Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: RrH9kxowoXpxkncXJIjazg19fLoQG7wRRHj9nDTEAiw=
Subject key identifier: 03:CF:98:3C:17:2B:61:2A:12:B7:B7:07:2B:7B:13:70:FA:41:91:4E
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019FA8D08C1C1FA280321244EF1B383D9B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 13:01:07 +0000
Manifest this update: Tue 28 Jul 2026 13:01:07 +0000
Manifest next update: Wed 29 Jul 2026 13:01:07 +0000
Files and hashes: 1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: XarYKabup+DFq7QKg9wroU+/Dh9Cd0wDFEjph1yHwUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:8c:1c:1f:a2:80:32:12:44:ef:1b:38:3d:9b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Jul 28 13:01:07 2026 GMT
Not After : Jul 29 13:01:07 2026 GMT
Subject: CN=03cf983c172b612a12b7b7072b7b1370fa41914e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:24:96:97:96:be:6b:1d:f0:7d:cc:ad:28:
7f:55:73:ed:fc:1b:3c:fc:4c:97:56:f2:c4:e2:47:
e7:39:6d:55:68:97:9c:9e:63:b7:0d:5a:80:78:98:
4a:fc:71:9e:22:cf:24:8c:a8:ce:bf:4b:99:ad:ab:
3e:f1:2b:67:0b:c0:99:fe:b3:78:cb:07:68:f0:6b:
4f:3a:d1:87:30:45:eb:7c:0a:18:49:11:f2:7f:7d:
b2:bb:45:66:e5:42:6f:a2:e7:8e:bd:76:2e:7b:50:
58:5d:2c:23:5d:f9:03:d4:4b:e5:71:75:fb:bb:e9:
d0:e9:d1:ca:77:3d:1f:10:ac:9f:d4:3d:b7:60:dc:
44:aa:f6:15:97:c3:f0:d0:63:ca:9a:2e:7c:b9:99:
99:d8:18:df:2f:e3:57:b7:de:ef:11:7e:91:f1:02:
d5:44:68:5b:3b:24:ad:17:f5:99:c5:5e:a8:97:6c:
a1:a7:07:d1:69:f3:f4:df:a0:6a:07:60:98:0d:75:
36:87:0c:c7:94:e5:a2:6a:d1:23:ea:a0:84:8d:ec:
62:68:97:00:0e:3f:68:34:55:14:74:11:a3:07:d2:
a4:f2:c7:0b:8d:b7:b6:fd:1a:8e:27:50:b5:a5:f5:
d7:18:9f:ed:81:6d:48:11:43:18:94:a3:fa:55:ee:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:98:3C:17:2B:61:2A:12:B7:B7:07:2B:7B:13:70:FA:41:91:4E
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:19:cc:ac:c0:a2:79:89:a0:1d:7e:65:96:2c:60:8f:89:d6:
ce:7c:4a:31:81:4b:30:ff:0a:18:a5:1c:5a:2c:74:1a:b6:57:
83:cb:5a:35:6d:ef:2a:ae:8a:f1:8c:f4:ea:a9:79:39:26:b6:
5a:ae:bf:62:d5:b8:a8:f5:7e:07:8b:fe:16:46:c8:d2:ce:96:
b6:2d:15:46:97:52:81:e7:3f:4b:17:c0:1b:08:31:fc:27:53:
72:cc:36:e0:fe:fa:5c:96:a7:a8:d3:3d:02:86:6e:0c:bb:82:
72:0e:0b:33:aa:c0:82:f5:45:88:0b:a9:e2:64:8d:f2:bc:64:
d9:62:a3:b1:90:13:79:4f:1e:8f:d2:e6:cd:47:7a:1f:0d:89:
51:0e:de:d4:52:7b:bb:e0:3c:b2:86:b5:b6:7c:82:9d:20:34:
34:bb:39:8b:0c:28:f4:e7:7c:78:c5:0c:ac:ff:9a:b6:01:9e:
86:0b:3d:26:71:db:9c:6c:43:2a:88:af:e3:e2:b7:14:1b:d0:
d8:0a:9c:84:7c:04:d4:fc:c9:68:96:4d:23:ce:b9:b6:ba:61:
31:7d:0f:3e:0e:44:2c:65:c5:51:d7:70:5f:a5:19:53:86:5c:
d0:1a:ed:b5:97:ad:bd:eb:0c:70:31:d3:ef:1e:d2:97:f6:4a:
90:d8:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:39 2026 by rpki-client