Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json)
Hash identifier: oaERMAILI5focLK+LD9NQ1TJ7a4sg8RiUhDhJ/bM7Fc=
Subject key identifier: A1:A8:E1:53:EA:41:57:4C:AA:7F:98:DA:67:8D:85:F0:98:41:97:7A
Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d
Certificate serial: 019E07763A17974687E4F31FD8788AD77354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
Manifest number: 0171
Signing time: Fri 08 May 2026 12:00:49 +0000
Manifest this update: Fri 08 May 2026 12:00:49 +0000
Manifest next update: Sat 09 May 2026 12:00:49 +0000
Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: 7vXsZ0SfIij/SX7EOZtsh22WDOpnZeAz0QQZe55+LTU=)
2: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (hash: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:76:3a:17:97:46:87:e4:f3:1f:d8:78:8a:d7:73:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d
Validity
Not Before: May 8 12:00:49 2026 GMT
Not After : May 9 12:00:49 2026 GMT
Subject: CN=a1a8e153ea41574caa7f98da678d85f09841977a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:56:36:89:41:fa:60:a6:a1:75:e6:e4:42:
7f:b8:0b:43:c5:66:43:70:a7:0b:89:0d:83:aa:a0:
c4:38:c3:84:b4:7b:38:5a:a6:6f:d1:24:9b:01:91:
e1:ea:de:e6:ca:5b:07:aa:34:0e:8c:34:a3:38:c2:
5e:f0:42:23:7d:da:ad:cf:e0:1c:42:3a:ed:2f:e3:
fb:29:dd:bf:2e:5a:de:0f:9a:3a:ce:e1:1e:c3:16:
28:5a:5b:b3:2c:3d:35:23:ee:52:2d:6f:75:d6:d2:
95:01:59:30:92:a8:e3:2c:5e:2e:7f:ea:20:33:bd:
68:f8:89:2b:a3:9f:6d:61:58:92:b8:7c:71:be:4b:
92:4b:b9:b5:62:07:7c:8f:c2:63:a1:e9:19:d2:cc:
b7:10:ab:00:2e:38:dc:ba:f7:53:43:0b:1b:ed:05:
7e:60:e0:5b:d3:fa:4a:db:4b:af:3c:5b:77:c4:43:
6c:ba:26:57:aa:36:17:da:a6:87:22:09:a8:45:3e:
24:19:32:91:a4:dc:e6:c5:82:3f:e6:04:57:10:72:
6a:f1:58:85:d1:bf:04:e6:48:b1:d1:15:9f:fa:1f:
06:d3:48:dc:fa:3a:a0:ea:e0:ca:c3:5f:18:34:5d:
e6:e6:6a:14:83:8c:d8:6b:be:13:21:8d:1f:bb:2e:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A8:E1:53:EA:41:57:4C:AA:7F:98:DA:67:8D:85:F0:98:41:97:7A
X509v3 Authority Key Identifier:
keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:99:75:39:a0:ad:4e:f6:ec:05:48:66:27:65:9a:ac:06:31:
c7:1a:f0:28:12:45:19:2e:87:70:13:aa:37:0f:79:8d:39:c9:
72:61:3d:83:2e:4b:94:e9:7e:19:57:ac:18:42:68:70:65:f9:
f7:87:55:3b:9b:68:7e:2d:f6:14:1d:6e:a7:2a:fc:33:25:91:
05:74:ff:4f:58:06:d2:27:3f:90:5f:2a:e9:23:27:4c:9b:97:
56:da:98:7d:5c:43:14:ab:bc:16:93:39:10:df:7e:6f:e9:a2:
62:b5:81:ad:53:e2:55:82:6b:27:d4:14:ff:2e:7a:12:2a:a5:
9c:60:d5:c0:29:50:6e:38:7f:e3:5a:67:63:40:d2:15:c2:f4:
dc:73:00:6e:c5:4c:d2:29:5b:4c:fa:73:bf:3e:0f:31:da:25:
65:5b:5d:72:d7:34:8f:f9:91:51:8d:88:5d:69:14:63:34:c9:
db:45:83:a0:00:b4:1b:b2:16:b8:c3:14:03:77:b9:21:b5:2f:
ea:ba:41:70:c3:62:22:35:4c:98:3f:56:26:2a:b9:48:89:5f:
39:40:a3:78:c2:a7:7c:0c:1e:5d:24:3f:06:92:df:36:cc:72:
0f:a2:8d:e5:38:a3:94:1e:c4:66:1a:1f:39:52:14:74:62:4d:
37:82:1c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:26:21 2026 by rpki-client