Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: raHnnqXTL6KBigoHRVWGMJS/p1Ge8mtzo+Zkz7dCy3k=
Subject key identifier: 44:52:74:7F:A1:A3:06:55:7F:01:C4:86:D6:3B:12:DD:5D:1B:9D:3F
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 01A0CE5ADF0FC36B89A735B57D526145C23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 1A70
Signing time: Wed 23 Sep 2026 13:00:56 +0000
Manifest this update: Wed 23 Sep 2026 13:00:56 +0000
Manifest next update: Thu 24 Sep 2026 13:00:56 +0000
Files and hashes: 1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: /YjlKIYcSgcLH5DG09I4DaNifWY4wr63NS2OBJITMJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:df:0f:c3:6b:89:a7:35:b5:7d:52:61:45:c2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Sep 23 13:00:56 2026 GMT
Not After : Sep 24 13:00:56 2026 GMT
Subject: CN=4452747fa1a306557f01c486d63b12dd5d1b9d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:78:ee:e5:9c:41:95:21:a8:53:e1:7c:84:
dc:69:70:d6:48:f5:5d:ab:b7:65:9f:3d:5e:48:dd:
3a:48:c6:9b:6c:d8:c5:3f:81:41:5f:1e:19:6b:b0:
2e:9e:d4:78:06:2a:39:e9:fa:14:1d:2d:51:f4:f8:
78:67:94:b7:6f:d1:90:35:ea:c9:83:a1:b2:f8:cf:
dd:ad:f2:c1:0f:2e:0d:62:96:64:71:82:be:89:18:
11:85:4b:7e:d7:7b:06:b7:dc:c9:f3:43:9d:60:1c:
bb:8e:99:5a:5e:ca:db:7b:0a:56:a9:97:47:71:46:
b4:2d:bc:c2:a1:03:b9:23:fe:fc:10:ac:83:ab:c1:
ef:54:57:15:07:87:5e:e2:2d:1c:70:c6:6d:3f:f2:
d6:c4:29:eb:6a:3c:ec:30:29:30:94:e1:c1:c5:90:
3f:6a:de:55:68:1b:00:84:cd:0e:4c:b1:81:4f:16:
0f:ea:2c:a6:41:db:f3:f6:b8:07:19:08:9d:a7:dc:
a2:9d:f6:c8:f7:e5:0e:bb:05:33:44:50:bd:65:99:
cc:c5:8a:e9:69:d5:76:a4:bb:35:73:c9:cf:4e:06:
74:35:fa:c3:1f:30:6a:4d:ab:96:2b:38:c4:b2:6a:
8a:eb:a7:ae:49:9c:7b:fa:bf:fd:a2:a5:58:d9:a6:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:52:74:7F:A1:A3:06:55:7F:01:C4:86:D6:3B:12:DD:5D:1B:9D:3F
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:35:80:47:97:a5:cb:c2:58:0a:e7:8a:e4:5d:4f:62:e9:07:
e3:35:e1:e4:d3:ba:23:3f:a2:7e:54:53:a9:2b:0c:b0:53:0a:
ee:3a:83:3d:e5:87:8c:66:68:95:8e:fc:bb:5c:f5:f3:f5:ee:
bb:43:66:4d:af:f2:38:b1:33:40:be:48:ba:b0:7c:90:7b:61:
bf:74:63:5e:83:81:80:b8:09:d2:13:2b:d0:1a:e6:d1:c2:b1:
91:d0:6c:7b:80:81:9b:ea:bb:b5:64:0d:68:4f:36:21:2d:8c:
81:3a:28:ba:88:f0:d4:f4:2a:7a:d2:8e:d9:ee:02:33:f4:da:
7a:0c:5d:82:e8:7e:93:fd:5d:df:05:ee:8f:6b:23:95:b6:12:
a2:15:e4:af:0e:86:5c:84:9c:c2:cb:42:e9:c1:23:20:50:63:
28:59:ee:a8:b3:6d:53:e1:41:b2:7b:87:3f:0c:97:bb:57:44:
84:80:b0:5e:3d:24:6f:52:a7:f1:8b:46:44:78:4a:4d:63:6b:
33:3b:49:ac:73:c1:3b:ba:de:fe:c6:2a:71:6a:11:6b:a0:d0:
e4:d4:ec:87:52:22:a2:10:21:3c:96:80:74:3c:1c:5f:f5:87:
a8:d0:98:34:b9:1f:76:ec:ea:0a:5d:82:3b:e9:e9:97:a4:f6:
0e:69:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:47:06 2026 by rpki-client