
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
File: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json)
Hash identifier: vGBEAygQCjs7+frNr3NHFmC6cm0p6eonjzTJ2QQIuO8=
Subject key identifier: 3E:D3:5A:06:4D:66:A6:B4:FC:08:26:45:C5:56:97:26:08:AD:B1:1F
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 019D9A3EE4E11E48FE1C0177EA0A102A790F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
Manifest number: 18E0
Signing time: Fri 17 Apr 2026 07:01:46 +0000
Manifest this update: Fri 17 Apr 2026 07:01:46 +0000
Manifest next update: Sat 18 Apr 2026 07:01:46 +0000
Files and hashes: 1: 1Xksz4pAytZHMrrT7gOuFdy8S2Y.roa (hash: HuNf5dwLg/DJcTEcYtbO8BEopfRLLX+209pk2+0+87w=)
2: 2fC7vMQsiVrreKahYpbYQeGBdlA.roa (hash: ryehnZ2Vw9hgtgH92x3ZW5v3KScwTU3lwsfzQRH2orI=)
3: 3uaiubVaYwEf-0pq3jOcgWmJ5CE.roa (hash: +/DqQfsYBGZvH5gjSmEEf+nK4crysz9SgEpPppJMqlo=)
4: I08p1jkDdJlEDsjwq053srkjN2k.roa (hash: La1YGwc3oCLT3rS+rl/RN0PZ9UFeOvqPsj5JGqvzCv8=)
5: KbtlTKcgt-X8HNV4rKo5uZlq6R8.roa (hash: 70QTuQkF5890Kc+PvR2XYv1coLUM/SKD0ZPfp0La8K4=)
6: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: uQrc2JfeMOJv9LD4Ve7SfWSJ72qmdE8KcOtCYoQPh9g=)
7: aFH3yZOCBvv0pwITn-ojOO9u5_Y.roa (hash: R+3z3be5a6cpJXKXgxNcsq7jkEToT3RKyUkCWxn8eBI=)
8: cbkmSv4A8E7qdpGnIA9EV1uMTfI.roa (hash: Etb18uo7Rn29ZvaJx07byCrsL8cUj5zuO8qDMwtLZ0E=)
9: g8lpKS3Uw8kC5lMG62drJ46w5hs.roa (hash: 83NMQZQtm0Gu60VzRcxhZibSAqmZFrS/fqUqV713Mcs=)
10: zQaBu8xvqsgQldV2qdnBjEZymN8.roa (hash: gNV6m/aR4O8Blczk03nyUg7ckGuOlJt+WZprd2w5EI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e4:e1:1e:48:fe:1c:01:77:ea:0a:10:2a:79:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Apr 17 07:01:46 2026 GMT
Not After : Apr 18 07:01:46 2026 GMT
Subject: CN=3ed35a064d66a6b4fc082645c556972608adb11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:16:71:06:16:b4:16:78:2a:43:b3:a9:22:
b0:22:7a:c0:d7:d2:80:bb:1d:88:55:41:6c:ae:16:
fc:d2:55:cf:26:0f:cc:58:c8:c4:51:fb:8f:a0:09:
ef:95:d4:9f:c0:89:0a:cc:c7:62:39:09:ef:3d:7a:
52:43:67:6e:93:01:af:48:45:7b:54:ba:76:2b:a0:
6f:ab:d2:b1:3d:2b:89:01:85:cd:d5:45:77:9a:57:
be:ed:35:73:67:ec:c4:a3:8b:ea:66:90:8a:f9:ae:
d6:1b:f8:4d:bb:d2:ec:d9:d2:fe:45:54:98:e4:02:
52:c3:a9:88:c4:e8:8d:ab:7f:67:d2:82:c5:8d:c5:
66:fe:5a:ba:cb:7a:3a:73:c0:41:3c:05:fd:e7:20:
98:32:bb:bb:6b:5d:98:9e:93:c7:11:c6:47:32:80:
69:0c:3f:74:0a:12:2c:0b:3a:b3:e3:31:e2:3e:69:
ec:83:d5:82:75:63:bf:35:05:4f:3a:25:2b:f6:41:
f4:15:b7:45:3f:7a:d4:01:29:4b:54:8b:27:04:36:
65:55:49:0f:f0:96:7b:0b:7b:a0:76:9c:8c:de:16:
49:21:16:d4:6e:d5:b7:07:1d:28:a9:a1:58:9d:76:
43:d7:21:24:e5:d0:40:df:1f:22:b9:a8:21:1a:fb:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D3:5A:06:4D:66:A6:B4:FC:08:26:45:C5:56:97:26:08:AD:B1:1F
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d8:33:d0:8d:f0:92:02:d9:45:60:dd:10:ea:92:cc:ff:e4:
52:a2:47:b9:94:a4:ff:32:01:a9:bd:9e:4f:50:58:d4:b2:9c:
6a:85:c6:73:4b:d9:5f:f7:50:af:4b:c7:4b:6b:10:cf:2d:8f:
4f:38:89:e6:7d:52:fe:53:89:71:6c:4e:26:af:2c:f3:5c:93:
76:02:f0:ff:ab:4a:ca:a7:72:e4:fb:e3:8e:a9:97:a9:a8:6d:
4a:95:5e:a7:f2:15:14:4b:9f:7d:a0:d0:b6:d8:4d:69:d6:d3:
70:ad:fd:3b:82:b2:52:34:a3:b1:1a:88:1c:75:86:6c:6c:a7:
29:12:db:c7:1e:4e:0b:2c:fd:e7:86:c5:2d:a4:77:4c:9d:39:
66:94:14:09:56:00:97:e4:28:e9:78:03:22:d2:54:f6:d4:23:
93:bd:45:6f:c0:7c:71:8a:1d:d3:cc:ee:18:db:92:19:28:bb:
0d:d1:66:dc:d3:e6:ee:99:f3:be:39:eb:12:29:96:66:e7:2a:
f2:88:b6:c4:ac:69:20:af:93:bf:4a:dc:75:8e:b3:7a:4c:bf:
6e:b1:0a:9b:23:66:da:68:7c:dc:d4:2a:da:ec:58:e1:8d:12:
8b:54:e6:1a:48:c8:27:76:e9:80:e6:06:8f:29:c3:ec:1d:1c:
8a:82:5d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:17 2026 by rpki-client