Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json)
Hash identifier: FO4YukwxZKaN1oKGW8FPF5Wxb0mJKpF6Vh1Wuy162Dc=
Subject key identifier: 3C:0A:98:AF:49:99:E8:35:8B:D8:9F:2D:38:53:2B:B2:12:29:B8:93
Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d
Certificate serial: 01A1178686439AEE4FF569EBC14776EF4BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
Manifest number: 0307
Signing time: Wed 07 Oct 2026 18:00:54 +0000
Manifest this update: Wed 07 Oct 2026 18:00:54 +0000
Manifest next update: Thu 08 Oct 2026 18:00:54 +0000
Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: QObS7tdXjk6YmvmKXsV7CJRXdHHlUwypRpkqfaYdJds=)
2: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (hash: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:86:86:43:9a:ee:4f:f5:69:eb:c1:47:76:ef:4b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d
Validity
Not Before: Oct 7 18:00:54 2026 GMT
Not After : Oct 8 18:00:54 2026 GMT
Subject: CN=3c0a98af4999e8358bd89f2d38532bb21229b893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:47:6f:40:75:bc:f6:0e:aa:77:85:2c:34:
5d:c0:db:03:c0:97:2c:da:92:4c:ff:30:7e:9c:96:
0f:82:ce:cb:cb:96:08:5b:97:86:2f:8a:16:88:c2:
08:46:f7:77:9b:fc:eb:59:59:be:0a:a2:3e:a3:3f:
98:fd:71:45:79:87:d3:c5:e9:4f:40:57:86:7f:df:
da:d9:71:2f:00:64:b7:d7:d9:9d:21:71:6b:05:3d:
c1:1f:e0:cd:d9:7b:7a:da:e9:64:00:2f:2c:4f:2e:
44:3a:26:e4:48:ed:15:ba:c0:b2:ac:f0:54:44:30:
05:fd:0a:b4:ee:0a:b0:87:95:5c:8c:6e:69:cc:76:
f9:48:50:16:6f:85:a8:5e:de:ee:36:9f:7c:06:a3:
04:59:ab:09:99:8a:8b:50:40:df:1d:14:86:38:b8:
0d:17:cb:98:c7:02:0f:61:96:c9:1f:1c:12:3a:c7:
1b:33:cf:c7:f5:ae:ae:77:38:24:f3:4d:4d:58:dd:
98:e0:84:16:67:91:78:4d:68:c0:80:9a:2b:a5:e6:
ad:2c:1e:24:31:90:db:03:b0:3f:0d:c8:ff:40:0f:
80:a9:a0:ac:03:60:1d:81:9c:d7:41:d5:69:a1:bb:
bf:53:c1:ac:34:e8:d5:b5:39:00:09:02:89:02:14:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0A:98:AF:49:99:E8:35:8B:D8:9F:2D:38:53:2B:B2:12:29:B8:93
X509v3 Authority Key Identifier:
keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b9:d9:ce:48:c4:c2:d6:e5:ec:15:d1:80:6f:38:a1:95:94:
6b:f7:13:b6:94:23:ea:dc:0e:3e:97:5c:22:64:ea:e3:29:7e:
35:e4:4e:49:a1:54:34:11:fb:48:f9:cf:75:c4:78:a8:a5:ec:
ea:73:31:cd:bf:65:43:2d:cc:9c:39:db:35:b1:6e:30:1f:a8:
f6:70:f9:67:ba:71:4c:c8:c9:dc:b2:86:1c:c0:2d:55:06:e2:
57:cc:66:82:e7:7d:ad:5a:85:4b:b1:f5:78:94:01:ee:60:15:
dc:bf:f9:9f:44:f5:07:48:84:60:63:01:e5:62:6a:20:63:43:
11:29:f4:07:c7:90:0c:eb:0a:7b:bd:87:f0:be:b7:53:9e:7a:
dd:14:f1:84:89:e1:44:66:4d:a1:8c:16:71:d9:bc:48:03:51:
24:d0:75:ca:33:5c:ae:74:2f:bb:ba:d6:51:de:bf:2b:0c:26:
93:6e:bb:cf:d4:4e:48:59:9e:0d:94:e5:fd:5f:b1:05:4e:8e:
57:fa:06:52:3f:d0:43:73:f1:6c:41:bc:f0:ea:66:73:91:c7:
45:8a:d8:a6:3d:91:1b:05:b7:a0:73:25:e6:58:33:d7:f5:58:
2d:a3:a2:74:71:31:16:9d:b5:92:cb:76:a2:73:c2:7b:66:01:
20:9c:41:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:06:29 2026 by rpki-client