Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: nXxp5Z5uDRDXIYTCm5OUWSSKJEj2NCl4vAmyg+WyzVo=
Subject key identifier: 86:EA:27:52:B0:33:49:B9:20:AA:E1:9C:78:4D:B3:06:4C:DB:48:6E
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 01A12AD71CA899313A0E2ECAFB133C50D284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 1A26
Signing time: Sun 11 Oct 2026 12:01:43 +0000
Manifest this update: Sun 11 Oct 2026 12:01:43 +0000
Manifest next update: Mon 12 Oct 2026 12:01:43 +0000
Files and hashes: 1: 88YpHUQ6fLDeh74-HidaPCz4rbs.roa (hash: caUHmlgsNHqTmPixxtDsM5vYCINLVzDzb2yA6/5Oj2Y=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: aDukV1CVl63KSadXk8Z71amLWjG59QM0HH2oTD/9N2c=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d7:1c:a8:99:31:3a:0e:2e:ca:fb:13:3c:50:d2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Oct 11 12:01:43 2026 GMT
Not After : Oct 12 12:01:43 2026 GMT
Subject: CN=86ea2752b03349b920aae19c784db3064cdb486e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:e6:5a:57:81:06:19:59:2e:d5:6d:92:00:
48:3b:24:88:3f:6c:93:04:27:a5:f3:f4:e5:a6:1e:
d6:b0:a9:18:56:f2:44:0b:c7:fb:63:7c:47:5b:98:
df:c7:2c:b0:4e:10:64:8c:b5:95:9b:a0:29:94:55:
7b:0f:f6:39:dd:5b:f5:07:63:14:e7:a8:ef:78:d9:
3e:66:92:0b:2a:c7:81:31:ea:ff:d8:07:92:54:d2:
7d:39:8e:1b:cd:7f:ec:18:2f:9a:9a:8a:31:64:a5:
12:65:d2:34:d4:b5:3f:36:80:60:2c:a4:fd:e1:94:
2d:59:6d:c2:f1:fb:d6:5d:e9:e0:64:04:f7:d1:a0:
18:07:84:2b:2c:43:58:45:59:6c:69:e2:cd:c7:c2:
b3:5d:6a:46:23:52:ee:60:c4:90:84:60:82:1e:cd:
c7:2d:df:b2:bb:fd:13:c2:fc:a1:10:c6:77:78:9f:
22:f7:88:b1:83:13:d5:19:c3:2b:78:49:af:aa:03:
c3:84:c3:c1:96:7d:27:d2:22:83:38:56:54:b7:8b:
53:76:6e:30:bf:6d:34:12:e1:c8:45:f4:69:d1:d0:
cc:a9:d2:67:c7:71:45:c9:b5:d2:32:29:84:1e:78:
77:08:89:ac:71:8d:7c:00:eb:49:39:f4:3f:5f:32:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EA:27:52:B0:33:49:B9:20:AA:E1:9C:78:4D:B3:06:4C:DB:48:6E
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:50:57:78:92:f6:f8:2a:ed:66:e3:a7:83:73:6b:2d:b6:3b:
7d:f0:e7:b9:e8:27:f1:cb:d1:0e:68:1a:1b:7a:cf:ff:c1:ca:
98:31:8b:9d:64:20:44:29:d0:95:05:d5:ff:ea:94:1f:b0:3b:
5c:fa:ab:5d:1e:cf:5e:12:f5:58:04:90:58:c2:ad:db:9b:58:
8c:98:0c:b4:22:be:fd:e8:bb:16:b0:8b:af:d0:4b:af:43:da:
97:13:7b:8c:cb:d4:dd:12:34:77:30:1c:1d:40:3e:de:c0:d9:
40:0a:62:7d:a7:45:3d:7e:16:b2:c8:c9:65:56:4b:2e:85:54:
15:ad:bc:c1:7f:a0:57:6a:9e:54:18:74:62:ba:23:1b:9f:1c:
a5:71:3b:81:d9:05:a1:88:c7:15:36:dc:66:ca:76:ce:0f:a4:
1a:f5:05:45:17:5f:49:15:aa:77:3a:51:89:2e:54:47:ed:60:
df:0b:c6:01:8b:e8:54:89:6e:ed:f3:ca:7c:33:92:04:e1:2b:
66:1c:b8:ae:2c:e5:79:f6:ab:a8:67:76:fd:19:d2:79:c3:ba:
c1:27:87:48:10:60:74:a8:0e:ef:5c:63:cf:f6:30:19:d5:13:
54:1b:a5:df:10:99:74:f3:a4:c0:69:98:82:6c:62:36:2d:dd:
ff:ce:07:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:21:10 2026 by rpki-client