Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json)
Hash identifier: qsKqKtBUZ/WJtHpMYC8K3UuH6ZSS8yAwgEHXzKWK9eY=
Subject key identifier: 6F:7B:72:D0:FB:49:F6:D4:C3:BD:60:5C:5A:14:1E:6E:94:EA:6F:38
Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d
Certificate serial: 019CABDA0754DA2C2CD5CBC74E83E5828145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
Manifest number: BD
Signing time: Mon 02 Mar 2026 00:01:58 +0000
Manifest this update: Mon 02 Mar 2026 00:01:58 +0000
Manifest next update: Tue 03 Mar 2026 00:01:58 +0000
Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: mY8m5PDDCgusTwKxUqB1qzhh1ujbtPtW47uo8QQ2WoU=)
2: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (hash: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:07:54:da:2c:2c:d5:cb:c7:4e:83:e5:82:81:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d
Validity
Not Before: Mar 2 00:01:58 2026 GMT
Not After : Mar 3 00:01:58 2026 GMT
Subject: CN=6f7b72d0fb49f6d4c3bd605c5a141e6e94ea6f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:87:fb:df:09:04:6a:5e:8d:b8:65:81:56:
ca:4a:b0:14:cc:c6:ba:74:f3:4d:78:1e:16:eb:51:
53:17:96:13:7c:cd:ad:62:68:a2:07:1d:85:f4:a7:
98:24:26:53:a3:67:b6:2e:e9:d1:8a:10:3d:20:65:
b5:ba:22:7a:a7:5f:3a:db:a2:b8:f3:f1:e6:ff:71:
6a:94:74:4d:6f:b6:0a:36:5b:5e:fd:72:b9:6e:54:
8e:b9:ea:92:62:56:e0:62:d9:70:45:ac:03:01:8c:
5e:2a:28:a5:ad:dc:84:00:d0:2a:cc:23:ce:50:41:
10:62:f2:37:92:d8:28:c9:34:f2:d8:94:3b:6b:36:
c6:43:d6:26:f7:e7:e0:75:72:17:2a:49:08:2c:2d:
43:e2:fd:6b:34:41:4a:7c:56:45:da:39:e8:ef:c9:
90:83:b5:07:fe:6b:5c:73:6c:d7:dd:9d:f1:8c:3d:
c1:f1:c0:0a:f3:19:1d:36:7a:55:80:b1:2b:9f:81:
9d:43:fd:4a:78:cf:47:fb:a9:6c:7e:c6:37:88:67:
66:4f:18:12:a9:15:1d:de:7c:88:60:21:56:a7:83:
56:80:58:1d:08:66:7e:c9:53:28:cf:60:a2:d0:1f:
35:41:8c:97:e3:ee:e9:d9:6f:47:fe:a1:8b:73:f7:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7B:72:D0:FB:49:F6:D4:C3:BD:60:5C:5A:14:1E:6E:94:EA:6F:38
X509v3 Authority Key Identifier:
keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c5:c5:91:ff:d3:d4:9a:df:e1:8c:87:5e:2c:4e:36:e3:fd:
89:fa:aa:64:30:b6:ad:b4:9e:61:65:8b:17:ce:42:5b:e6:1d:
07:e5:c6:ba:fe:36:51:51:85:7f:9f:6b:7f:19:bf:90:c9:a4:
ba:00:1e:9f:d4:0e:c7:b1:fe:25:09:f0:50:20:e9:30:1f:54:
e1:fb:10:f6:55:2c:79:34:bf:ec:b8:cd:13:9c:8e:cd:05:88:
94:5c:1d:c8:68:2f:12:6b:3c:af:d4:f0:df:ff:64:bc:26:1b:
dc:e5:05:b7:96:ed:f5:0c:5b:f9:39:16:2a:1e:4d:4e:58:73:
c4:7a:47:91:64:a5:0f:3a:62:37:c6:4e:a0:f8:33:21:22:67:
c6:b2:52:aa:89:e4:16:08:0f:bb:42:41:bb:2e:d5:ef:0b:d9:
2d:ce:47:73:ff:f7:28:f4:b9:2b:15:2f:f9:ce:eb:81:57:9e:
74:7d:b2:ea:fd:a0:d1:45:27:7a:3e:bb:6f:55:a0:23:28:f9:
86:b2:68:06:c4:0b:de:ad:e2:eb:76:54:d5:5c:b0:75:58:d7:
92:6e:61:60:09:aa:b9:cb:2e:fb:02:59:75:84:88:3c:ed:6e:
2b:05:3e:8e:16:64:32:b4:20:7c:56:45:38:25:bd:cc:9f:25:
19:62:7e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:12 2026 by rpki-client