Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: 9v9T9+T5zSGG5MJRlvdvfhOWStZD4gCAngLjouAKeiw=
Subject key identifier: 7F:ED:40:AC:75:8B:9A:CF:C6:84:29:0E:2D:D2:D7:12:BC:13:EC:50
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019E2A70B1853CEC1B3B540C79416E023344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 1912
Signing time: Fri 15 May 2026 07:01:28 +0000
Manifest this update: Fri 15 May 2026 07:01:28 +0000
Manifest next update: Sat 16 May 2026 07:01:28 +0000
Files and hashes: 1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: mTYX6ROIBs6Bylkc5qXbzjt54Q+ZBwQUmdaKDLb/6xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:b1:85:3c:ec:1b:3b:54:0c:79:41:6e:02:33:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: May 15 07:01:28 2026 GMT
Not After : May 16 07:01:28 2026 GMT
Subject: CN=7fed40ac758b9acfc684290e2dd2d712bc13ec50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:80:be:8c:aa:69:2c:9c:19:df:a2:c7:58:
2f:b7:01:a5:dc:a0:89:89:3a:33:90:1b:5a:ba:a2:
7e:d4:e8:6f:1d:34:73:d0:94:54:2c:5f:91:38:d6:
f6:54:41:4f:7c:d0:6f:ef:77:36:cd:fa:b0:9a:23:
1f:65:6c:73:f3:6e:08:31:53:51:1a:5f:f3:a4:a1:
ef:7f:d7:68:d0:25:bf:19:df:b3:8f:c1:96:c2:ed:
1e:a8:42:e3:c9:d9:81:0b:5d:e5:51:57:50:b3:18:
1c:f0:19:05:76:45:5b:18:3a:6e:8e:60:24:a5:87:
e0:e5:fa:b9:9b:13:7b:36:b5:dc:b1:08:76:01:7f:
c4:af:39:c2:00:d3:45:09:13:af:28:8b:ba:6b:20:
56:9f:cf:4f:7f:df:37:59:71:4d:f3:72:84:cc:44:
02:a8:e4:2f:f8:df:1d:53:6c:f0:2c:1d:2a:54:ee:
ce:d8:13:23:80:87:b3:7c:39:f3:bf:95:3a:0e:d0:
7a:69:8c:f2:3e:ea:42:79:0e:4e:e3:8e:5d:6f:c8:
1d:5a:38:aa:73:08:d7:b3:6d:af:c9:76:8c:10:ac:
c2:3d:c3:a1:1d:f2:77:43:9f:06:1b:d4:9b:6a:1f:
8c:23:0b:d2:b3:fc:f9:4d:8e:81:4e:a5:21:db:22:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:ED:40:AC:75:8B:9A:CF:C6:84:29:0E:2D:D2:D7:12:BC:13:EC:50
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e7:bf:1d:94:1e:9c:bc:09:eb:e0:4b:3f:c9:e8:bc:ab:c3:
aa:62:92:db:99:6c:56:0e:fb:98:bf:2e:93:0a:58:82:d1:db:
5a:b6:42:45:79:fd:ca:b8:cc:35:c5:e7:ed:c8:66:7b:a3:da:
6a:b4:b0:ea:e1:a1:dd:73:c3:7d:76:9e:18:d0:49:eb:a1:e1:
4f:37:a4:5a:9f:07:c0:15:b9:b0:8f:57:08:c5:50:6e:21:20:
7f:a4:82:4e:7d:3b:d6:3d:eb:36:2c:72:47:ac:95:9a:2b:a0:
ca:73:67:11:0a:5a:52:c0:26:4e:79:9e:e9:88:24:90:22:f5:
fd:08:52:4e:0f:e9:54:e0:f9:0d:a7:fa:bc:8c:d3:be:e7:20:
a3:4d:af:f0:46:f2:5d:09:c7:8f:83:83:b4:ba:1c:cd:7c:cd:
53:93:d1:21:87:5d:4f:0e:63:d6:ed:15:db:2c:91:68:a1:27:
69:51:0e:16:c2:75:a0:94:af:d9:49:c0:8c:04:ee:e3:1b:9a:
28:28:d4:df:24:8d:dc:2e:48:64:2a:b4:a0:9b:00:94:01:33:
a2:1c:76:9a:66:b3:f4:63:40:06:7e:f5:b2:68:01:2d:ab:a3:
2a:6a:ad:06:82:29:35:d9:20:11:e4:26:84:b8:d8:a1:b2:9c:
38:11:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:41 2026 by rpki-client