Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json)
Hash identifier: Yhc8/syKYFzBaCgq+eyuiEEroT67i6N4T9F+1HPOfbQ=
Subject key identifier: 40:05:5F:86:7C:50:53:44:53:60:5F:2A:DF:AE:2C:92:50:10:E0:E1
Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d
Certificate serial: 019EC0DAFC5324718ED5E085BAA2E4F74C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
Manifest number: 01D1
Signing time: Sat 13 Jun 2026 12:00:37 +0000
Manifest this update: Sat 13 Jun 2026 12:00:37 +0000
Manifest next update: Sun 14 Jun 2026 12:00:37 +0000
Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: UnYt05pv7o8qNZJjAXUyFu4CxvgF6jf/SEOiDzxd+mk=)
2: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (hash: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:fc:53:24:71:8e:d5:e0:85:ba:a2:e4:f7:4c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d
Validity
Not Before: Jun 13 12:00:37 2026 GMT
Not After : Jun 14 12:00:37 2026 GMT
Subject: CN=40055f867c50534453605f2adfae2c925010e0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a0:2c:87:b2:b1:c6:8e:31:77:f7:56:04:d0:
9e:1f:5a:8f:51:20:ea:bf:36:49:18:63:33:aa:ee:
a2:8e:2c:a8:06:0f:33:fa:c3:fd:3e:a3:af:98:d4:
ed:9d:92:ce:b0:40:bd:3c:15:47:1d:28:83:bb:32:
f0:e0:e3:58:b4:b9:90:e5:c1:14:2e:17:dd:24:22:
54:5f:4a:7d:3e:17:8c:61:2b:68:13:72:ea:87:a6:
65:87:75:40:b2:99:aa:7c:b8:9d:c1:23:23:c1:3e:
2d:40:ab:0d:73:43:ab:54:94:8e:e9:95:8b:f1:98:
28:a3:6f:a0:b9:e7:81:98:68:1b:1e:e9:a9:98:f2:
68:56:64:99:fe:86:6b:e7:46:37:40:15:28:7d:2d:
4a:7e:a4:26:5e:46:0a:46:e7:da:ff:55:d0:5d:8c:
9c:1b:c1:2c:aa:4e:d5:23:a0:e2:82:cb:a1:c1:d1:
36:4f:e9:74:c3:e4:63:71:91:24:89:39:7d:36:0b:
31:e7:8a:25:8a:81:44:60:ba:c1:ec:08:f4:40:76:
d6:82:eb:d6:18:b9:c2:f0:60:84:d8:61:6e:cb:81:
01:00:4f:d8:c6:80:48:b2:d4:0b:5e:3e:c9:de:6d:
48:d2:a4:e5:85:eb:35:80:60:c2:82:30:f2:af:46:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:05:5F:86:7C:50:53:44:53:60:5F:2A:DF:AE:2C:92:50:10:E0:E1
X509v3 Authority Key Identifier:
keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d7:42:c4:c6:ad:3f:44:51:15:26:f2:16:4b:9c:15:b6:7e:
28:e8:ee:01:9f:f5:9c:0e:8f:d2:6b:2c:16:17:7c:dc:14:1a:
11:17:3d:a9:67:1f:ef:f8:1d:0b:c6:cf:03:09:6f:ea:e2:95:
87:30:1f:f5:1b:3f:f7:d1:19:6a:8a:41:78:8d:e9:1d:fa:9a:
81:3f:7f:ed:38:b6:94:a0:57:69:e9:58:89:8d:2d:9a:26:90:
b5:89:e3:e1:3b:e7:6d:69:3b:2e:70:33:45:a9:1c:23:34:60:
4f:80:df:33:22:e1:b9:85:89:29:98:44:92:81:9e:b9:bd:b8:
68:c2:30:76:2e:f7:9b:ab:d0:c1:ea:d8:2e:8b:2d:74:d3:46:
4d:3e:3b:af:0d:f7:32:eb:01:4e:dc:9e:8a:3c:32:9f:80:10:
b4:25:8a:2d:c4:ce:dc:09:19:d5:c5:74:e0:48:cf:8f:f4:d7:
2b:06:a5:3c:c5:51:f0:df:a2:d1:56:04:2b:a9:55:35:80:b9:
0c:df:8f:72:91:1d:01:68:35:26:e7:82:6a:52:db:f2:a5:35:
99:8a:65:b7:c3:8b:c0:2c:db:61:5e:c8:8f:1b:d7:df:51:02:
34:11:cd:88:fc:41:c4:1d:42:e0:03:12:18:78:1b:b3:4e:8b:
c6:0a:b7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:00:20 2026 by rpki-client