Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: E/SF49775Aglw4e7h1LtutyRA/Qzn7YlnJdZAJgKwcQ=
Subject key identifier: E3:0A:77:12:BD:95:B6:D7:DC:8B:BE:0C:1D:65:A0:4A:4E:45:04:62
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019C7DB6E205EEAD8310A74FF2F0C8D43DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 17BA
Signing time: Sat 21 Feb 2026 01:01:03 +0000
Manifest this update: Sat 21 Feb 2026 01:01:03 +0000
Manifest next update: Sun 22 Feb 2026 01:01:03 +0000
Files and hashes: 1: BaOM7EQowAQp3mVPiVLG92UAT5o.roa (hash: Vir9bCNKr3xiAR3YQztvr+gFcAXrFl1bsNs/wks4Tw0=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: tKzXuNd01Z86anhZk2ZLHPRM7Wp7hJWORI0PQ5sLGts=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7d:b6:e2:05:ee:ad:83:10:a7:4f:f2:f0:c8:d4:3d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Feb 21 01:01:03 2026 GMT
Not After : Feb 22 01:01:03 2026 GMT
Subject: CN=e30a7712bd95b6d7dc8bbe0c1d65a04a4e450462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:6e:dc:1d:dc:04:34:b7:e3:a0:7e:e2:67:
ae:b1:74:a7:9a:1e:52:37:5f:6c:c4:39:83:f8:7b:
cc:e6:05:31:d8:23:08:f5:ae:2b:24:8f:3e:f4:21:
55:8d:e3:d3:77:d3:6e:ec:c3:eb:82:63:22:ff:28:
39:ae:c2:7e:87:a7:5d:7b:b2:1d:0b:aa:01:75:e2:
4c:90:14:4c:1b:92:25:55:01:e5:75:0f:78:05:78:
c8:3d:1f:cf:96:50:6f:09:cb:53:79:3e:9a:a5:81:
7b:db:28:4c:6e:63:6b:e5:0e:54:4a:9d:d1:ae:c0:
5f:72:d4:fa:0d:83:9c:3e:a9:0f:2b:aa:bb:85:fb:
ff:99:d8:3b:15:36:2b:e4:0c:bc:a2:76:37:e3:1e:
9d:2f:d4:63:4c:00:2e:d8:29:83:50:41:43:ce:3a:
af:e2:42:69:72:f3:07:42:35:e5:9f:74:a8:22:9d:
af:74:90:99:b0:27:70:ef:dc:b8:c9:58:b0:a0:97:
a5:34:37:78:3c:95:f5:01:5d:7c:66:42:45:9f:62:
fb:a3:af:40:55:13:12:19:8e:fc:67:59:58:38:ec:
6e:c5:3b:b5:8f:88:79:ab:f8:f2:a7:0e:b1:7c:9e:
29:25:af:67:4c:1b:56:10:c9:82:e4:24:89:a7:9e:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0A:77:12:BD:95:B6:D7:DC:8B:BE:0C:1D:65:A0:4A:4E:45:04:62
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b7:d0:af:90:c9:a7:15:e6:48:ae:9e:b9:7f:14:f2:ba:24:
66:91:b0:8b:0a:ff:3f:3e:fa:81:00:9d:bb:37:b2:7f:43:4a:
36:92:7b:fb:a1:e2:92:f7:b8:6a:ce:c3:e5:be:bb:da:cd:12:
9c:fb:87:38:44:84:b0:ce:aa:a9:7d:01:03:50:cb:11:65:c5:
10:d8:27:9f:51:bf:9d:e2:49:f1:4a:5b:e0:a6:ed:ef:64:ff:
bb:99:c0:39:c3:2d:95:38:1e:e8:27:b3:31:56:b2:8d:4e:2d:
1a:ee:12:6b:90:7b:49:e1:83:03:b8:d8:1f:98:4b:fb:b8:da:
70:dc:52:aa:62:f0:b4:81:25:0e:99:ab:43:98:10:38:da:3c:
73:fe:cc:14:96:34:09:50:ea:31:f4:28:8a:4a:3c:03:fd:e8:
c4:df:df:e7:59:ab:1c:7d:50:79:3a:a4:20:f5:2f:9e:fb:0d:
6f:8f:21:3e:7c:7d:d5:73:55:31:bb:2a:2b:27:b3:73:81:a0:
73:f9:0d:5e:08:7d:f4:b2:85:e4:4f:50:da:bc:48:86:96:78:
e8:51:8b:a2:0f:d9:4c:ba:18:48:4e:78:85:02:b4:39:95:71:
b2:47:cf:a1:45:f8:af:0a:8d:98:8f:3d:30:eb:58:25:b1:fc:
d9:7b:92:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:09:13 2026 by rpki-client