Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: MXbXQ8zoLWElxdZIyVI57fJqCWW5xiVXKLqBeBoZP3U=
Subject key identifier: 37:63:1D:D7:15:18:DB:84:CE:30:39:F7:3F:60:38:58:24:D4:87:D0
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 01A132C7239371A524A521557A648CB059EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 1AA4
Signing time: Tue 13 Oct 2026 01:01:13 +0000
Manifest this update: Tue 13 Oct 2026 01:01:13 +0000
Manifest next update: Wed 14 Oct 2026 01:01:13 +0000
Files and hashes: 1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: E6YcKnPHgaZENMiw2S/yuC2rdKSxjWalU+VOBSw1k3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:c7:23:93:71:a5:24:a5:21:55:7a:64:8c:b0:59:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Oct 13 01:01:13 2026 GMT
Not After : Oct 14 01:01:13 2026 GMT
Subject: CN=37631dd71518db84ce3039f73f60385824d487d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bd:72:db:9e:2e:6a:0e:f7:91:6b:67:b2:95:
ff:56:b1:3c:ba:ec:c4:b7:43:2c:3d:8f:e8:04:f5:
f9:b8:0b:fd:3d:e7:0c:37:79:bf:45:79:10:8b:1e:
5b:39:b6:5b:85:b9:2d:4c:76:73:03:89:1f:f8:d9:
2c:81:42:e2:dd:67:76:8d:d8:eb:30:71:d3:27:e4:
77:f6:de:e9:c3:61:a0:11:4b:61:5c:3e:6a:48:1b:
2d:54:cb:57:61:d5:91:db:55:11:39:24:e4:48:71:
0b:31:ca:c7:49:8f:fa:4c:8a:53:36:82:b1:16:6d:
74:06:9e:4e:a9:b9:fb:88:7f:e5:4d:46:11:5d:ff:
36:37:f8:1d:ae:75:eb:e7:c0:b2:2f:2e:17:8e:e6:
55:16:e5:a2:5c:87:6f:e5:2a:db:67:7a:2c:5d:d9:
48:26:58:92:36:a8:aa:cd:1c:8f:bc:12:db:4d:65:
c8:8d:cc:18:c9:0d:36:6a:a1:f3:c3:e5:d3:88:b1:
79:76:bf:82:0e:66:c2:9e:e8:46:87:c6:a6:7e:43:
31:7d:41:3a:ad:2d:2a:15:fc:b1:e8:89:31:36:4d:
54:b3:01:a8:42:90:95:ce:ac:bf:f7:aa:8b:58:00:
9a:6e:4f:67:1b:61:37:31:c4:97:6b:31:d9:1b:3b:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:63:1D:D7:15:18:DB:84:CE:30:39:F7:3F:60:38:58:24:D4:87:D0
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f0:2c:b8:cd:c2:5f:b9:15:e8:68:f0:20:b9:ab:d5:19:ec:
de:07:de:96:f9:46:20:01:ab:75:3f:64:6a:ec:3f:09:68:a3:
09:1f:75:93:7b:5d:a7:4e:11:c2:cd:b8:e0:0f:ff:ce:e6:3c:
d9:c6:eb:f4:5e:a3:4c:ec:1a:ff:4e:2e:83:26:8f:fe:3d:7f:
d6:18:3c:03:86:59:cf:4b:48:f3:aa:d4:d4:0d:a5:06:d2:43:
08:63:05:f8:13:63:5f:02:8d:9a:e8:db:40:e9:36:ca:23:37:
ba:30:1e:d8:b5:53:90:37:34:e7:a9:c8:01:29:8c:41:94:86:
bb:a7:73:22:81:2f:e8:c1:a8:95:f8:0e:16:36:ba:da:20:35:
62:62:9d:40:10:2e:54:8b:35:33:6c:ed:3b:1b:c2:90:53:f1:
ac:f5:ef:c6:f2:cd:b9:a7:54:03:a2:17:29:fc:4f:94:df:5d:
33:08:4a:f2:37:8b:fd:f4:95:36:38:78:5e:94:25:aa:a6:41:
91:43:2f:8d:2a:b9:88:bc:b1:9b:b9:38:52:be:74:81:c6:af:
3b:4a:f7:e8:c1:0e:b6:4c:cd:5e:1b:88:4a:40:02:e4:6a:c2:
8e:a5:bc:29:55:58:e5:5a:fd:8b:58:ca:28:f2:e8:f2:e6:29:
1d:5e:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:11:19 2026 by rpki-client