
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
File: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json)
Hash identifier: GDkjdFK0wdcfuHDxgmZQYngyLXhfZVr1fuUPpLaDYTA=
Subject key identifier: E9:22:F8:52:CC:80:3E:FB:96:20:74:80:D5:BF:78:E8:29:18:47:F6
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 01A14EAC34A22873517AFDA0087A88C026D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
Manifest number: 1AD4
Signing time: Sun 18 Oct 2026 11:01:10 +0000
Manifest this update: Sun 18 Oct 2026 11:01:10 +0000
Manifest next update: Mon 19 Oct 2026 11:01:10 +0000
Files and hashes: 1: 1Xksz4pAytZHMrrT7gOuFdy8S2Y.roa (hash: HuNf5dwLg/DJcTEcYtbO8BEopfRLLX+209pk2+0+87w=)
2: 3uaiubVaYwEf-0pq3jOcgWmJ5CE.roa (hash: +/DqQfsYBGZvH5gjSmEEf+nK4crysz9SgEpPppJMqlo=)
3: ABzQhF4nQJ_-i6GeJXswvNvfqi0.roa (hash: aonltyMdip7ckndP3bCkL6kJ0BckC9oOrLSPreRT5ew=)
4: I08p1jkDdJlEDsjwq053srkjN2k.roa (hash: La1YGwc3oCLT3rS+rl/RN0PZ9UFeOvqPsj5JGqvzCv8=)
5: I6YWMGhy7HKFnX7IA6Ri3Fvq3Bw.roa (hash: iO6NFnEQ5zNAX8dkduVe692P6jMfZQ6IsoktNrW/oGA=)
6: KGCcb8R3mFhKOzB7ORNy65xWKFA.roa (hash: Ajp/j3kPKp93dWmUdjd/K5QXcLMOEHm/dkcIjZanR8s=)
7: KbtlTKcgt-X8HNV4rKo5uZlq6R8.roa (hash: 70QTuQkF5890Kc+PvR2XYv1coLUM/SKD0ZPfp0La8K4=)
8: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: JR5VVw48wdHj9HsQLbv+2O5AqPnpOhySFjwNasikTPU=)
9: cbkmSv4A8E7qdpGnIA9EV1uMTfI.roa (hash: Etb18uo7Rn29ZvaJx07byCrsL8cUj5zuO8qDMwtLZ0E=)
10: zQaBu8xvqsgQldV2qdnBjEZymN8.roa (hash: gNV6m/aR4O8Blczk03nyUg7ckGuOlJt+WZprd2w5EI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:ac:34:a2:28:73:51:7a:fd:a0:08:7a:88:c0:26:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Oct 18 11:01:10 2026 GMT
Not After : Oct 19 11:01:10 2026 GMT
Subject: CN=e922f852cc803efb96207480d5bf78e8291847f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:14:3a:ac:52:c2:39:1c:a9:b4:dd:35:d0:
4c:90:2c:5c:97:cf:8d:83:cb:1c:2b:79:42:8b:70:
d7:c8:42:85:33:ce:e3:f1:a0:f9:65:4d:ef:0f:09:
72:44:93:39:66:32:10:3f:8b:68:2a:71:1c:6e:62:
80:6c:db:9e:06:ef:a0:d8:78:35:96:cf:1c:c2:c3:
55:53:2f:a2:2d:9d:01:65:51:d6:1a:5b:49:eb:25:
69:a9:86:71:d5:28:b9:a4:34:bd:96:5d:c5:b8:5e:
16:84:f6:9a:c5:13:38:0c:2e:28:a2:a6:ac:4a:5a:
76:c3:b0:ff:d8:29:3e:1e:3d:6e:29:b9:ca:fd:f0:
54:fc:a4:7d:7f:25:20:62:d0:e0:86:58:d9:9c:d3:
55:f0:43:c7:ff:a3:6f:e8:39:76:5c:17:3c:cf:9d:
49:62:63:0e:ef:e9:d1:5e:d7:29:f4:b0:a6:f4:56:
93:ec:d1:c2:ba:13:f8:c5:b5:7a:76:03:58:f6:e0:
28:59:db:0a:b8:24:8d:b8:08:08:2a:e3:bd:76:68:
