Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: 3I/TGfOndwWc5ecU/JzuF0y/Z05i+v+CjyqKJLD0pz8=
Subject key identifier: 81:E9:CA:3F:01:B4:59:CD:6D:6D:41:C7:21:80:13:A1:F8:50:41:BC
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 01A12EB4361AA536A8F1259DD68A759A507A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 1A28
Signing time: Mon 12 Oct 2026 06:02:04 +0000
Manifest this update: Mon 12 Oct 2026 06:02:04 +0000
Manifest next update: Tue 13 Oct 2026 06:02:04 +0000
Files and hashes: 1: 88YpHUQ6fLDeh74-HidaPCz4rbs.roa (hash: caUHmlgsNHqTmPixxtDsM5vYCINLVzDzb2yA6/5Oj2Y=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: Rt0TM3TX2OMba4LQAqM6jWV5zcvkWos7bdMX1XmV9kE=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 06:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:b4:36:1a:a5:36:a8:f1:25:9d:d6:8a:75:9a:50:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Oct 12 06:02:04 2026 GMT
Not After : Oct 13 06:02:04 2026 GMT
Subject: CN=81e9ca3f01b459cd6d6d41c7218013a1f85041bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:c0:57:b1:4f:2a:b4:43:e7:98:1b:28:0b:
c9:6d:a5:c0:e7:dc:13:9a:57:d7:d3:ab:61:a3:c2:
5e:53:6d:a1:01:49:fc:42:7a:09:43:af:bd:7b:df:
a1:41:fe:9b:f4:d4:c9:f4:d6:17:e2:ae:34:fa:46:
14:b5:3e:e4:fd:f0:6a:a4:93:86:6e:79:60:4e:d5:
a9:c9:aa:39:29:c7:98:7f:66:6d:a3:6c:95:82:1c:
24:d9:9e:f7:a3:e1:be:dc:00:bd:96:06:ab:4b:dd:
74:dc:5b:ac:d7:38:d3:f8:73:f5:5a:52:1d:c7:65:
fc:9a:76:0b:61:b1:60:57:3a:d0:51:47:c7:bd:2d:
e5:59:8b:28:df:b9:b7:00:e8:09:89:ec:85:a7:76:
de:54:43:e3:ce:ac:24:1e:bc:10:e3:dd:2d:3e:64:
17:ff:7d:8c:ee:01:dd:1f:37:e3:28:e6:7e:1c:e9:
df:d6:29:f3:05:01:9b:4f:d3:ce:1e:3d:fd:b0:fc:
95:05:0e:37:6c:47:f0:7e:3d:c0:58:1b:dd:74:8c:
ac:db:fc:3f:1f:f4:a7:71:81:fe:af:fd:60:9b:ba:
80:ce:0d:87:51:e6:29:a2:cd:ba:70:44:83:c2:e8:
f9:36:25:1b:50:3b:34:d2:e4:98:5c:7a:e2:6f:6b:
d6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E9:CA:3F:01:B4:59:CD:6D:6D:41:C7:21:80:13:A1:F8:50:41:BC
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7b:b0:c1:eb:24:c5:68:dc:50:3b:5c:9b:60:77:34:8e:23:
b9:22:8c:90:05:94:96:3c:a6:2a:1b:7c:f2:0d:be:f8:77:1f:
34:d0:0a:0c:28:ea:d0:35:7e:83:12:0b:7e:87:a5:f4:a1:b4:
8e:6d:22:d5:40:a9:dd:8c:fe:89:4f:31:82:0e:82:d2:12:7a:
bf:08:0d:32:70:5e:13:76:c2:ec:4b:ac:de:71:da:12:19:59:
c6:76:e4:d6:eb:70:7c:bf:19:af:d4:a3:ab:2d:2d:2e:3a:cb:
12:c9:79:ea:59:ed:19:c5:ed:6e:d6:4d:4f:b1:d3:0d:1b:20:
aa:c9:7e:af:60:29:a0:4b:08:b3:64:52:b7:25:29:6d:4c:94:
e2:dd:09:a1:62:a3:a1:9b:db:50:83:b2:30:0f:7c:90:e6:c9:
6c:d2:5e:32:6a:76:bd:b2:00:b1:07:21:91:5c:dc:6b:4f:59:
eb:d4:27:b9:d1:6c:fd:49:36:b0:fe:72:b8:37:61:9c:22:32:
65:01:a5:18:0e:6b:4d:62:66:63:18:ca:6e:50:93:7e:d9:98:
ad:55:30:f1:53:bc:a9:74:ec:30:b9:64:1d:ae:25:dd:3a:f7:
ed:62:1e:35:f4:7d:cd:4a:c1:fd:bf:61:18:60:3a:cf:93:cf:
50:b9:ab:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 17:31:27 2026 by rpki-client