Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: 72ncVdJ5XvsJhENbGmNUUvP/m0GxhIvINjXHooqjMy8=
Subject key identifier: 52:0A:7B:B2:97:68:82:CD:BC:C8:5A:BA:C5:53:BF:85:37:55:92:FC
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019D99995E1826CCF126BA835B5B7C5F83A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 04:00:58 +0000
Manifest this update: Fri 17 Apr 2026 04:00:58 +0000
Manifest next update: Sat 18 Apr 2026 04:00:58 +0000
Files and hashes: 1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: wDDroQFqsrir27fdAVtTJFgm8bBRYPlwnXLDi/BZz7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:5e:18:26:cc:f1:26:ba:83:5b:5b:7c:5f:83:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Apr 17 04:00:58 2026 GMT
Not After : Apr 18 04:00:58 2026 GMT
Subject: CN=520a7bb2976882cdbcc85abac553bf85375592fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:a7:7c:0c:e7:53:dc:25:f5:0a:f8:25:bb:
dc:49:dc:40:ce:f4:16:94:8e:84:ee:f5:3f:a6:5f:
13:9c:a9:71:a0:73:37:6e:b1:13:d9:f3:bb:25:59:
ff:44:c3:f9:29:c5:81:2b:89:20:62:95:3a:fd:d1:
74:76:bb:2c:04:5e:3e:3a:38:50:6c:49:5a:8a:4b:
43:c5:30:00:4a:58:3c:a3:6f:e9:da:fb:49:b7:52:
d2:f9:71:92:f4:7e:1c:2a:16:9b:d7:88:d3:27:4e:
fa:10:b2:6a:41:1f:7a:b6:44:d1:34:fb:05:4d:1f:
3c:38:8e:a9:70:e2:5a:01:b8:25:02:ac:5e:80:ca:
56:24:b5:57:59:55:32:4c:50:51:20:9d:c9:bd:66:
9c:f3:b2:ba:2b:b3:08:d3:54:72:78:d2:f0:47:b4:
56:6b:1f:cb:1e:f3:3b:75:38:05:16:52:98:4a:53:
b4:e9:71:f7:c0:35:e2:3d:de:7e:f0:5b:d3:05:48:
bf:ef:f6:d1:83:b4:17:00:8b:2f:a6:b9:8c:49:8a:
a7:82:fa:49:d5:1d:d9:37:4c:fd:03:b7:db:6a:2d:
03:19:be:36:c4:79:c2:9f:90:f9:84:eb:85:a1:1f:
52:9f:be:6a:d7:32:83:61:ea:3a:bf:f2:4b:e0:ed:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0A:7B:B2:97:68:82:CD:BC:C8:5A:BA:C5:53:BF:85:37:55:92:FC
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cd:77:9d:2e:8b:1f:e2:77:37:b7:4c:72:6d:d2:72:24:ff:
d4:82:ac:77:1a:f8:aa:9e:2d:ec:bd:35:27:70:fc:dc:9a:4c:
6e:f3:b2:1b:81:3b:92:df:3f:ce:97:7c:8a:ee:f8:28:3c:29:
00:73:db:6d:cf:1b:a5:c1:90:66:58:d2:3b:ba:95:f4:69:93:
98:7b:fe:c8:a2:48:5e:d8:4e:c9:fb:e3:4f:d5:ab:bd:a5:66:
40:64:e8:41:b0:81:29:c5:cc:4e:48:d1:4b:b0:12:55:5f:9d:
67:2b:88:48:77:dd:6f:5a:90:80:d3:06:59:ce:12:d1:1b:dd:
42:6f:88:71:bc:64:a7:49:a5:1b:8b:18:c0:58:20:7c:87:a1:
06:d8:e4:ac:bc:a3:13:fb:0f:8e:6d:07:09:a8:04:92:b4:0a:
86:1e:41:3d:bd:dc:c4:6a:f8:f4:58:45:ad:67:b2:be:5f:fd:
12:9b:ce:44:86:89:58:82:36:ba:3a:54:2d:f3:53:ae:bc:46:
f1:1c:f1:31:ca:4b:86:73:d7:c1:ab:c7:f7:be:7e:5c:6e:c9:
4b:cb:a6:02:2f:21:02:ab:62:31:66:da:e1:33:42:28:80:c0:
2f:cd:84:ab:0e:1e:5e:b9:3d:1c:b5:6b:8b:fa:63:ed:f5:62:
ea:14:d1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:19 2026 by rpki-client