b6:49:55:72:88:81:c5:3a:36:9b:5d:c0:ba:91:68:
92:1a:e2:dc:23:b4:5e:d3:65:78:8b:9a:12:ad:a5:
cc:49:2d:23:ff:ad:c5:05:5b:c1:db:c6:e5:f7:2e:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:22:F8:52:CC:80:3E:FB:96:20:74:80:D5:BF:78:E8:29:18:47:F6
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0c:18:45:f4:94:b5:d3:dc:93:c5:ff:22:d6:3f:8a:2a:05:
44:ca:b1:05:ff:16:c8:d3:86:9c:9f:3b:b9:f6:0b:54:3a:18:
91:5e:cc:3b:60:c1:1d:72:e3:44:7a:5f:24:5d:62:b0:4f:be:
77:27:d9:9d:be:a1:9e:e8:98:93:71:42:33:23:3d:01:af:3a:
c5:2e:12:06:8c:f1:83:ba:80:86:28:65:b8:05:5d:1d:83:58:
3f:99:89:7d:f5:5f:86:75:62:1b:ad:00:d1:f6:ec:28:1a:d5:
09:91:ad:7a:4a:6e:85:a0:38:58:59:e5:49:6b:ad:eb:ff:21:
28:46:a2:be:68:b5:43:09:17:4c:38:56:76:69:de:75:a2:a0:
dd:39:99:21:22:2e:d8:81:57:4a:cd:e6:a8:0a:6c:ae:58:56:
c2:81:91:4f:b1:3d:44:30:aa:31:10:6b:4b:36:e3:dd:ae:9c:
2d:1c:b6:e8:f4:85:11:7b:9d:b1:4e:21:3b:fa:ce:d2:72:52:
aa:6e:5f:13:04:4c:98:54:67:fc:05:2f:3a:49:af:b2:c1:28:
16:4e:54:18:10:27:9a:4e:63:30:b9:5a:fa:de:bb:eb:20:07:
f4:92:51:ee:fb:c2:eb:0a:c6:54:16:9f:c9:15:0e:7b:f3:fd:
53:2a:2a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFOrDSiKHNRev2gCHqIwCbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi
YTg4NDkwHhcNMjYxMDE4MTEwMTEwWhcNMjYxMDE5MTEwMTEwWjAzMTEwLwYDVQQD
EyhlOTIyZjg1MmNjODAzZWZiOTYyMDc0ODBkNWJmNzhlODI5MTg0N2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeAUOqxSwjkcqbTdNdBMkCxcl8+N
g8scK3lCi3DXyEKFM87j8aD5ZU3vDwlyRJM5ZjIQP4toKnEcbmKAbNueBu+g2Hg1
ls8cwsNVUy+iLZ0BZVHWGltJ6yVpqYZx1Si5pDS9ll3FuF4WhPaaxRM4DC4ooqas
Slp2w7D/2Ck+Hj1uKbnK/fBU/KR9fyUgYtDghljZnNNV8EPH/6Nv6Dl2XBc8z51J
YmMO7+nRXtcp9LCm9FaT7NHCuhP4xbV6dgNY9uAoWdsKuCSNuAgIKuO9dmi2SVVy
iIHFOjabXcC6kWiSGuLcI7Re02V4i5oSraXMSS0j/63FBVvB28bl9y55LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOki+FLMgD77liB0gNW/eOgpGEf2MB8GA1UdIwQY
MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt
ZTEzZTU1NzljNWRjLzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj
LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAwYRfSU
tdPck8X/ItY/iioFRMqxBf8WyNOGnJ87ufYLVDoYkV7MO2DBHXLjRHpfJF1isE++
dyfZnb6hnuiYk3FCMyM9Aa86xS4SBozxg7qAhihluAVdHYNYP5mJffVfhnViG60A
0fbsKBrVCZGtekpuhaA4WFnlSWut6/8hKEaivmi1QwkXTDhWdmnedaKg3TmZISIu
2IFXSs3mqApsrlhWwoGRT7E9RDCqMRBrSzbj3a6cLRy26PSFEXudsU4hO/rO0nJS
qm5fEwRMmFRn/AUvOkmvssEoFk5UGBAnmk5jMLla+t676yAH9JJR7vvC6wrGVBaf
yRUOe/P9UyoqUQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 14:40:14 2026 by rpki-client