Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: w8Js+DpoGSZNTNiU4TfzGFMqIrptU/1MTheZ/Srh5MY=
Subject key identifier: 65:90:95:0E:73:F6:9B:86:F2:A7:C4:9B:91:E2:0E:C4:73:37:62:39
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019D67631AB46C1452CF81575B264300A4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 1833
Signing time: Tue 07 Apr 2026 10:00:41 +0000
Manifest this update: Tue 07 Apr 2026 10:00:41 +0000
Manifest next update: Wed 08 Apr 2026 10:00:41 +0000
Files and hashes: 1: BaOM7EQowAQp3mVPiVLG92UAT5o.roa (hash: Vir9bCNKr3xiAR3YQztvr+gFcAXrFl1bsNs/wks4Tw0=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: GeBgmwhPpoova9fV6jLdlWBx3ivCRu4iiPywcvVT8Fc=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:63:1a:b4:6c:14:52:cf:81:57:5b:26:43:00:a4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Apr 7 10:00:41 2026 GMT
Not After : Apr 8 10:00:41 2026 GMT
Subject: CN=6590950e73f69b86f2a7c49b91e20ec473376239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:be:56:ec:6d:3b:77:9b:ba:c0:e1:f4:62:
3f:ab:11:15:31:62:eb:18:47:43:e0:0c:84:a0:0f:
f8:1e:e9:57:3e:0f:b3:56:45:16:30:c3:10:b3:c4:
f3:6b:f6:50:d5:5a:28:5d:c5:05:29:a4:7f:15:08:
4f:c5:67:16:03:e7:65:f9:a9:9b:f1:39:99:90:2b:
5e:7d:40:52:57:42:d9:70:17:66:d3:12:c0:1e:86:
44:ec:9b:60:9b:47:77:3f:a5:82:4e:6a:44:d7:5b:
d9:6c:a3:2d:b5:8f:b8:fe:21:79:91:d3:46:92:cc:
4d:24:5d:53:27:85:0f:4d:a2:9e:fd:1d:71:a0:78:
1e:bb:52:30:0a:7e:a5:9c:66:27:7d:ac:1f:9c:8d:
da:00:dd:3f:25:12:07:0e:7d:af:75:c0:74:a9:e2:
18:8f:fd:45:4a:4f:4d:48:b2:86:63:d1:99:ab:02:
9e:57:58:b8:30:37:d8:7f:76:af:ad:e0:09:63:f7:
bf:db:65:0e:7c:62:b6:ac:06:f9:9d:c7:95:b0:eb:
b5:12:d2:58:73:04:6b:0e:7e:28:09:16:62:8a:90:
21:5d:1c:2c:24:ee:58:23:18:df:04:7b:d6:b8:87:
4f:3a:5e:3a:2c:c9:45:78:6c:55:a1:42:20:5a:70:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:90:95:0E:73:F6:9B:86:F2:A7:C4:9B:91:E2:0E:C4:73:37:62:39
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d1:4a:34:2e:7b:2d:16:45:ab:87:7c:93:40:3b:23:63:d8:
c6:0d:af:dc:c3:7b:e9:ca:2b:76:91:5b:0e:b4:a6:60:0a:6f:
8a:b4:4c:4a:e4:d9:32:51:1c:f1:ca:9a:7b:b3:4f:36:08:a2:
73:09:0c:41:a4:71:31:fc:49:2b:63:b4:5a:7d:b4:cb:0a:45:
d7:f0:64:8c:21:1f:3c:64:ef:9e:f1:81:d3:4a:db:fe:b8:3b:
8e:2c:72:da:f1:39:70:d5:62:6e:e2:a8:38:42:19:79:8b:77:
b6:54:75:d1:8d:34:62:f2:96:cb:90:1d:35:d9:26:d8:cb:57:
27:bf:63:66:e4:5b:9b:02:72:d0:57:98:0d:e1:2e:43:e5:e0:
c2:ea:2d:ca:df:30:2b:94:17:01:19:b6:56:47:ef:2b:50:db:
fb:da:4a:c8:a9:37:09:62:e2:eb:ae:c3:4a:9e:58:03:15:db:
51:fe:26:5a:e6:5c:f5:0b:7f:47:de:17:b5:42:09:50:a9:90:
3a:1a:69:65:c1:be:6f:dc:5a:d9:7e:e3:67:cc:6b:b5:a4:2e:
7b:43:1b:b2:a2:5e:a6:c9:0e:84:2d:97:a8:1d:b4:c8:37:04:
42:ee:e4:63:c6:30:41:5a:eb:08:28:9f:21:e4:ea:b3:ca:82:
f4:b5:dc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:32:28 2026 by rpki-client