Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: +4NylBvvYXXOgU4A5Jk+LkkVPEJZDehYL//+vNBLumg=
Subject key identifier: EA:AD:E2:1F:95:2B:69:75:28:80:02:AB:95:2F:37:33:88:BC:0C:FE
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019E1CEBEBD56053D77E5FB59207A8F85EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 16:01:23 +0000
Manifest this update: Tue 12 May 2026 16:01:23 +0000
Manifest next update: Wed 13 May 2026 16:01:23 +0000
Files and hashes: 1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: zzYm18HLM9wrm3rwXS6v/NVKwdriuIMNKd9laDTaGs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:eb:d5:60:53:d7:7e:5f:b5:92:07:a8:f8:5e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: May 12 16:01:23 2026 GMT
Not After : May 13 16:01:23 2026 GMT
Subject: CN=eaade21f952b6975288002ab952f373388bc0cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:c0:c8:15:e5:b8:f4:84:16:89:c6:3d:de:
2c:de:de:85:65:a8:40:74:3e:e1:2f:87:69:99:d4:
20:cd:f9:37:9c:97:ba:b6:30:74:c6:41:97:fc:f4:
40:f7:5d:60:fa:4d:6a:07:bf:3a:a9:99:a6:f9:de:
85:ab:e1:c2:1f:60:4e:99:e9:fb:f2:ac:19:7e:f4:
65:c9:31:ad:ae:a3:05:3c:a0:3f:7f:97:e0:28:5a:
24:78:d5:9d:fd:9d:82:5f:9b:33:f6:61:d1:bf:8a:
67:01:43:b4:43:7d:05:c1:a3:34:3c:e4:8c:6f:c9:
da:15:39:03:e9:c8:81:a7:31:56:29:a6:9d:40:77:
2d:93:81:2e:b5:5f:a4:ab:0a:2e:c0:ce:e4:4b:d9:
b1:e8:68:7f:8c:b1:79:7c:90:63:78:be:03:75:70:
ad:31:80:bd:ba:91:82:ad:85:59:10:58:0a:0b:0e:
2b:e3:e0:92:a1:d5:a6:01:65:fa:47:58:d4:f4:dc:
fe:ec:1d:2d:03:49:8b:ea:9b:96:3c:8e:2e:1c:7c:
64:b8:4c:d1:75:b4:fd:b4:db:f2:3e:2c:bf:ca:2d:
64:84:56:c3:61:0e:af:27:cd:35:78:2f:e5:51:98:
4c:f3:da:47:b4:25:36:eb:6d:72:1e:ff:79:08:35:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AD:E2:1F:95:2B:69:75:28:80:02:AB:95:2F:37:33:88:BC:0C:FE
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e3:8e:c8:ff:e0:af:5d:fe:82:24:89:62:74:67:60:a3:b1:
2b:52:9f:a0:03:a2:06:7e:2d:20:1e:38:17:ae:77:36:5d:4f:
25:ee:ed:0a:02:81:ee:9d:b1:e1:e8:39:5f:2a:7c:56:16:9f:
39:18:ef:ac:22:2d:34:f7:c4:e8:95:77:14:43:31:31:20:93:
8e:74:80:c3:49:43:17:07:0b:4f:d3:ff:78:94:ef:e6:52:42:
49:a4:14:a2:42:fb:50:65:68:e2:d7:66:c8:1a:b2:92:52:99:
31:cb:1e:3c:07:66:da:00:b7:9a:da:dc:cc:09:70:71:5e:47:
30:8f:45:56:8c:fb:13:07:f4:09:12:ec:f7:ff:91:14:fd:98:
45:66:a3:29:89:e9:8e:e2:ec:83:4e:74:82:f9:4f:6e:37:12:
f9:2e:03:db:f1:ea:8a:e8:4e:ed:44:8a:e4:4a:92:e0:25:6d:
a8:bb:1b:83:5d:67:34:12:16:95:9d:b3:dd:85:10:d6:a4:9e:
4c:82:39:d9:01:44:86:90:d4:15:8d:0f:7f:8d:a7:de:25:5a:
81:d0:f4:7e:9a:b3:b7:6e:0a:ef:13:fb:4c:67:92:f4:73:e0:
cb:fb:95:34:c9:85:c3:02:e4:57:16:d4:ae:a9:dc:67:c8:36:
95:03:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:09 2026 by rpki-client