Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: C3tL6jJgxiGJ2qzB2I74GdKDaEibP+EcaQ+nQBJEoQ4=
Subject key identifier: 64:DA:68:7E:31:6F:6F:99:F7:A3:7C:EE:96:28:47:0A:D8:08:F1:4F
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019D371B82D399E55746F1E1C98BDED3C635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 01:00:42 +0000
Manifest this update: Sun 29 Mar 2026 01:00:42 +0000
Manifest next update: Mon 30 Mar 2026 01:00:42 +0000
Files and hashes: 1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: GQt000g+4ZUBXEp7JkZjkbq/unEh1erEYQnegrP94jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:82:d3:99:e5:57:46:f1:e1:c9:8b:de:d3:c6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Mar 29 01:00:42 2026 GMT
Not After : Mar 30 01:00:42 2026 GMT
Subject: CN=64da687e316f6f99f7a37cee9628470ad808f14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:1c:04:a8:43:93:b3:aa:c2:d1:fa:e6:bd:
07:0a:63:79:24:c7:79:4e:00:ae:86:75:63:ba:c4:
04:0f:42:42:f3:a9:0f:9a:9a:58:08:47:09:ef:ca:
e7:4b:46:a6:f5:8c:fe:ed:e9:23:0d:07:3c:b5:de:
b4:01:dc:ba:08:23:63:0a:ef:5f:54:b9:b7:60:6c:
54:dc:5e:b7:cb:1c:52:0a:cd:80:a2:61:40:6f:48:
20:c2:1a:e5:9c:10:2b:e9:41:98:76:2c:f8:bb:ef:
35:02:88:70:cc:59:1e:cf:9e:59:b0:b7:26:64:07:
22:aa:79:96:bc:18:8a:cf:9f:e9:79:ae:02:4d:d2:
84:95:8a:9a:d0:e4:bd:a6:61:38:9f:31:fc:df:98:
63:cc:08:f0:15:4c:9f:4c:e2:41:8c:3d:d7:48:68:
16:36:67:28:c8:0d:df:db:42:92:ad:96:b1:ab:0b:
aa:75:cf:c0:c3:72:17:9c:0d:87:2c:bf:1a:2d:17:
aa:74:9b:d2:78:af:81:50:fd:c2:73:7d:3a:e0:73:
8b:00:fc:03:b1:ec:05:56:43:b0:b4:a8:c3:0d:f1:
35:05:37:2e:f2:25:c9:48:d8:97:b9:de:3c:3a:2f:
1f:6b:00:88:e4:c5:88:fa:89:c3:7e:cc:9f:59:94:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DA:68:7E:31:6F:6F:99:F7:A3:7C:EE:96:28:47:0A:D8:08:F1:4F
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0a:5d:f5:a3:6e:d0:6d:bb:23:7b:a2:f8:49:79:4f:50:0b:
d5:83:ba:2b:91:ed:01:64:3e:3a:d4:fc:d8:f8:55:24:07:11:
47:19:1d:59:a8:32:49:6e:88:e7:50:59:05:3c:da:2f:d9:10:
9b:d0:06:77:1e:cb:41:3e:de:96:53:f6:a5:6c:5c:93:2b:52:
1b:fc:d2:79:fc:8f:60:db:f1:3a:08:4f:b1:5b:ef:8a:07:55:
03:fd:7e:06:38:fd:92:c6:f5:3f:45:13:34:e3:25:7a:5c:5c:
7c:17:28:fe:9e:cd:96:b6:c7:a0:48:0d:98:2b:89:5e:54:dc:
de:d4:d5:16:60:1a:11:34:44:12:3c:86:19:0b:3a:a9:c8:70:
b5:98:02:e2:ed:3c:36:aa:5a:8e:67:47:52:76:5c:17:33:b4:
6f:d6:c6:c4:1b:23:dc:94:5c:cf:13:da:ea:bb:05:07:c5:0d:
7a:17:47:22:68:80:64:41:84:46:cb:1e:fb:11:72:04:d8:6f:
46:cf:bf:fe:da:a9:2c:51:af:2b:66:14:77:e4:39:32:1f:d7:
51:98:65:f5:c3:5a:95:f9:43:7f:4d:59:82:ea:1e:eb:50:2a:
22:84:8f:35:92:ea:46:20:8e:13:74:e1:95:50:d0:55:63:42:
9d:e0:d9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:45 2026 by rpki-client