Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json)
Hash identifier: 7S0WJ9rHwJMFW3RtflbAwEoWK7CHFP5BsOWsNYcEA4c=
Subject key identifier: 59:9D:A3:3E:9C:20:FC:4C:36:0C:AE:6D:AF:E1:A8:35:C3:1E:5C:F1
Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d
Certificate serial: 019FAA87B1ED44C8A7F15262DF3DB652CC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
Manifest number: 024A
Signing time: Tue 28 Jul 2026 21:00:47 +0000
Manifest this update: Tue 28 Jul 2026 21:00:47 +0000
Manifest next update: Wed 29 Jul 2026 21:00:47 +0000
Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: OdhaPv26AU9jc64NCBKvzrNPfQG2TBTc12nUhX+/rvo=)
2: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (hash: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:b1:ed:44:c8:a7:f1:52:62:df:3d:b6:52:cc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d
Validity
Not Before: Jul 28 21:00:47 2026 GMT
Not After : Jul 29 21:00:47 2026 GMT
Subject: CN=599da33e9c20fc4c360cae6dafe1a835c31e5cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:6d:e5:0a:80:fe:6b:50:f1:a1:52:81:91:
4b:e5:e0:48:34:4b:58:67:0c:dd:78:43:16:ec:da:
57:5a:44:ac:a1:8f:7b:22:f2:9b:c1:c6:4f:62:e7:
c2:9c:e2:53:d4:a2:6b:0c:2c:4e:9f:7f:a8:18:02:
c9:f7:1e:93:03:3d:58:7e:9d:c6:d1:40:f8:5e:7e:
61:d9:5b:07:10:8b:73:db:9d:99:e0:e6:21:fa:b7:
83:32:35:10:76:72:d1:e2:52:2b:c9:54:d4:71:1c:
05:eb:f6:30:a9:82:18:46:64:f3:08:fc:2f:21:9a:
93:80:5a:0b:18:c3:8d:73:5e:5c:25:4e:a9:37:3c:
d4:94:45:1f:33:2e:ea:8a:eb:4f:ae:89:b0:df:d4:
f1:71:a4:40:e4:a9:15:72:35:9c:88:94:45:18:2b:
b8:42:ee:a8:12:97:22:50:a2:3b:41:e4:1c:bc:76:
5b:45:5e:35:87:cc:7b:ef:f4:48:ad:2a:d3:70:fb:
d3:01:18:d2:db:21:f7:c1:40:d6:f5:54:82:6f:3b:
1b:f1:7f:b6:96:3b:2e:9d:65:62:fd:e1:8e:2e:de:
9c:35:66:a3:38:7d:21:ae:b7:5c:95:dd:70:8f:5c:
2d:4c:8c:df:93:b5:9d:4c:23:ba:32:64:8a:a6:29:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9D:A3:3E:9C:20:FC:4C:36:0C:AE:6D:AF:E1:A8:35:C3:1E:5C:F1
X509v3 Authority Key Identifier:
keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ed:46:97:90:ef:a5:e4:c5:24:ed:54:78:f0:c0:e4:0f:ad:
f4:a6:4b:9d:0b:69:3c:7f:9b:44:e3:23:a2:e9:c6:7d:47:0e:
aa:a5:82:62:d2:f3:0c:37:bf:dd:a4:55:61:1e:8c:9d:ca:7e:
26:45:01:aa:2c:61:f5:f8:75:f0:81:8c:32:43:3c:bd:e7:53:
4c:e7:46:b2:e2:64:53:0c:76:5a:56:5c:c7:88:b0:bb:5e:7b:
8d:a2:fc:8a:5e:4d:e9:c3:37:a9:66:36:a6:ce:ee:3c:98:db:
b4:86:54:a3:68:b1:1c:74:49:30:85:b0:50:a0:6d:2a:34:3e:
0d:40:a1:c5:ff:7f:ed:42:9c:0c:8d:22:09:89:9e:8a:08:dd:
32:1e:e0:bd:b4:e4:c0:89:93:78:68:30:9a:3c:39:3f:52:59:
f7:3c:fc:c0:f9:3e:86:cc:6e:d7:70:a1:77:ab:68:03:4a:61:
96:a5:66:a6:b3:36:6c:ba:67:be:96:81:60:40:ed:11:e6:d3:
19:24:b9:28:75:d7:8b:b0:c3:94:8e:2b:ae:67:b1:26:9f:41:
a0:74:11:02:40:f3:56:f2:7c:ac:88:cc:c7:ac:96:ac:90:df:
6f:2b:ed:66:08:02:6b:9d:38:92:9e:3a:ce:1d:45:2a:dc:df:
c7:8a:43:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:44:39 2026 by rpki-client