Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: pO+3KLhpdMQ3/i+BaSlUGh5wIAOklL15AwATxJFhg2Y=
Subject key identifier: 48:83:22:82:97:C2:E6:C3:40:1B:D2:03:66:B8:4D:EB:55:93:33:95
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019F36A9535E89A317FE3F44D038C04EF68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 1923
Signing time: Mon 06 Jul 2026 09:01:34 +0000
Manifest this update: Mon 06 Jul 2026 09:01:34 +0000
Manifest next update: Tue 07 Jul 2026 09:01:34 +0000
Files and hashes: 1: 88YpHUQ6fLDeh74-HidaPCz4rbs.roa (hash: caUHmlgsNHqTmPixxtDsM5vYCINLVzDzb2yA6/5Oj2Y=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: GXSJ4r66gamXZ1eGN80VPp9jPWJEfJSdjIomrDTLYxs=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:a9:53:5e:89:a3:17:fe:3f:44:d0:38:c0:4e:f6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jul 6 09:01:34 2026 GMT
Not After : Jul 7 09:01:34 2026 GMT
Subject: CN=4883228297c2e6c3401bd20366b84deb55933395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:d9:43:f1:3a:e2:9b:61:27:cd:c0:05:79:
aa:30:73:25:f9:0a:2c:b0:ed:2d:2e:df:8d:2c:b3:
f2:d8:47:7f:44:d2:3a:b9:fd:23:d6:bb:e2:c6:45:
14:c5:8c:c3:ea:fb:15:5c:a8:e9:ba:d0:a0:4a:d1:
67:a5:74:d9:65:32:e7:d0:32:eb:8b:4d:73:25:a1:
bb:1a:4d:6d:88:2b:f1:9e:bc:a9:6e:89:08:40:91:
1c:25:b0:03:2c:cd:f0:9b:64:78:63:77:9b:2d:93:
a3:fa:ad:b0:c2:e1:c0:13:6c:2a:c0:0e:7f:a9:5a:
18:40:ad:9b:fc:6f:7a:44:66:ce:9d:99:14:a2:f9:
82:f2:6d:17:08:90:63:40:28:ac:9d:9b:c4:fb:02:
8f:6d:12:77:c9:1e:3a:32:fa:83:1e:7d:bc:2f:01:
e7:9e:2e:aa:df:19:24:61:69:18:41:42:16:f6:ed:
43:ad:c2:b7:01:3b:fd:83:0a:f2:1c:6f:eb:79:38:
52:1e:1a:cf:1c:4b:0f:4b:91:58:e5:06:ee:6b:bb:
95:48:46:df:28:53:36:ac:92:55:d3:28:3e:57:a4:
b4:02:3a:15:88:bd:22:99:f1:13:8f:3a:2b:23:92:
bd:de:d2:39:6b:64:ca:dd:04:35:43:f9:c6:c9:7c:
29:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:83:22:82:97:C2:E6:C3:40:1B:D2:03:66:B8:4D:EB:55:93:33:95
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f6:85:5c:18:5b:c6:74:92:01:ff:93:74:62:44:f9:c4:ae:
cb:69:b9:e5:f8:52:88:4e:dc:b6:03:f4:b1:4b:7a:a4:1a:02:
76:c4:28:9e:6e:49:09:f1:b8:86:ef:6c:95:6a:df:c4:6b:12:
85:27:57:b7:be:cd:c7:64:d7:7a:04:5f:da:2e:e2:85:bf:97:
20:59:9c:c5:ee:a4:25:34:93:21:57:0c:10:3f:8a:26:7c:30:
d2:96:d0:b4:ad:8c:97:fc:e2:66:0b:b5:a8:28:cb:f5:8b:89:
7a:82:ff:06:91:ba:2c:b0:11:e4:9a:9b:34:3b:e4:b0:bb:93:
99:43:98:95:fa:cd:f4:22:dd:d3:f4:92:16:e0:eb:0c:8c:a0:
38:27:37:97:d3:be:06:f7:bf:18:f8:54:65:7e:15:81:34:9f:
ad:5e:af:4e:23:fe:bd:76:b5:35:33:63:38:a6:06:59:2b:48:
81:b9:76:4b:73:d4:fa:9f:ae:d2:99:60:5e:b5:43:fc:39:51:
95:69:90:e5:be:b0:24:64:10:7b:a8:ff:48:f9:59:a9:35:1c:
2f:ba:94:4e:96:3c:3c:d4:e5:15:b0:09:de:65:07:26:d9:b2:
ac:a6:44:05:0c:47:11:84:8e:21:b7:e5:94:c7:2a:3e:34:21:
ea:c4:d7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:26:57 2026 by rpki-client