Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: kJTltThMZB2ChnKO3kSj1T70Zzj0Sne1RAEw78f7KS8=
Subject key identifier: 8A:BA:77:69:50:92:4C:4D:C6:A2:45:97:39:34:15:F5:93:23:89:61
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019F91A43A4DC387E9EC638A75EFA931B2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 01:01:26 +0000
Manifest this update: Fri 24 Jul 2026 01:01:26 +0000
Manifest next update: Sat 25 Jul 2026 01:01:26 +0000
Files and hashes: 1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: YHEZH6wj9pOHj9nJlekfCEh5u6byvxMvy7jD21/ncDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:3a:4d:c3:87:e9:ec:63:8a:75:ef:a9:31:b2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Jul 24 01:01:26 2026 GMT
Not After : Jul 25 01:01:26 2026 GMT
Subject: CN=8aba776950924c4dc6a24597393415f593238961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:77:22:e5:25:ac:5f:88:88:7e:3b:14:4d:50:
56:15:db:ac:67:93:4f:73:40:87:0c:dc:9a:4d:ac:
53:aa:54:ae:c6:ba:fe:fc:c6:72:7d:60:e8:ca:96:
b3:f4:bb:43:dc:62:cf:d6:51:5d:18:3b:8a:28:60:
6f:cd:b5:f2:5e:b0:bb:9c:96:57:88:99:a5:ae:cb:
ee:ec:7e:3e:36:87:be:fd:a1:d0:28:1d:a1:fe:df:
5a:47:95:a6:2d:df:65:80:0c:e6:76:18:65:70:9a:
e9:37:04:f8:e5:2b:5e:5e:b8:d3:bb:db:0d:50:98:
b4:1a:00:31:29:f7:7d:14:87:f7:ea:2f:f3:e3:a2:
e8:51:56:74:f0:cb:16:7a:e2:6a:b1:7d:83:b3:78:
3d:3c:b0:8d:a5:b1:23:b7:2f:f3:03:9e:3d:93:f7:
a2:a3:51:76:3a:f0:a7:c5:8d:74:07:ed:75:a2:a8:
f8:ae:d6:58:36:b2:dd:df:0c:63:12:8e:09:10:d5:
fc:12:e4:54:d6:9f:20:6e:8e:d7:e3:23:09:8d:d5:
a2:52:fa:dd:3b:61:3a:be:74:fa:1b:36:a3:84:6a:
6c:7a:87:0f:4b:6e:44:0f:27:e7:58:f4:5b:c5:4d:
ca:c4:3a:4c:a4:41:90:37:34:a9:25:7a:95:91:07:
fb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BA:77:69:50:92:4C:4D:C6:A2:45:97:39:34:15:F5:93:23:89:61
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e2:00:b9:4f:e7:4d:f2:f9:48:3e:24:8b:d5:43:74:73:56:
fa:f9:21:1f:53:c0:cd:80:72:82:eb:db:e7:4d:db:fb:4c:73:
55:fd:23:50:ae:c1:ce:7a:f1:7b:a4:72:1c:fe:9f:05:e5:b9:
98:48:8f:c7:04:f7:d5:cb:71:6b:8c:04:6b:fb:c5:b4:04:7e:
53:8f:54:c3:5d:a4:47:a2:9e:9b:75:19:c1:5b:09:f7:f7:f6:
c9:93:7e:9d:5f:4f:17:fb:20:b7:00:57:64:9d:38:85:4d:d0:
e6:61:1b:23:cf:14:54:7e:23:6f:70:65:0e:3f:26:df:ce:d0:
5b:8b:0b:90:c1:79:2e:ee:70:53:b0:c3:63:77:19:41:32:6f:
35:4b:7d:d8:7c:ce:3c:77:91:82:a9:83:93:3f:64:b8:94:7b:
55:b4:03:a1:11:06:5c:a0:b9:b7:51:4f:16:fd:6a:f6:af:c7:
80:db:09:16:92:f6:f6:63:f9:61:54:97:40:47:cb:87:3c:fd:
68:99:f2:49:d2:fb:7e:ef:e5:ab:5b:4c:0e:ca:40:e1:90:1f:
66:d8:2a:2f:83:bf:13:aa:78:f5:60:0a:c6:7b:0e:b9:1b:ab:
59:11:b2:37:12:2d:39:6b:09:28:53:d3:36:8f:e7:64:21:46:
a1:fa:df:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RpDpNw4fp7GOKde+pMbLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNjRmZTczNDE5YmM4NmQ1ZjJlNzJiNDE0YjZiNGQ0Mzc5
ZDViZjUwHhcNMjYwNzI0MDEwMTI2WhcNMjYwNzI1MDEwMTI2WjAzMTEwLwYDVQQD
Eyg4YWJhNzc2OTUwOTI0YzRkYzZhMjQ1OTczOTM0MTVmNTkzMjM4OTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nci5SWsX4iIfjsUTVBWFdusZ5NP
c0CHDNyaTaxTqlSuxrr+/MZyfWDoypaz9LtD3GLP1lFdGDuKKGBvzbXyXrC7nJZX
iJmlrsvu7H4+Noe+/aHQKB2h/t9aR5WmLd9lgAzmdhhlcJrpNwT45SteXrjTu9sN
UJi0GgAxKfd9FIf36i/z46LoUVZ08MsWeuJqsX2Ds3g9PLCNpbEjty/zA549k/ei
o1F2OvCnxY10B+11oqj4rtZYNrLd3wxjEo4JENX8EuRU1p8gbo7X4yMJjdWiUvrd
O2E6vnT6GzajhGpseocPS25EDyfnWPRbxU3KxDpMpEGQNzSpJXqVkQf7mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIq6d2lQkkxNxqJFlzk0FfWTI4lhMB8GA1UdIwQY
MBaAFENk/nNBm8htXy5ytBS2tNQ3nVv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wYjE4MTUtNTNkNy00NTZkLTlmYjQt
NjcwMzA4ZDFlYzlkLzEvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wYjE4MTUtNTNkNy00NTZkLTlmYjQtNjcwMzA4ZDFlYzlk
LzEvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOIAuU/n
TfL5SD4ki9VDdHNW+vkhH1PAzYByguvb503b+0xzVf0jUK7Bznrxe6RyHP6fBeW5
mEiPxwT31ctxa4wEa/vFtAR+U49Uw12kR6Kem3UZwVsJ9/f2yZN+nV9PF/sgtwBX
ZJ04hU3Q5mEbI88UVH4jb3BlDj8m387QW4sLkMF5Lu5wU7DDY3cZQTJvNUt92HzO
PHeRgqmDkz9kuJR7VbQDoREGXKC5t1FPFv1q9q/HgNsJFpL29mP5YVSXQEfLhzz9
aJnySdL7fu/lq1tMDspA4ZAfZtgqL4O/E6p49WAKxnsOuRurWRGyNxItOWsJKFPT
No/nZCFGofrf9w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:27 2026 by rpki-client