a:bc:5e:73:a6:27:f4:43:02:80:b5:05:ac:60:35:a2:47:
af:1c:5c:aa:7d:f8:86:7b:d0:ae:7b:ce:9a:b0:07:39:43:98:
db:d7:ac:3b:87:d4:af:11:e8:69:51:3e:77:8a:e4:19:9a:bf:
47:51:f5:da:43:62:46:73:2a:97:b7:3e:03:68:72:1e:8e:28:
85:d7:05:6e:a2:01:c9:a3:e2:0c:d8:a2:fd:a5:42:b7:46:48:
bd:85:81:85:a9:82:8b:ea:f3:2b:db:65:34:70:37:79:f2:02:
e5:b9:fe:bf:72:c1:67:1e:e6:ef:ce:0b:b2:bd:fc:28:b6:84:
cb:b2:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:47:01 2026 by rpki-client