Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: CoTnmwyfYAqnLe/1C682hPOYt3QNdSJ9RuHf6auXg4M=
Subject key identifier: 55:6C:28:4A:2E:0C:3F:8B:85:4F:E0:DA:CB:07:E2:D6:EC:1B:F4:68
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 01A1DCB904DF14D2C818558143A5825BA3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 01:01:14 +0000
Manifest this update: Sun 15 Nov 2026 01:01:14 +0000
Manifest next update: Mon 16 Nov 2026 01:01:14 +0000
Files and hashes: 1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: Ru9je6vUNkxppJBqme1Zwu1HATxT6sZNSk/ecb+YMTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:04:df:14:d2:c8:18:55:81:43:a5:82:5b:a3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Nov 15 01:01:14 2026 GMT
Not After : Nov 16 01:01:14 2026 GMT
Subject: CN=556c284a2e0c3f8b854fe0dacb07e2d6ec1bf468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:cb:85:96:df:d7:10:1f:5e:84:ac:52:26:
99:9f:ab:e1:f9:ec:ca:38:42:28:ec:82:87:48:92:
50:94:52:73:f0:05:a5:0f:28:76:94:67:cf:c6:9e:
7f:78:a6:19:65:73:44:56:04:51:53:d9:a3:3a:dc:
ce:00:6b:b6:fa:b0:9e:df:23:04:8b:5c:73:b2:eb:
f0:26:f3:71:1e:65:39:71:44:c9:46:ae:07:56:d2:
c7:20:a4:86:73:fa:0a:de:20:85:c3:83:d5:49:75:
ef:f8:42:f8:f5:7d:4b:cf:37:d4:3c:bb:6e:02:b9:
fe:2f:70:c0:e3:89:70:93:a4:aa:2e:59:ab:65:33:
45:fe:eb:bd:ce:a0:b9:b1:b2:47:34:4e:0c:5f:b3:
7b:72:a3:c1:17:3f:67:3c:e2:5c:f0:48:1f:0a:f0:
19:21:0a:6e:28:c2:b5:3f:78:d2:00:06:59:ae:e8:
bb:b0:bb:e9:12:30:38:8b:ce:69:8a:ae:44:e4:1e:
94:c2:54:57:2d:17:75:8e:8d:63:88:23:82:99:02:
f1:ed:c9:76:02:56:4a:48:34:57:a9:98:81:b8:86:
b2:80:ea:42:6f:f2:22:26:e4:cd:80:f5:a0:5b:ee:
6b:b1:65:1a:d6:50:7f:5e:51:b1:66:cd:26:d0:ee:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6C:28:4A:2E:0C:3F:8B:85:4F:E0:DA:CB:07:E2:D6:EC:1B:F4:68
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b5:87:69:02:3f:cb:7b:d8:64:75:ce:c0:c5:c1:35:d6:34:
49:0f:40:df:61:75:7e:7e:05:a3:c9:3d:4e:a7:d8:28:2a:97:
a4:9c:fc:cd:9d:e6:7d:02:bd:0d:38:07:02:f4:e7:dc:47:08:
4a:96:c4:9a:e3:5b:7c:db:c7:29:6b:9b:f3:36:a4:1e:3c:b2:
46:2d:02:8d:66:aa:91:a9:4c:1e:4c:2d:c1:2e:42:5b:9e:0c:
de:54:89:ed:e7:c0:0a:17:72:1e:d3:c1:74:30:50:b0:f4:b9:
b3:a7:50:fe:42:69:47:17:c3:67:6b:2b:58:cc:71:c4:8a:53:
16:e8:45:ec:9c:45:8b:af:d2:2b:85:13:f1:ba:da:da:99:bd:
bf:98:24:5d:51:f6:7e:42:e9:be:21:4b:de:28:44:89:eb:5a:
dd:0c:42:96:3a:f6:af:8d:77:d8:1c:5e:ac:42:ec:b4:48:75:
53:26:00:1c:78:92:d6:bb:6b:6d:12:dd:ad:36:74:19:eb:6f:
3c:1b:18:e2:5f:c4:06:66:6b:42:eb:0e:7d:cc:e1:26:57:2e:
2d:88:cd:a6:be:d8:dc:ed:1e:a0:e8:a0:95:4b:2c:66:91:89:
fa:48:ee:c3:68:73:c2:ed:ae:4a:92:41:dc:1a:76:5a:83:3e:
b7:31:a8:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuQTfFNLIGFWBQ6WCW6P9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNjRmZTczNDE5YmM4NmQ1ZjJlNzJiNDE0YjZiNGQ0Mzc5
ZDViZjUwHhcNMjYxMTE1MDEwMTE0WhcNMjYxMTE2MDEwMTE0WjAzMTEwLwYDVQQD
Eyg1NTZjMjg0YTJlMGMzZjhiODU0ZmUwZGFjYjA3ZTJkNmVjMWJmNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEHLhZbf1xAfXoSsUiaZn6vh+ezK
OEIo7IKHSJJQlFJz8AWlDyh2lGfPxp5/eKYZZXNEVgRRU9mjOtzOAGu2+rCe3yME
i1xzsuvwJvNxHmU5cUTJRq4HVtLHIKSGc/oK3iCFw4PVSXXv+EL49X1LzzfUPLtu
Arn+L3DA44lwk6SqLlmrZTNF/uu9zqC5sbJHNE4MX7N7cqPBFz9nPOJc8EgfCvAZ
IQpuKMK1P3jSAAZZrui7sLvpEjA4i85piq5E5B6UwlRXLRd1jo1jiCOCmQLx7cl2
AlZKSDRXqZiBuIaygOpCb/IiJuTNgPWgW+5rsWUa1lB/XlGxZs0m0O6L8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVsKEouDD+LhU/g2ssH4tbsG/RoMB8GA1UdIwQY
MBaAFENk/nNBm8htXy5ytBS2tNQ3nVv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wYjE4MTUtNTNkNy00NTZkLTlmYjQt
NjcwMzA4ZDFlYzlkLzEvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wYjE4MTUtNTNkNy00NTZkLTlmYjQtNjcwMzA4ZDFlYzlk
LzEvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALWHaQI/
y3vYZHXOwMXBNdY0SQ9A32F1fn4Fo8k9TqfYKCqXpJz8zZ3mfQK9DTgHAvTn3EcI
SpbEmuNbfNvHKWub8zakHjyyRi0CjWaqkalMHkwtwS5CW54M3lSJ7efAChdyHtPB
dDBQsPS5s6dQ/kJpRxfDZ2srWMxxxIpTFuhF7JxFi6/SK4UT8bra2pm9v5gkXVH2
fkLpviFL3ihEieta3QxCljr2r4132BxerELstEh1UyYAHHiS1rtrbRLdrTZ0Getv
PBsY4l/EBmZrQusOfczhJlcuLYjNpr7Y3O0eoOiglUssZpGJ+kjuw2hzwu2uSpJB
3Bp2WoM+tzGo2w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:38:36 2026 by rpki-client