Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: YvjVHOKiUV5JBaRC40sK1QuO0YbWfaRJhK+NkyUfvg4=
Subject key identifier: B1:A7:AC:E8:7A:76:7C:0E:F8:E2:FA:06:7B:C6:61:D1:7C:35:46:E0
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019D2996F12BE896679A112E3EB39D155A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 1813
Signing time: Thu 26 Mar 2026 10:00:51 +0000
Manifest this update: Thu 26 Mar 2026 10:00:51 +0000
Manifest next update: Fri 27 Mar 2026 10:00:51 +0000
Files and hashes: 1: BaOM7EQowAQp3mVPiVLG92UAT5o.roa (hash: Vir9bCNKr3xiAR3YQztvr+gFcAXrFl1bsNs/wks4Tw0=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: lDtoPlBACy7TxFYM9GaC0PJx0IySDLIqPam5cA5oedI=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f1:2b:e8:96:67:9a:11:2e:3e:b3:9d:15:5a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Mar 26 10:00:51 2026 GMT
Not After : Mar 27 10:00:51 2026 GMT
Subject: CN=b1a7ace87a767c0ef8e2fa067bc661d17c3546e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:b2:3c:77:9b:6b:51:85:7b:fe:cd:e0:c0:
3b:50:c4:52:7b:64:70:d8:05:89:54:f8:40:01:c6:
0a:de:7f:c2:1c:da:ea:81:b0:d6:cf:0d:1d:59:14:
f1:b2:4b:91:a3:56:05:f4:35:7d:d2:b8:67:5c:f2:
35:46:2e:22:00:d6:af:05:df:f2:88:5e:26:83:fc:
e4:df:f6:4c:b2:db:e1:68:fe:29:20:b0:77:f3:02:
1c:4b:3c:68:6b:1e:19:35:d2:32:ee:01:ff:a4:72:
87:b3:37:c1:d3:bb:9c:82:2b:69:aa:8e:ea:79:be:
09:cb:ec:1f:fe:7a:bc:d9:cc:53:db:cd:3f:ac:92:
ff:37:a3:70:78:59:78:01:1d:66:c0:8d:4c:06:f8:
60:0f:c1:33:97:cf:d4:93:9d:37:1e:3c:ba:6e:70:
79:ba:fd:01:86:fa:9c:1f:46:0b:80:76:25:a9:2d:
68:a2:42:3c:10:6a:e3:3a:f3:a1:37:d3:26:f9:d7:
f3:8d:a4:c3:9c:d2:e3:c1:06:f1:ad:fa:05:63:11:
cc:38:c5:9a:fc:b3:8f:c8:47:14:a8:41:0a:ad:a6:
06:af:44:40:ca:b9:6f:ec:b5:a6:84:e8:1b:b5:8f:
5b:e9:3b:3f:4d:ae:61:c2:23:87:fd:a4:b8:06:9b:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:AC:E8:7A:76:7C:0E:F8:E2:FA:06:7B:C6:61:D1:7C:35:46:E0
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:67:1d:2a:31:ab:77:f2:a9:bf:b5:e9:03:9a:6c:47:ba:75:
a0:ca:f4:cf:25:41:95:d3:04:3e:73:91:33:0a:dc:1f:35:5d:
be:f9:fb:ba:3b:f5:2d:f6:ab:1a:6e:99:c5:af:e2:bc:f7:c6:
2f:4f:b6:82:5e:57:c1:b0:a0:60:e9:50:d4:43:32:8b:ac:18:
36:87:50:cf:88:38:7a:a1:63:08:65:9b:9a:40:36:3f:0c:3d:
10:3d:9e:29:02:38:cf:c8:ed:89:0f:80:d7:01:92:58:dc:c5:
58:05:ba:c9:1d:68:2f:ab:d2:2f:b1:9e:25:43:a5:9d:46:44:
d5:2b:28:29:95:ba:a7:bb:9d:80:c3:86:46:2c:40:d8:27:d9:
67:8f:e4:5e:7c:59:34:96:97:ca:0a:27:d6:7d:47:0b:04:28:
9c:c9:b2:06:62:6f:e1:50:cf:30:9e:f7:84:30:4d:de:0e:2e:
a4:c2:52:30:5d:ef:87:55:44:cd:92:6b:23:cb:41:8e:b5:b5:
f2:76:8c:5b:ae:6b:2c:ad:ff:33:de:91:6c:e6:b8:4e:1c:40:
04:9d:5b:49:ff:1f:84:49:06:ae:20:d0:70:e0:30:d7:47:6d:
2e:36:d0:b5:ef:bf:55:1f:d4:84:cf:09:ca:19:59:62:db:61:
85:9e:e6:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plvEr6JZnmhEuPrOdFVo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZGZjMDY2Y2U3Y2QzZTM4MjU3NGE2ODY2Nzk3M2IwYjQ2
OGRmM2MwHhcNMjYwMzI2MTAwMDUxWhcNMjYwMzI3MTAwMDUxWjAzMTEwLwYDVQQD
EyhiMWE3YWNlODdhNzY3YzBlZjhlMmZhMDY3YmM2NjFkMTdjMzU0NmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3iyPHeba1GFe/7N4MA7UMRSe2Rw
2AWJVPhAAcYK3n/CHNrqgbDWzw0dWRTxskuRo1YF9DV90rhnXPI1Ri4iANavBd/y
iF4mg/zk3/ZMstvhaP4pILB38wIcSzxoax4ZNdIy7gH/pHKHszfB07ucgitpqo7q
eb4Jy+wf/nq82cxT280/rJL/N6NweFl4AR1mwI1MBvhgD8Ezl8/Uk503Hjy6bnB5
uv0BhvqcH0YLgHYlqS1ookI8EGrjOvOhN9Mm+dfzjaTDnNLjwQbxrfoFYxHMOMWa
/LOPyEcUqEEKraYGr0RAyrlv7LWmhOgbtY9b6Ts/Ta5hwiOH/aS4BpufcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGnrOh6dnwO+OL6BnvGYdF8NUbgMB8GA1UdIwQY
MBaAFEPfwGbOfNPjgldKaGZ5c7C0aN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUt
MjUwOTc0M2FkMjllLzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUtMjUwOTc0M2FkMjll
LzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmcdKjGr
d/Kpv7XpA5psR7p1oMr0zyVBldMEPnORMwrcHzVdvvn7ujv1LfarGm6Zxa/ivPfG
L0+2gl5XwbCgYOlQ1EMyi6wYNodQz4g4eqFjCGWbmkA2Pww9ED2eKQI4z8jtiQ+A
1wGSWNzFWAW6yR1oL6vSL7GeJUOlnUZE1SsoKZW6p7udgMOGRixA2CfZZ4/kXnxZ
NJaXygon1n1HCwQonMmyBmJv4VDPMJ73hDBN3g4upMJSMF3vh1VEzZJrI8tBjrW1
8naMW65rLK3/M96RbOa4ThxABJ1bSf8fhEkGriDQcOAw10dtLjbQte+/VR/UhM8J
yhlZYtthhZ7m6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:31:59 2026 by rpki-client