Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: P3/g9CmpH+5SW7H1525sbEl01kChIr69vUpA1ywoL3s=
Subject key identifier: 61:D7:77:41:50:5C:2E:E8:1A:C7:4D:FC:FC:A1:17:5D:52:39:3D:CB
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 01A11D5213C788730FB5E2D693BB88D255E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 1A1F
Signing time: Thu 08 Oct 2026 21:01:20 +0000
Manifest this update: Thu 08 Oct 2026 21:01:20 +0000
Manifest next update: Fri 09 Oct 2026 21:01:20 +0000
Files and hashes: 1: 88YpHUQ6fLDeh74-HidaPCz4rbs.roa (hash: caUHmlgsNHqTmPixxtDsM5vYCINLVzDzb2yA6/5Oj2Y=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: p3PIvD1xQFUC6bld3cOjFweQisnk6y5ugjDqyG+Ybtw=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:52:13:c7:88:73:0f:b5:e2:d6:93:bb:88:d2:55:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Oct 8 21:01:20 2026 GMT
Not After : Oct 9 21:01:20 2026 GMT
Subject: CN=61d77741505c2ee81ac74dfcfca1175d52393dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:48:82:cd:68:32:a5:a2:61:d3:3a:c1:1b:
22:80:a7:25:c7:c8:cb:fc:5b:d4:a4:5c:3c:2b:02:
51:66:a3:05:eb:ec:2f:62:0d:55:49:89:01:70:1e:
78:b3:94:92:d1:ae:42:0b:51:f8:fb:71:d8:b7:27:
33:98:46:87:6f:d6:dd:60:ff:9f:ca:31:a3:0c:dc:
3e:d0:7d:11:54:65:33:94:ea:06:c9:4f:a2:4d:6c:
aa:9f:6a:d1:c7:60:e2:91:be:dd:75:6b:55:69:0f:
fa:74:2f:6b:37:98:74:9b:29:39:04:92:06:7a:0b:
fd:c8:19:00:70:ea:8d:0c:a6:d3:de:f6:dd:ce:26:
16:ef:5f:60:c5:3b:57:6d:80:10:0a:16:71:32:67:
40:37:d7:86:22:ee:05:28:28:7d:0b:fc:60:47:26:
20:a7:97:12:e0:73:e6:75:08:fc:4f:b9:21:71:3c:
ab:ab:21:84:33:b3:13:69:73:9f:af:7a:9d:c9:87:
c7:93:97:c5:c7:d2:53:3d:b4:7e:98:89:32:97:08:
ef:5c:71:cc:31:f8:f5:ee:b1:f5:b8:df:aa:de:0e:
39:20:7a:81:76:7f:f4:85:43:a5:96:40:ef:cc:d1:
68:c5:27:72:39:05:58:48:75:15:eb:c6:97:dc:dd:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D7:77:41:50:5C:2E:E8:1A:C7:4D:FC:FC:A1:17:5D:52:39:3D:CB
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:17:07:8b:bd:3e:89:3c:df:b3:82:45:c5:d5:8d:04:f2:e2:
7a:48:89:5f:df:6f:a5:ef:36:02:bf:1c:4b:3c:0b:fb:b1:22:
89:96:58:03:b6:2c:d2:cb:22:57:27:a4:5d:6c:a3:6a:01:4e:
05:a6:41:fc:1a:52:9b:8f:87:cf:01:67:04:73:27:0c:44:c1:
fd:f4:34:fd:34:26:d2:dc:af:bc:93:b8:a8:7c:4d:e7:2b:20:
42:15:dd:4f:53:fc:9e:96:da:fd:d4:c5:f7:43:3d:af:a8:b7:
05:81:b3:49:db:81:8e:4f:0d:d5:d2:9e:81:24:f2:f2:1e:62:
96:a2:aa:6b:a7:c5:74:3c:71:37:04:7a:57:e0:58:3c:c8:fa:
ea:55:49:a8:b0:0d:2f:08:a2:37:bd:aa:24:95:da:6b:60:24:
8b:c6:ec:66:e7:40:51:a2:0a:a4:6a:1a:93:56:ae:3a:3b:c0:
69:62:cd:31:b2:26:75:9a:5a:e7:73:d7:84:a3:b2:d1:74:ea:
7e:85:25:1e:2b:98:c2:ab:21:e8:d0:0a:6d:31:1e:61:19:1d:
29:67:45:27:d7:34:d5:c7:dd:d0:73:b8:7f:ab:23:20:fe:35:
41:c4:1b:e2:49:bc:16:c5:3c:bb:1d:a3:a9:f5:9d:88:43:66:
0f:18:60:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 05:25:14 2026 by rpki-client