Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: ho8lgAaYRGPToPasIveuFxR8OtgWRXWRJ5rmdTKlDQU=
Subject key identifier: 37:AC:31:AA:B6:3B:80:62:91:4A:93:D5:33:E7:B7:72:0B:BA:11:7F
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019F122E8A115AD9E40C75BA24011DDCCCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 198A
Signing time: Mon 29 Jun 2026 07:01:07 +0000
Manifest this update: Mon 29 Jun 2026 07:01:07 +0000
Manifest next update: Tue 30 Jun 2026 07:01:07 +0000
Files and hashes: 1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: mGNxFhMPtbPPvRzXjw4jqppyf6GGcpWbQThn4fXQ4Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:8a:11:5a:d9:e4:0c:75:ba:24:01:1d:dc:cc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Jun 29 07:01:07 2026 GMT
Not After : Jun 30 07:01:07 2026 GMT
Subject: CN=37ac31aab63b8062914a93d533e7b7720bba117f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:42:78:05:5e:0f:e2:13:f9:53:1c:c1:ce:
9e:27:db:41:3f:75:08:d8:e5:cf:9d:e6:71:94:5d:
b7:cb:c1:ca:3b:d1:7f:49:c4:c9:96:43:a9:f6:29:
4a:e5:f3:5e:d2:1a:48:0a:6c:be:dc:55:e5:f2:b5:
21:ff:08:9b:d5:0f:61:4e:a0:50:da:1e:05:5c:ef:
08:1c:9e:e7:47:df:8f:96:86:6c:0a:86:9a:d8:81:
13:77:59:ca:ae:41:0e:86:07:a1:03:b4:ec:4d:da:
b1:0f:b4:26:b9:89:98:6f:13:cd:28:dd:05:49:a1:
52:e9:ae:58:d4:83:dc:a5:8b:a2:56:64:5c:88:a1:
83:83:58:95:c6:25:89:e7:a0:6d:1c:ed:e6:e4:ca:
84:fd:05:22:8f:9c:d9:5e:2f:88:23:8c:84:e7:be:
ab:7f:2e:ef:b5:85:19:03:fb:77:6f:4d:08:fd:0f:
e9:e9:13:45:e5:f7:be:f4:56:47:46:a7:f2:26:52:
04:87:67:ee:21:37:c4:f6:13:b6:24:56:32:86:dc:
16:44:02:64:95:31:d0:e6:60:86:20:e4:9d:63:8d:
75:75:49:1b:d6:ec:e1:16:67:84:ba:b3:57:d3:c8:
e6:30:92:3f:1e:fd:7a:b3:63:16:86:b3:07:69:d2:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AC:31:AA:B6:3B:80:62:91:4A:93:D5:33:E7:B7:72:0B:BA:11:7F
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8b:40:a4:4a:0e:14:17:1f:ea:dd:e9:60:2a:b9:d2:5b:15:
1d:d0:76:42:77:8e:46:36:e5:82:2f:23:7e:5e:10:a7:73:de:
69:13:30:85:20:7c:fb:bc:c6:33:50:ab:a5:fc:44:5d:eb:93:
a0:d1:f4:27:ee:ac:78:bc:d1:d5:fc:fb:78:17:bf:82:8f:99:
ae:d2:97:56:71:1c:c5:65:b0:d0:2c:e0:24:80:7d:0a:0f:ef:
79:b8:7a:6d:b8:bf:20:3a:c1:7e:be:62:39:ff:ed:18:33:49:
05:cf:13:c4:8e:ae:b8:f8:c5:e7:59:92:e0:c6:16:64:e4:50:
5d:05:ff:bc:55:49:88:19:fa:58:83:1e:a3:b3:78:59:7a:6a:
95:38:6a:6c:61:d2:5a:54:bb:16:3b:89:79:37:93:09:fe:91:
20:05:dd:f2:bf:08:7e:88:ad:93:19:9e:1d:a0:bc:de:96:3b:
2f:fd:c1:70:3a:dc:e0:52:4c:cf:4d:95:e7:9c:be:20:43:c9:
26:6d:08:b0:0e:5e:a1:97:d7:33:c4:e8:2b:f3:b0:11:19:55:
9b:92:5d:5c:5d:1b:af:10:2b:8e:3a:71:20:12:8d:e0:a1:77:
41:9c:81:01:7d:d2:5f:44:bc:ae:2e:1d:b5:df:c5:3a:5d:87:
ce:8f:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:36:52 2026 by rpki-client