
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
File: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json)
Hash identifier: maSroPrhSWLvdyzYoQGvf4x8BD+Va76dKAbojSWKjSw=
Subject key identifier: 32:10:9A:13:34:40:E7:30:21:E8:2F:9C:17:0B:55:F8:2C:1C:1A:EA
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 01A0CF6D0F3F56AD194551B8D9EA5CC3B522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
Manifest number: 1A91
Signing time: Wed 23 Sep 2026 18:00:26 +0000
Manifest this update: Wed 23 Sep 2026 18:00:26 +0000
Manifest next update: Thu 24 Sep 2026 18:00:26 +0000
Files and hashes: 1: 1Xksz4pAytZHMrrT7gOuFdy8S2Y.roa (hash: HuNf5dwLg/DJcTEcYtbO8BEopfRLLX+209pk2+0+87w=)
2: 3uaiubVaYwEf-0pq3jOcgWmJ5CE.roa (hash: +/DqQfsYBGZvH5gjSmEEf+nK4crysz9SgEpPppJMqlo=)
3: I08p1jkDdJlEDsjwq053srkjN2k.roa (hash: La1YGwc3oCLT3rS+rl/RN0PZ9UFeOvqPsj5JGqvzCv8=)
4: I6YWMGhy7HKFnX7IA6Ri3Fvq3Bw.roa (hash: iO6NFnEQ5zNAX8dkduVe692P6jMfZQ6IsoktNrW/oGA=)
5: KbtlTKcgt-X8HNV4rKo5uZlq6R8.roa (hash: 70QTuQkF5890Kc+PvR2XYv1coLUM/SKD0ZPfp0La8K4=)
6: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: p2eyre7cs8JHBQS/D8u9xAxO7qlcwfkKNAYdYRa+teY=)
7: aFH3yZOCBvv0pwITn-ojOO9u5_Y.roa (hash: R+3z3be5a6cpJXKXgxNcsq7jkEToT3RKyUkCWxn8eBI=)
8: cbkmSv4A8E7qdpGnIA9EV1uMTfI.roa (hash: Etb18uo7Rn29ZvaJx07byCrsL8cUj5zuO8qDMwtLZ0E=)
9: g8lpKS3Uw8kC5lMG62drJ46w5hs.roa (hash: 83NMQZQtm0Gu60VzRcxhZibSAqmZFrS/fqUqV713Mcs=)
10: zQaBu8xvqsgQldV2qdnBjEZymN8.roa (hash: gNV6m/aR4O8Blczk03nyUg7ckGuOlJt+WZprd2w5EI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:0f:3f:56:ad:19:45:51:b8:d9:ea:5c:c3:b5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Sep 23 18:00:26 2026 GMT
Not After : Sep 24 18:00:26 2026 GMT
Subject: CN=32109a133440e73021e82f9c170b55f82c1c1aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:f5:4a:25:ab:fc:4e:13:d8:02:16:1b:4b:
41:79:2f:bb:de:ad:fe:4d:90:d2:d6:19:75:d2:e8:
a9:8f:07:5a:d4:26:d3:13:e5:20:a6:ce:44:d7:07:
ae:23:50:74:ae:aa:e6:bc:b5:6c:89:a6:7c:5e:d5:
9a:a7:fb:5b:c7:f8:24:b3:b1:bc:76:ce:ba:c2:96:
e6:09:26:da:bf:c4:b7:35:74:c8:56:45:94:6a:a4:
fd:10:32:cc:70:4e:ec:02:41:6e:ef:9d:25:88:d7:
55:37:50:75:e0:c6:5c:75:b8:5f:96:6d:e1:0c:00:
4c:78:07:fb:3b:16:dc:4e:79:c1:bf:68:1b:d5:78:
85:06:11:80:b0:27:34:a7:01:45:0a:73:52:28:bd:
bc:bc:76:c0:87:cb:77:07:f7:98:eb:1d:f1:31:7e:
cf:98:ae:af:2a:e3:40:6e:03:69:b8:7e:dc:4d:bf:
e5:3b:d2:5b:0a:b8:18:60:f2:91:3a:cc:25:e6:92:
2b:4a:b4:fc:3a:ca:59:05:4d:13:4c:78:d3:ba:9d:
