Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: QsQxFxd+6wGo9ANSJkCMnXHxN/3XCANzgQyYQ4ItT5M=
Subject key identifier: 7A:3A:09:ED:E1:4B:44:64:57:40:C5:48:7A:6E:67:0F:40:D7:40:45
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019D25BA52B3A64ADC290592906ED32C1472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 16:01:00 +0000
Manifest this update: Wed 25 Mar 2026 16:01:00 +0000
Manifest next update: Thu 26 Mar 2026 16:01:00 +0000
Files and hashes: 1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: RPLXVHoYgWwTesskYq5x2CIV9Kdyd5MEQeZYAhLksjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:52:b3:a6:4a:dc:29:05:92:90:6e:d3:2c:14:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Mar 25 16:01:00 2026 GMT
Not After : Mar 26 16:01:00 2026 GMT
Subject: CN=7a3a09ede14b44645740c5487a6e670f40d74045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:97:56:f4:65:0f:53:17:24:0d:c1:72:4a:
8c:ea:2a:da:28:2c:ef:b1:f5:b1:da:aa:b5:60:4c:
f7:21:54:b9:d2:6e:58:8f:34:c4:86:de:9c:ec:50:
fe:ca:9a:c8:98:bf:41:d7:42:30:4c:f8:2a:13:11:
27:19:11:66:a8:43:a5:1c:c7:39:f3:4f:8d:6b:29:
10:63:d6:1b:91:31:e0:53:3f:70:78:79:82:99:b7:
c0:e4:3f:4c:5f:54:f9:b1:56:12:20:23:e1:3c:da:
73:08:06:5d:6e:c2:4a:89:df:b3:f1:74:d3:8c:f1:
9a:79:8e:2d:1b:64:01:a5:f0:62:55:b4:0d:63:21:
8b:63:e4:05:ad:43:9e:da:f2:d2:b1:e9:cc:d4:13:
04:c3:7e:da:b9:5e:df:8e:0c:0a:f3:f7:e1:88:ef:
c3:56:ac:c2:19:d6:3c:4c:e6:25:8c:08:88:54:69:
25:e1:ff:a3:93:88:68:3c:fe:8e:9b:ec:db:53:38:
b8:6a:ca:0b:02:cb:08:23:f3:a3:31:cb:80:07:63:
ee:0d:3f:f7:01:09:7f:b2:32:b3:3c:90:af:4e:57:
30:11:66:89:89:78:75:c4:ec:6b:27:74:21:10:a4:
4e:5d:21:3e:47:d5:bd:4d:0e:af:ea:fd:04:85:5d:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3A:09:ED:E1:4B:44:64:57:40:C5:48:7A:6E:67:0F:40:D7:40:45
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5b:5b:39:40:ce:48:21:47:48:7e:59:7d:52:d3:8a:61:11:
01:73:a5:a2:5c:48:b6:de:6a:20:7b:32:84:e3:e6:3e:a6:44:
08:dc:20:b3:3d:3a:d1:73:a9:e1:8d:40:1b:e1:66:4a:8e:30:
c9:f3:f3:1e:f2:0d:8e:47:81:ee:ea:89:46:83:20:3b:24:fa:
fd:35:2c:cd:2d:2c:5a:af:03:ca:21:f0:ba:64:b8:10:7a:ec:
64:a1:d1:0c:06:ea:08:b6:92:e4:24:c2:34:fd:88:37:f6:52:
18:28:a7:c7:c7:f6:4c:da:08:d4:86:6c:28:e9:f3:5b:6f:f4:
c4:31:a0:75:d9:a4:9e:5f:64:13:0e:b0:ee:b2:c8:7b:71:ad:
f0:0b:eb:4f:bc:4f:e8:a5:df:04:02:54:b9:64:a8:d3:f4:21:
2d:67:3e:b3:3d:58:f9:9f:f7:2d:9b:62:21:fa:47:37:a8:8b:
07:1c:0e:85:5d:f2:ac:a9:27:de:93:d5:b7:0f:1e:ab:32:ba:
24:7b:4e:81:92:0c:77:bf:b1:52:a3:68:80:9b:37:7e:78:00:
00:40:8f:05:89:58:4f:06:66:9b:74:d2:52:1f:23:b1:b9:b0:
d9:04:91:c3:73:7c:7a:47:91:87:f5:69:5d:d9:e5:79:4c:2f:
40:61:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:40 2026 by rpki-client