Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json)
Hash identifier: 6P74nYkiy8yJM3ssuJ8AifOygmt0cFMMxc4qH+mjmC0=
Subject key identifier: 10:62:F0:82:23:35:16:21:1C:AB:55:43:8C:DE:67:1D:AF:CF:32:71
Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d
Certificate serial: 01A0C47C79CE79D32037B0E35239BA505F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
Manifest number: 02DC
Signing time: Mon 21 Sep 2026 15:01:26 +0000
Manifest this update: Mon 21 Sep 2026 15:01:26 +0000
Manifest next update: Tue 22 Sep 2026 15:01:26 +0000
Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: AA2tfq8f0/djqPuMzVJXjpH4awajYiiIZsA/7+DY+IM=)
2: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (hash: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:79:ce:79:d3:20:37:b0:e3:52:39:ba:50:5f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d
Validity
Not Before: Sep 21 15:01:26 2026 GMT
Not After : Sep 22 15:01:26 2026 GMT
Subject: CN=1062f082233516211cab55438cde671dafcf3271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:eb:29:53:38:da:75:ab:9f:e7:ce:7b:4d:
00:64:f2:b4:e2:23:32:8d:9d:ef:b4:d7:2b:ea:7d:
6c:09:52:34:f9:83:b0:bc:34:95:d4:2a:41:df:7f:
d5:5e:eb:80:4b:c1:6a:5d:67:37:73:35:2c:29:56:
40:77:76:f8:35:19:a8:4f:77:2e:2c:c1:fc:8f:a4:
7c:46:52:9f:0f:63:8e:3f:f8:7d:4e:37:67:0e:60:
db:92:78:60:cb:ff:6d:0a:f5:50:af:c9:6a:d7:99:
88:ca:44:9b:57:d7:32:f9:70:d3:9d:60:6f:75:fb:
e8:61:10:15:7d:32:9c:08:24:37:72:b2:6b:50:10:
41:e1:7a:ad:ec:75:1e:ff:87:92:08:96:2a:0b:17:
5c:4b:b6:6e:1e:d9:50:34:ae:26:d8:63:22:9b:a2:
35:10:b7:29:84:f4:0e:44:01:87:c7:0f:38:9c:d6:
2a:3c:7b:b2:0d:c2:f9:80:8b:10:72:87:ec:19:a8:
d1:6a:41:f0:6f:81:ac:90:ab:b8:65:f9:e2:04:9d:
50:2c:28:b0:7f:ac:64:47:ee:43:24:79:b1:c3:c5:
6f:13:9e:68:71:43:88:5c:4c:1a:7f:68:59:60:b1:
34:63:82:58:e2:92:99:bd:9d:91:6a:4d:98:80:0a:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:62:F0:82:23:35:16:21:1C:AB:55:43:8C:DE:67:1D:AF:CF:32:71
X509v3 Authority Key Identifier:
keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:26:ed:06:21:10:bd:b5:2f:18:34:03:4f:03:1a:16:b5:af:
79:43:e1:d0:3c:7e:70:9a:7f:18:55:9f:a5:4a:d9:a5:d6:09:
d8:ef:76:17:3c:32:37:fa:73:93:83:33:07:03:29:f1:69:a2:
76:76:68:56:5d:68:e7:44:c0:4f:1d:a2:0f:b9:ec:a4:39:7a:
c7:a9:52:9e:33:45:de:57:dc:b2:2d:32:be:62:a1:a5:4b:e9:
9b:93:87:dc:09:78:ca:37:f2:a9:7d:cb:6a:2d:67:19:56:29:
5c:c6:47:a9:1c:a7:21:c9:d6:3a:73:dc:50:1b:21:37:f7:9e:
09:96:8b:b3:a6:0a:45:9c:e8:45:8c:ec:95:03:39:8b:85:74:
ea:b7:6c:72:23:a1:c4:90:a5:5d:2e:b6:d6:b5:d8:3c:06:3b:
70:03:67:e1:93:cf:89:70:05:6d:6f:dc:2b:30:55:d7:da:6f:
5b:ab:db:8c:1d:94:4b:02:5f:11:8f:63:55:e5:8a:a7:22:93:
34:61:6e:c2:71:b0:8d:02:0b:64:4f:35:bb:39:e5:a8:4e:da:
25:f8:c1:ec:eb:38:27:90:06:30:5e:2d:45:81:d4:68:85:8b:
68:8f:ec:44:d2:28:25:4b:af:b1:78:8a:f9:b1:72:87:95:33:
53:60:68:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:51:43 2026 by rpki-client