bf:23:c5:cc:87:09:47:9e:67:30:dc:23:88:1d:85:
69:62:6d:83:34:d8:42:8a:82:12:4a:f2:65:ab:9c:
86:5e:8b:8e:67:50:0c:48:b3:53:a1:f5:70:47:bb:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:10:9A:13:34:40:E7:30:21:E8:2F:9C:17:0B:55:F8:2C:1C:1A:EA
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:49:ef:8c:36:1e:3a:96:da:ba:d3:a8:9f:89:21:ca:ed:c6:
0d:e4:16:28:1a:75:37:d3:84:7a:75:32:77:40:0c:5a:8a:96:
38:3d:ff:1d:ac:e1:b1:d2:0e:b1:1b:b2:85:a9:30:9a:a2:ad:
95:86:35:4d:6c:d9:0c:17:45:1b:e0:a6:2a:3f:11:54:3c:9b:
ea:26:24:fc:0c:be:d5:ac:8d:1d:59:1a:35:fd:77:2e:5d:9c:
da:8e:92:67:7e:4a:07:0a:5f:25:5e:42:b8:80:2f:fb:4c:93:
fe:97:ce:da:19:56:da:81:97:ff:eb:42:4b:ea:44:0b:91:cf:
2d:82:69:61:a0:b5:30:10:21:4d:39:f2:c9:b3:9a:6c:ac:af:
dc:62:86:ea:31:04:3a:3d:55:fb:fe:a9:0f:66:e0:ec:72:d2:
81:d7:90:16:13:35:86:42:ca:f4:fd:80:f5:be:f6:73:9d:9b:
2d:24:6c:8e:78:88:8f:84:9e:15:3d:a3:f6:16:c3:1f:0c:73:
10:78:5c:82:07:ed:e6:64:bb:d4:97:8b:07:11:cc:1e:f9:3d:
ac:19:dd:ad:1a:93:9b:5a:17:9a:13:5e:cc:29:92:3c:54:47:
3f:42:68:48:16:18:13:b3:70:11:88:b3:f0:5e:84:ea:e7:1a:
88:1a:55:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbQ8/Vq0ZRVG42epcw7UiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi
YTg4NDkwHhcNMjYwOTIzMTgwMDI2WhcNMjYwOTI0MTgwMDI2WjAzMTEwLwYDVQQD
EygzMjEwOWExMzM0NDBlNzMwMjFlODJmOWMxNzBiNTVmODJjMWMxYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE31SiWr/E4T2AIWG0tBeS+73q3+
TZDS1hl10uipjwda1CbTE+Ugps5E1weuI1B0rqrmvLVsiaZ8XtWap/tbx/gks7G8
ds66wpbmCSbav8S3NXTIVkWUaqT9EDLMcE7sAkFu750liNdVN1B14MZcdbhflm3h
DABMeAf7OxbcTnnBv2gb1XiFBhGAsCc0pwFFCnNSKL28vHbAh8t3B/eY6x3xMX7P
mK6vKuNAbgNpuH7cTb/lO9JbCrgYYPKROswl5pIrSrT8OspZBU0TTHjTup2/I8XM
hwlHnmcw3COIHYVpYm2DNNhCioISSvJlq5yGXouOZ1AMSLNTofVwR7sZtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIQmhM0QOcwIegvnBcLVfgsHBrqMB8GA1UdIwQY
MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt
ZTEzZTU1NzljNWRjLzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj
LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcknvjDYe
OpbautOon4khyu3GDeQWKBp1N9OEenUyd0AMWoqWOD3/HazhsdIOsRuyhakwmqKt
lYY1TWzZDBdFG+CmKj8RVDyb6iYk/Ay+1ayNHVkaNf13Ll2c2o6SZ35KBwpfJV5C
uIAv+0yT/pfO2hlW2oGX/+tCS+pEC5HPLYJpYaC1MBAhTTnyybOabKyv3GKG6jEE
Oj1V+/6pD2bg7HLSgdeQFhM1hkLK9P2A9b72c52bLSRsjniIj4SeFT2j9hbDHwxz
EHhcggft5mS71JeLBxHMHvk9rBndrRqTm1oXmhNezCmSPFRHP0JoSBYYE7NwEYiz
8F6E6ucaiBpVSA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:07:20 2026 by rpki-client