Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: EHVVixOxOA5MHAo6mwDGBTPquo4VEYPC6Ur/bbfDM/g=
Subject key identifier: 75:B0:50:37:67:96:EB:8D:E1:26:8A:9F:15:3C:8E:DC:C1:3F:E2:7E
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019D2B850BC183B36755C8C5ADF6EC2D9C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 1814
Signing time: Thu 26 Mar 2026 19:00:32 +0000
Manifest this update: Thu 26 Mar 2026 19:00:32 +0000
Manifest next update: Fri 27 Mar 2026 19:00:32 +0000
Files and hashes: 1: BaOM7EQowAQp3mVPiVLG92UAT5o.roa (hash: Vir9bCNKr3xiAR3YQztvr+gFcAXrFl1bsNs/wks4Tw0=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: TttMMCvqVgvhzOtx/3XU7id7KRAgbVSoFerT9O2kVdw=)
3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:0b:c1:83:b3:67:55:c8:c5:ad:f6:ec:2d:9c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Mar 26 19:00:32 2026 GMT
Not After : Mar 27 19:00:32 2026 GMT
Subject: CN=75b050376796eb8de1268a9f153c8edcc13fe27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:b9:5f:9c:9c:fb:57:9d:9e:d7:cc:21:71:
bf:1a:ba:06:1e:f6:a3:a9:fa:b1:9a:84:94:5d:be:
ea:b9:30:bd:4a:67:d8:1e:c1:77:fb:24:38:5c:1d:
68:01:7e:7b:be:fb:55:88:ac:b0:e7:c9:9e:29:cb:
7c:92:d9:23:98:41:cd:62:f3:9c:d6:d9:bf:54:12:
3e:9f:72:5d:63:d1:67:bd:4d:7c:2b:cc:1a:1e:57:
db:6d:ce:41:a9:32:85:a0:69:5d:83:f3:70:78:8e:
58:ec:8a:8d:c7:80:60:83:20:be:c7:75:35:49:f3:
14:03:f1:9f:05:1f:7c:e2:5f:7c:51:6f:49:82:4a:
0a:82:f7:38:8e:e0:5b:cc:58:3e:e0:a8:b0:6a:97:
21:00:83:12:21:a4:be:a3:f5:fc:2c:82:8d:5a:10:
46:60:7f:2e:59:b1:64:23:9e:75:6e:62:26:68:22:
88:1c:6d:a0:9a:51:21:36:4b:c1:1d:83:05:cf:e6:
93:61:9b:d3:29:5d:d5:17:b5:c8:f6:0b:03:45:f3:
80:14:30:c0:1f:9d:54:87:69:b9:6d:cc:14:d2:a2:
a3:8a:d8:ce:b9:43:48:27:90:10:bd:a6:68:e8:ff:
3f:b5:57:b9:65:92:8a:d4:58:02:78:da:de:60:ff:
1f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B0:50:37:67:96:EB:8D:E1:26:8A:9F:15:3C:8E:DC:C1:3F:E2:7E
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c5:87:d1:31:4e:b6:d6:1b:ae:f0:2f:cc:c4:56:5d:73:2e:
bf:cb:fe:08:a0:3f:6d:6f:2b:52:62:33:d1:fa:60:eb:94:07:
db:23:2b:6b:71:85:e1:7b:d6:51:2f:6c:a9:cc:a1:fb:8d:a1:
cb:ef:b4:99:7a:4e:85:bf:f9:d6:4d:fa:0d:0d:fe:10:dd:fe:
fd:71:a6:e9:c0:08:e3:85:56:36:43:8c:3b:87:c2:50:ea:a4:
54:85:39:03:9b:d2:b6:23:d6:c7:a2:51:53:d4:f4:23:66:23:
0d:41:31:6f:f1:c3:54:c0:14:4d:60:8b:8b:d8:da:f0:57:2d:
1a:08:40:d9:0e:6a:27:9b:7b:ab:5c:61:ba:d3:bf:47:e7:89:
22:a7:91:4f:89:4f:f6:f2:bf:70:5a:14:43:31:1a:3d:a4:ce:
d1:31:97:ca:f2:75:24:83:fd:b3:05:38:02:cf:f9:ed:1f:30:
d0:67:8b:2d:5c:61:f3:73:9f:83:7f:d2:65:16:03:d5:e6:71:
1d:d9:53:ab:72:2b:bb:07:fa:b3:f4:b7:0c:63:5d:8f:d2:e1:
77:d7:74:ba:2b:41:63:90:8f:da:c8:e2:ba:43:a3:07:6e:8f:
ce:87:24:a6:b8:f1:a2:c9:30:43:cf:e8:6f:36:58:95:5b:1b:
eb:3a:8c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:08:44 2026 by rpki-client