Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: q8/tEl/QSoPdm/beJpgvzDDexQtzFX4GYCtrlrFWrsk=
Subject key identifier: 99:9B:6A:00:0D:CD:8F:49:AF:92:AE:A1:04:6E:AF:58:52:A1:40:A1
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019E20C895E8091E06D43AAF573BC239EEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 1893
Signing time: Wed 13 May 2026 10:01:16 +0000
Manifest this update: Wed 13 May 2026 10:01:16 +0000
Manifest next update: Thu 14 May 2026 10:01:16 +0000
Files and hashes: 1: BaOM7EQowAQp3mVPiVLG92UAT5o.roa (hash: Vir9bCNKr3xiAR3YQztvr+gFcAXrFl1bsNs/wks4Tw0=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: RAS6ccshfk1wWzgOHtTIdlN3Sjh4EFLz7Txbsn6Tu9Q=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:95:e8:09:1e:06:d4:3a:af:57:3b:c2:39:ee:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: May 13 10:01:16 2026 GMT
Not After : May 14 10:01:16 2026 GMT
Subject: CN=999b6a000dcd8f49af92aea1046eaf5852a140a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:0b:22:db:10:76:54:86:60:c1:b6:03:e8:
59:6e:b5:25:fd:b7:5d:3c:d9:64:0b:24:c4:83:88:
ef:68:18:f8:97:cb:96:8b:17:3b:8c:74:7f:76:d7:
19:e5:58:e2:3d:58:0b:cf:ca:af:46:95:69:82:12:
c1:95:10:52:f2:f7:53:34:98:ff:14:8e:77:6c:3b:
2b:0b:90:1f:67:24:2c:35:72:96:02:0f:85:d2:89:
00:aa:f3:81:bc:b1:e6:9c:13:89:9e:f2:bd:af:bd:
f4:cc:19:99:ac:ab:3a:7b:16:d5:b0:f7:78:2c:37:
53:73:de:86:7f:6c:a9:f8:e6:85:99:de:59:3e:98:
b2:ef:1c:0f:3e:a6:6e:e9:16:0d:cd:93:b9:5d:b4:
0a:ed:70:9e:73:98:d1:59:f9:9d:e8:1b:53:20:79:
3e:0a:c9:60:ff:ca:0e:b0:7f:e3:84:56:cb:0f:9d:
b8:ae:2c:02:10:22:82:ee:44:af:04:9e:33:98:93:
be:7d:57:aa:b7:58:13:a9:3a:8f:4e:f5:3f:44:6a:
82:b3:7e:3c:87:df:09:be:83:d0:a1:dd:d2:3f:d5:
85:b1:c2:0f:b2:55:39:48:02:9c:9b:9d:b6:20:3d:
87:64:f9:37:f0:d5:f6:b9:2d:f4:72:7f:af:93:45:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9B:6A:00:0D:CD:8F:49:AF:92:AE:A1:04:6E:AF:58:52:A1:40:A1
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a4:24:39:59:c2:bd:5a:f1:7c:01:17:c9:ab:6c:4b:0f:ef:
52:16:55:81:3a:5f:3d:89:c3:8d:ea:ea:78:d4:df:b6:58:56:
58:80:a0:e3:3f:93:f6:9f:43:4d:29:15:75:ca:eb:2e:e9:95:
5d:a6:a4:0b:e5:38:b6:1e:1b:c6:2d:aa:6e:45:3e:ec:95:c4:
b7:bf:29:ee:3f:5f:04:74:18:42:3d:7a:28:13:8c:52:b2:68:
64:1d:22:e0:ff:a9:e3:cb:7e:a3:78:70:cb:14:e8:ef:ca:3a:
37:79:a9:fa:bb:21:61:d5:02:07:13:fc:c0:99:e6:a2:02:23:
e2:04:29:fe:5f:0e:b4:ff:26:03:b9:d5:b5:81:6f:d6:f7:7e:
86:a8:d1:87:b1:d5:0b:ff:bb:f6:46:89:f4:2c:63:e0:51:1e:
a0:ac:7e:6c:99:10:90:ca:26:9f:0d:6d:e5:11:7e:c1:12:13:
fd:ed:07:b3:c1:76:07:8f:ad:88:f7:18:60:27:07:e6:b5:50:
fa:b4:c4:90:4e:41:9f:8c:09:63:4b:af:b3:be:c9:51:4a:42:
47:da:98:2e:60:fe:7b:85:9a:53:a2:15:3a:8a:db:bd:5d:0e:
67:f5:dc:cf:9d:d4:54:82:8b:0f:8c:b3:1c:9d:61:15:03:c8:
84:1a:0b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:28:11 2026 by rpki-client