Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: dxNT2x80W9tVzgWCzdG73+mauSKsayFAhtiYrn6h4yY=
Subject key identifier: DD:20:E6:90:25:B8:FE:A3:58:AD:43:9F:62:38:A0:0C:97:40:66:47
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 01A00394B45CA0248899C35E6AC0B8E142F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 1A07
Signing time: Sat 15 Aug 2026 04:01:12 +0000
Manifest this update: Sat 15 Aug 2026 04:01:12 +0000
Manifest next update: Sun 16 Aug 2026 04:01:12 +0000
Files and hashes: 1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: MmRRVQ2WeprTGsAPtC9riCQwA1AdoR7IILvAdlYnD50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:b4:5c:a0:24:88:99:c3:5e:6a:c0:b8:e1:42:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Aug 15 04:01:12 2026 GMT
Not After : Aug 16 04:01:12 2026 GMT
Subject: CN=dd20e69025b8fea358ad439f6238a00c97406647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:ce:a2:56:b2:0a:59:ee:69:97:08:17:ce:
03:91:29:41:cf:ca:ef:ed:13:49:5a:f7:8f:aa:06:
2c:11:24:ac:04:52:81:d5:ef:ea:00:13:b4:81:39:
99:65:fa:e4:63:24:ca:3d:3f:9d:0e:ae:10:f2:9d:
73:dd:07:d4:4c:2e:e4:0d:83:f9:d8:90:1b:21:3d:
6c:e5:47:02:cb:0b:53:53:04:94:9f:e7:5b:d6:7f:
8c:45:ee:99:40:ba:b2:65:64:c4:ba:14:6a:09:6a:
8e:aa:d2:3a:57:eb:f6:32:c3:e8:02:1e:f2:90:6b:
f2:79:32:49:e4:66:df:55:c4:e6:0c:14:3f:41:4c:
c3:97:a1:88:5e:25:86:66:9d:05:d3:43:c3:a3:21:
66:96:72:ac:e4:7f:1c:5a:60:f8:82:65:f0:f0:23:
ed:97:15:c5:37:37:e1:5e:64:be:82:f6:a3:57:1c:
6e:c0:78:a4:25:0d:0b:36:e1:01:66:d7:97:10:eb:
64:60:b8:52:54:79:8a:bd:8e:42:73:88:ea:dc:a6:
72:2b:43:0d:17:c7:46:ff:bc:ba:14:00:39:f3:49:
d7:c0:ed:e6:af:62:3b:1b:f9:af:84:05:d0:fc:26:
0d:81:44:7c:fc:76:27:bd:d8:a7:49:8e:2d:53:35:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:E6:90:25:B8:FE:A3:58:AD:43:9F:62:38:A0:0C:97:40:66:47
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f5:30:77:90:ef:a8:64:27:50:22:69:9f:5c:01:78:ac:84:
a9:cf:6c:84:40:b5:43:e1:0d:64:fc:e9:c9:ed:96:bb:e7:a5:
3d:cb:6d:23:ad:e2:f7:17:aa:89:35:f4:ef:2e:92:d4:50:fa:
88:66:34:6a:40:36:a1:ae:14:a2:3c:d2:01:5b:15:d5:08:75:
52:3c:98:eb:97:5f:db:b1:ba:d9:eb:87:2c:f1:00:a9:41:bb:
40:b6:84:9a:b5:e6:4d:5d:97:9a:49:09:6c:d8:a7:b3:22:14:
54:89:5f:bd:a9:2b:34:76:8c:0e:5d:91:91:50:fe:e1:60:40:
d5:a4:fd:e0:8f:e7:61:f0:f4:76:8f:ba:09:07:5e:bf:b5:20:
c3:91:ff:c3:69:6f:be:7f:b1:71:e1:63:cc:41:fc:f1:fd:fe:
fe:d0:0c:85:26:44:af:57:df:cb:7a:ea:70:23:e6:26:88:a4:
c2:c6:21:ff:6b:c3:38:c3:eb:1b:6d:d5:28:15:37:d8:dd:67:
3d:df:a9:b2:d8:a9:91:8e:73:af:6f:b5:e1:29:fd:52:61:89:
98:b1:78:90:71:1b:15:62:da:ad:b9:83:7c:18:1e:2b:4f:87:
42:18:ec:6a:92:60:6e:6a:6a:57:a0:ca:cc:08:20:f6:3f:ce:
cc:78:cc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:43:01 2026 by rpki-client