Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json)
Hash identifier: tpwQ6nfUdKy7Ym/Gs3yJdDWEUUDFm6MmRU1reiuLyYI=
Subject key identifier: 9B:86:13:99:91:0D:BD:00:99:F4:07:80:0C:CB:4A:2C:3A:C9:17:CC
Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d
Certificate serial: 019EF122E194454ADB6510CAABA170BA8538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
Manifest number: 01EA
Signing time: Mon 22 Jun 2026 21:00:55 +0000
Manifest this update: Mon 22 Jun 2026 21:00:55 +0000
Manifest next update: Tue 23 Jun 2026 21:00:55 +0000
Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: R20u1yD9Z+ZP5a9Cb+mkj06MLNDTcn/qX0rA09TUmIE=)
2: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (hash: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f1:22:e1:94:45:4a:db:65:10:ca:ab:a1:70:ba:85:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d
Validity
Not Before: Jun 22 21:00:55 2026 GMT
Not After : Jun 23 21:00:55 2026 GMT
Subject: CN=9b861399910dbd0099f407800ccb4a2c3ac917cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:aa:bb:cd:89:0d:94:db:2f:e0:d0:27:f8:
b8:3b:06:e3:d0:e9:33:ee:5e:58:cd:4e:41:fb:db:
24:4d:bc:bc:57:a1:5a:58:38:16:2e:c4:49:50:c1:
5c:37:5d:bd:b1:2a:95:f5:ed:3f:02:e0:95:0b:6a:
73:78:56:6f:ef:23:a1:1e:de:ad:97:42:e5:ca:7c:
dd:16:20:db:e6:58:a3:d6:4b:c9:25:02:10:91:4d:
24:49:cd:67:22:30:6f:76:f1:c4:b6:90:6f:52:33:
5e:95:cb:0d:fe:63:e7:f3:c4:2b:99:9a:f4:7d:51:
6d:38:8f:8a:bb:8f:a1:19:f5:84:e2:d2:22:5d:6b:
c5:de:c5:0a:d2:7a:24:e2:47:d0:de:36:85:4e:58:
de:d0:ee:cd:ce:28:91:53:17:ed:27:5f:98:f6:40:
f7:ec:77:52:76:14:fa:d2:2e:4e:6d:a6:da:54:da:
97:04:c4:35:3b:b7:d2:6e:15:fa:8b:a0:8a:11:d4:
41:85:bf:c2:66:a1:19:ae:7a:bb:b6:ed:88:9d:13:
f1:04:6e:c3:ff:de:14:73:41:f7:d8:aa:85:33:2f:
83:b0:65:ef:a1:c3:24:d7:76:07:c6:82:a4:33:02:
f7:39:c5:58:59:fb:06:d9:7b:6a:71:d4:2b:a7:e2:
aa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:86:13:99:91:0D:BD:00:99:F4:07:80:0C:CB:4A:2C:3A:C9:17:CC
X509v3 Authority Key Identifier:
keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4e:8e:5e:55:45:37:aa:43:ef:c4:b8:d3:73:d8:a4:ba:10:
4e:c7:d0:d5:78:1e:43:9a:37:de:25:a9:d4:0b:5c:ea:ec:94:
d9:c3:11:4c:4a:53:bf:56:6b:21:dc:c9:53:b8:17:2e:7a:c5:
13:d5:c3:5f:80:f4:69:8d:f1:79:49:3c:be:50:6a:e6:97:89:
45:90:e3:d5:bf:82:7b:ec:83:83:74:2a:6c:f1:3d:9d:b6:e1:
6f:8c:eb:ae:66:47:3a:31:52:02:dd:b1:e1:fe:6f:aa:ef:74:
4b:d3:cc:31:62:a6:56:43:93:c7:a5:d1:fd:3f:34:e8:25:c1:
09:2d:5e:8e:5f:b4:c5:3c:eb:18:d4:26:a0:15:b1:d6:6c:ab:
cf:8c:6c:46:b8:9e:08:8a:cf:5e:99:fa:09:86:23:21:55:87:
98:9d:2a:9f:0a:87:25:e1:e8:09:80:a9:48:b8:6f:d0:fd:3e:
3c:54:ef:18:c1:58:cf:29:0b:75:a4:36:14:58:6b:a0:6c:20:
4f:5c:ea:79:ed:5d:b2:62:59:af:38:4e:b8:42:fe:7b:29:1d:
9d:d4:e6:26:98:42:2a:62:28:33:d2:34:53:cc:14:e9:55:15:
0d:f3:7a:e9:f0:a0:1f:04:25:da:cb:94:b3:09:73:d2:f2:4e:
4c:d7:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 06:30:30 2026 by rpki-client