Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: YoBsnb4ISb+oPwNDZoevpd50sC10IKhV1+WQwEFwEKQ=
Subject key identifier: 9E:D7:34:C4:82:4C:00:21:2D:5E:2E:5D:52:29:29:78:12:FD:4E:0E
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 01A020564752B8BBE0712584AC9985ED9F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 199C
Signing time: Thu 20 Aug 2026 18:02:00 +0000
Manifest this update: Thu 20 Aug 2026 18:02:00 +0000
Manifest next update: Fri 21 Aug 2026 18:02:00 +0000
Files and hashes: 1: 88YpHUQ6fLDeh74-HidaPCz4rbs.roa (hash: caUHmlgsNHqTmPixxtDsM5vYCINLVzDzb2yA6/5Oj2Y=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: mIqaW6V+LkPEqK88/TWpeU9UJUOFTnF0/oijETBeZSM=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:47:52:b8:bb:e0:71:25:84:ac:99:85:ed:9f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Aug 20 18:02:00 2026 GMT
Not After : Aug 21 18:02:00 2026 GMT
Subject: CN=9ed734c4824c00212d5e2e5d5229297812fd4e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:59:64:85:0b:74:53:23:9f:a7:38:1e:cb:
b7:52:63:f3:f4:d1:9c:db:95:b9:ea:26:66:d0:60:
1c:e6:a3:ea:6d:a3:84:e3:fe:ce:11:bb:dc:6b:29:
40:f6:2f:a7:0a:6d:bc:f3:76:47:38:ce:32:09:c7:
94:66:4c:3f:31:ef:62:02:97:f4:44:d6:a9:12:dd:
4e:03:d2:f8:d5:e3:bb:26:6e:a3:f9:d8:95:91:63:
d6:98:40:32:ef:26:d1:19:e9:0b:53:41:e8:79:a8:
c1:44:25:30:e0:90:98:2d:7d:2b:ff:5f:46:57:36:
2a:c7:85:cf:63:90:9d:52:19:ef:04:bc:b0:dd:b1:
9f:e6:80:9c:f0:88:f5:e8:3f:3d:18:5e:d1:38:f7:
50:1b:27:85:99:c6:c8:94:74:76:5a:b3:6a:96:61:
f0:aa:77:da:41:18:8d:a2:6f:9d:36:06:ab:97:83:
0d:51:e2:dd:37:d7:35:02:2d:dc:b8:45:ab:ad:bc:
c3:55:94:3a:66:c1:7e:34:2c:48:06:17:fe:d4:0f:
cc:b4:97:82:92:87:d2:c7:a8:bd:d6:f7:54:68:70:
30:0c:49:80:d6:08:97:8b:e0:4c:73:95:82:8b:d3:
f0:10:ee:7d:31:ee:a6:b7:15:ef:de:1b:3f:08:24:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D7:34:C4:82:4C:00:21:2D:5E:2E:5D:52:29:29:78:12:FD:4E:0E
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6e:26:33:ed:eb:06:99:0f:e0:e7:27:6b:e9:d9:68:63:6d:
d1:1e:2c:67:e2:af:d3:55:65:e2:52:61:18:ca:9c:2f:ea:c7:
75:80:27:a7:82:88:bf:12:5d:60:49:eb:1d:b6:08:e6:73:3d:
3e:91:c7:9c:ab:e3:d5:eb:1a:b3:09:0b:b4:c5:78:09:82:15:
45:b2:d6:6d:c9:3f:b0:6b:f6:d3:e5:5c:b0:8f:ef:fc:42:4b:
9e:c5:cf:7c:a8:62:20:2b:25:76:e7:b0:08:9b:18:be:9c:7d:
7d:13:f1:05:a2:b7:18:69:b4:d6:0e:d0:eb:5f:09:94:64:90:
fe:a2:40:25:38:0c:4a:23:7c:d1:41:51:de:89:9f:9a:50:8d:
e3:20:00:ca:7f:8b:85:04:d2:a9:73:5a:b4:42:84:65:36:5e:
dc:d1:a3:f6:76:04:b6:d4:59:7c:f7:82:4b:dd:11:76:31:6a:
0c:75:85:96:aa:76:90:54:ad:f8:b9:41:df:b8:e6:2f:fe:12:
26:71:52:e0:3f:89:97:d1:51:11:9c:72:a3:91:8d:25:47:4c:
10:aa:46:ba:64:63:b2:47:31:c5:6c:d5:56:f1:7c:d4:1e:ad:
b9:a4:92:7a:b2:aa:55:48:c4:96:f1:4b:48:1c:ee:e3:82:07:
3a:5c:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:39:47 2026 by rpki-client