Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: TFQmK7BaZ4Ef8rBpjYoHJez+q+mAZujZnRpVDJlfOEk=
Subject key identifier: A4:30:7C:06:7D:F8:CA:95:77:62:DD:30:BB:F6:C9:34:24:FA:20:F4
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019CAA2184D0160D7AEB972C3381C35F6196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 16:00:49 +0000
Manifest this update: Sun 01 Mar 2026 16:00:49 +0000
Manifest next update: Mon 02 Mar 2026 16:00:49 +0000
Files and hashes: 1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: jpb6BHYtOxX8RMU6vNBJwH1rvQsNyLCSxmiSStE+LN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:84:d0:16:0d:7a:eb:97:2c:33:81:c3:5f:61:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Mar 1 16:00:49 2026 GMT
Not After : Mar 2 16:00:49 2026 GMT
Subject: CN=a4307c067df8ca957762dd30bbf6c93424fa20f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:13:f5:66:f7:ff:40:95:ef:93:fb:9c:e2:
a0:b9:d4:5d:32:c3:53:9c:8f:e8:00:19:51:c9:f1:
a8:76:1d:e7:b3:14:28:db:76:38:4b:45:e9:fb:a9:
de:6f:c4:ca:fe:92:aa:35:78:99:09:24:e4:ab:3c:
87:e1:43:55:1b:8f:ca:d0:c6:21:f1:0d:fe:cb:ea:
32:7b:3b:74:cd:b0:46:ec:ba:9b:e4:6e:81:36:85:
d3:51:1b:35:04:f2:aa:ba:9d:c5:38:75:38:19:d7:
f2:8e:1a:23:e6:ea:58:f2:a8:45:4d:99:20:e2:81:
93:de:9d:bc:14:c4:8a:9a:72:33:20:6f:31:44:71:
1d:ae:34:ff:2d:f5:b0:f7:36:91:33:36:1e:35:5f:
ee:b4:dc:6b:e2:92:e4:1b:c6:38:24:32:47:a7:05:
db:9d:43:7f:eb:2d:96:72:f4:10:12:00:76:00:70:
a8:8a:9e:e3:d2:df:c9:e7:ae:63:d9:34:73:e6:dc:
4b:1b:71:fc:d6:8c:43:0a:19:91:83:a2:25:5f:cf:
e8:59:4e:15:0b:05:d4:e1:5c:fc:e7:75:8f:c6:74:
15:30:7a:5b:ef:5d:ee:81:a9:c1:67:78:dc:00:c3:
45:32:31:ad:03:e8:7c:3d:e3:9b:72:fc:30:4d:9c:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:30:7C:06:7D:F8:CA:95:77:62:DD:30:BB:F6:C9:34:24:FA:20:F4
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:57:5c:f0:cd:c9:dc:75:af:75:bf:bf:a9:73:ba:6c:3f:7e:
a7:4c:14:af:31:d0:04:9a:f0:77:3b:5e:ac:5c:e8:b5:08:7c:
a1:60:cd:93:19:15:d9:eb:89:19:37:93:a7:8b:6b:73:a0:ef:
84:9e:93:bd:cc:39:7d:50:b8:98:3e:b5:4d:15:e7:46:65:b9:
5d:ee:ed:6f:64:eb:48:5c:7a:a1:45:ca:4c:9c:91:ea:c5:dc:
6c:05:be:3c:4b:1f:6f:e7:19:0b:45:29:14:b2:f1:b2:dd:55:
10:8c:61:ed:1b:ac:c9:bf:ca:24:58:0e:10:d8:83:fd:8f:54:
27:3c:54:b7:24:84:fb:39:f4:db:e3:27:67:57:f4:42:ac:17:
49:f8:12:84:e4:6d:50:2b:b0:5f:c4:4e:ed:0d:73:4c:29:f3:
2c:e8:c9:82:4c:f9:37:9d:e1:f9:8a:b9:54:85:e6:21:c9:10:
ec:2d:4d:cc:52:e1:47:c9:ce:b8:c4:48:e0:87:49:a4:5f:40:
94:41:21:f3:1f:ce:f9:6e:2b:fd:0b:7a:db:f4:86:19:2c:e7:
29:4c:2a:32:0d:79:5b:45:ba:5e:53:e4:f6:4b:e4:20:b7:ae:
bb:9d:19:54:2a:20:0f:0d:1b:5b:d9:42:2b:fa:18:d8:4d:e0:
a5:bf:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:23 2026 by rpki-client