Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: NjJk+RPwNtFgt8CA+hkNcT63jd8fW57ib9f7LxISEgY=
Subject key identifier: 93:94:3C:6B:68:3F:BF:5A:27:E8:AC:EB:6C:77:8A:55:8E:44:EE:7A
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 019C7CDAD62355BDBBD5C3156C52ECA75264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 17D2
Signing time: Fri 20 Feb 2026 21:00:42 +0000
Manifest this update: Fri 20 Feb 2026 21:00:42 +0000
Manifest next update: Sat 21 Feb 2026 21:00:42 +0000
Files and hashes: 1: 1F0qNclB-ExLPCiSnNcthE_r9_c.roa (hash: QwRMn3gGPVZpUlUuvzTrMdSUvfPfsQVqSl97mHjUskQ=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: TXdEGbXXVeUrOd4MU6EeX7ZPsmAz8DVTLnotJpS10fw=)
3: _s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa (hash: Ywl3/rT3Yvc6PwS517NtDKZMtBFZBCISKDYA9P6DLWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:da:d6:23:55:bd:bb:d5:c3:15:6c:52:ec:a7:52:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Feb 20 21:00:42 2026 GMT
Not After : Feb 21 21:00:42 2026 GMT
Subject: CN=93943c6b683fbf5a27e8aceb6c778a558e44ee7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:fe:57:55:c3:26:c0:ae:a8:da:64:e7:f1:
c4:84:fa:e7:d5:c0:3e:da:28:be:f3:d2:ec:dd:f1:
2e:4a:e7:af:7d:76:01:37:2a:f9:c3:b1:75:0b:0b:
de:f0:9d:6c:56:58:49:13:3d:e3:80:43:f6:ca:cd:
db:47:5e:00:b6:07:74:87:4f:c4:33:c1:1f:86:d5:
8e:f6:f1:fa:c5:f0:83:f9:e0:95:c1:cf:25:21:1a:
0f:6a:4d:f9:1d:70:3d:c5:14:99:b0:3b:10:b9:2b:
cf:54:6c:e5:04:6e:e4:6f:98:25:e9:fc:31:7c:83:
fb:96:e6:11:19:02:5b:21:f1:c7:24:04:5e:b7:f3:
0e:e9:f1:7d:b1:a6:f0:4b:f9:e9:b0:ad:a7:0c:9a:
c4:82:90:ac:0d:28:61:d6:09:59:00:64:6a:9c:16:
4c:a6:67:b2:1e:f4:0f:54:35:fe:ea:8c:ff:7d:5b:
f4:95:0b:6d:ce:8d:68:b1:24:b5:8c:33:64:79:3f:
3a:0c:82:6b:e9:64:31:b4:2b:af:fd:18:40:93:01:
d3:05:84:61:a7:70:b4:74:0a:44:24:4a:ba:b8:f5:
e9:d2:0f:e4:59:05:a0:77:06:7e:13:bf:0a:48:ca:
e3:6c:1b:ad:70:4f:9a:15:8a:52:8d:31:eb:1d:79:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:94:3C:6B:68:3F:BF:5A:27:E8:AC:EB:6C:77:8A:55:8E:44:EE:7A
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:02:90:17:ca:d0:e1:63:0e:b6:0e:51:ce:5f:0a:27:77:33:
50:2d:3e:a1:e5:87:35:e9:c6:08:14:87:92:6f:6f:3d:0b:cd:
96:29:23:1e:2e:61:b8:a1:12:b4:67:ef:1d:64:9a:32:de:dc:
ca:b8:55:9e:27:83:51:06:6f:a8:dc:4a:20:7c:1e:56:07:de:
ac:67:51:6f:ad:6e:4c:87:e3:f6:59:59:9d:76:54:b6:05:c6:
19:4b:cd:e9:66:d0:db:19:b0:81:34:eb:8c:de:a8:7b:dd:64:
61:bc:88:9d:60:a1:48:79:2d:da:33:d0:7b:b6:6e:ae:36:d1:
95:b1:3f:1c:3b:41:b4:2a:db:28:73:5c:54:9f:03:94:17:02:
15:fc:8e:3d:06:60:80:7e:35:17:ee:be:cb:5d:4a:07:f8:19:
01:5f:67:d8:c8:b4:b4:41:46:5c:2c:7c:35:5c:b7:18:85:7e:
30:de:6c:7a:8d:e8:e1:35:62:ef:fb:35:df:58:d7:d9:e6:46:
15:5a:8c:c8:c2:a5:55:e4:74:01:19:ea:5a:84:97:b8:86:68:
d2:dc:b4:42:a6:b9:82:d9:44:e3:62:22:42:df:5c:26:98:33:
58:15:a1:7f:c9:9e:a6:60:a5:f5:de:11:5f:21:c4:13:2d:31:
d9:88:e1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:09:14 2026 by rpki-client