Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json)
Hash identifier: VlZXU9LTxZuAf/k+abiIEOvC34MTNBe7QeAwkF6AcQ4=
Subject key identifier: FD:39:DF:AF:05:F7:0B:96:B0:6D:5D:32:72:1A:D0:BE:1A:AC:91:B6
Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d
Certificate serial: 01A0D5DEFF4D9968444DB2E14F4151E4A74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
Manifest number: 02E5
Signing time: Fri 25 Sep 2026 00:02:36 +0000
Manifest this update: Fri 25 Sep 2026 00:02:36 +0000
Manifest next update: Sat 26 Sep 2026 00:02:36 +0000
Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: lBd7yBMLKAAeN0x4GypO06GfoL+sbSaXopb9+DcB+aY=)
2: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (hash: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:ff:4d:99:68:44:4d:b2:e1:4f:41:51:e4:a7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d
Validity
Not Before: Sep 25 00:02:36 2026 GMT
Not After : Sep 26 00:02:36 2026 GMT
Subject: CN=fd39dfaf05f70b96b06d5d32721ad0be1aac91b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:55:90:23:aa:a4:cd:c0:a4:d5:b4:fa:28:
1c:da:5c:97:04:f0:79:e9:14:a5:9a:f9:04:d7:2e:
cc:f8:f8:03:7b:9a:e9:0d:b5:72:37:15:4a:2c:39:
9a:2a:19:05:4c:44:ef:0a:26:2e:d2:89:a3:4a:53:
db:ec:c3:59:35:dc:aa:04:d1:a6:12:75:bd:23:c8:
38:eb:3e:7e:d3:2c:6f:77:c8:7b:3b:52:1f:2f:9e:
63:b1:8b:ba:71:b4:4b:c3:42:53:7c:26:b3:0d:28:
50:17:46:f9:7c:01:28:70:3f:cc:e8:95:93:82:0c:
82:ba:03:16:3e:6d:4a:3e:ff:9e:fb:dc:c8:9f:27:
48:00:5a:93:65:05:0e:8f:8f:a9:d9:ae:5b:01:cf:
4b:44:90:8b:0a:96:0b:f5:de:fe:d6:70:7e:da:08:
f9:81:51:07:a7:96:39:4b:60:44:00:8b:cf:04:38:
d9:73:04:b2:3d:5b:04:88:74:65:54:50:65:bd:18:
6e:05:7e:32:98:ee:63:da:50:8c:de:69:ee:78:d2:
0f:17:f6:fd:0e:ef:d5:e2:c6:7e:61:0c:a6:04:3f:
ab:c3:be:ea:c5:41:07:4c:24:bf:b7:af:ea:84:75:
2f:f1:8a:81:01:ca:3c:6d:67:0f:6e:02:05:0f:d7:
b1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:39:DF:AF:05:F7:0B:96:B0:6D:5D:32:72:1A:D0:BE:1A:AC:91:B6
X509v3 Authority Key Identifier:
keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5e:ae:66:69:7b:22:ea:c0:a3:23:a4:d1:d6:6a:a5:5e:55:
78:17:4f:28:08:69:f7:3d:ac:11:d1:c5:b4:e0:43:76:8e:ea:
5c:69:54:be:9e:a5:2c:22:af:35:d8:bf:0e:f4:6a:f9:de:61:
55:e7:5c:df:d0:a9:cd:7c:a4:8f:a7:0e:30:0b:4d:47:2e:f9:
f1:3f:8d:c9:7d:c8:94:8b:eb:e5:0b:c0:93:b6:01:c0:60:a5:
53:28:b5:93:c8:d3:b3:0b:7d:c7:f9:a8:da:82:ae:98:4a:ab:
f3:3f:64:07:e5:3f:9b:c2:01:1f:9e:e7:6b:5d:b3:34:0b:79:
c9:25:83:9a:9f:41:28:8a:de:e7:72:af:4a:56:6b:1d:4f:12:
2e:fd:9c:82:e2:c5:17:75:f6:8d:f8:7a:10:51:b9:e0:13:ed:
18:39:18:c3:ee:e8:ef:ee:ca:77:3f:9e:b9:e5:41:fd:f7:bc:
37:82:99:eb:1c:e7:aa:af:f0:7c:c5:37:4b:f8:4d:20:38:fe:
4e:d0:5c:49:4c:28:fe:81:3d:8e:3b:0b:fe:6d:a6:93:25:7e:
a3:c7:6a:09:3e:9b:ad:ad:2e:fd:e8:b9:1c:74:87:be:d9:f2:
3e:0b:e2:6d:00:c8:51:1f:9d:4c:dc:01:10:06:55:bf:44:f3:
63:62:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:04:28 2026 by rpki-client