Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json)
Hash identifier: MPqx5tJuowjtrSYD1/ufzUsqLCjBZXbrlxMer0nSQYM=
Subject key identifier: E2:CE:CB:D4:30:21:A3:69:43:BB:3B:3E:0F:6D:29:1E:04:68:BE:BF
Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d
Certificate serial: 019D2961155B4AC0E05ACEE603287B5A5C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
Manifest number: FE
Signing time: Thu 26 Mar 2026 09:02:01 +0000
Manifest this update: Thu 26 Mar 2026 09:02:01 +0000
Manifest next update: Fri 27 Mar 2026 09:02:01 +0000
Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: 8m9dqZQZjl3VbEO/zZOrcJQtYGJnN8aSjz1s9WJaLxA=)
2: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (hash: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:15:5b:4a:c0:e0:5a:ce:e6:03:28:7b:5a:5c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d
Validity
Not Before: Mar 26 09:02:01 2026 GMT
Not After : Mar 27 09:02:01 2026 GMT
Subject: CN=e2cecbd43021a36943bb3b3e0f6d291e0468bebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:19:80:97:cd:7c:75:64:45:21:42:63:42:
16:d7:91:86:40:4a:29:22:74:24:d9:9b:0a:d5:81:
2c:c0:f0:6e:5b:ce:eb:15:45:da:06:92:61:2c:97:
b8:7e:ed:38:4e:e4:54:d8:bc:b0:ad:a7:ef:b4:a4:
63:4e:1f:60:34:08:72:5f:d2:31:7e:33:fb:3e:b7:
96:ff:59:54:8a:08:f6:e9:64:b6:bd:d1:ac:ab:bd:
99:66:88:48:cc:c0:e6:c3:0c:3d:cc:df:b4:ce:a3:
c7:52:09:8a:8b:29:8b:41:16:bf:05:e4:ac:b4:94:
3b:0d:8f:97:20:3d:38:2c:aa:e6:76:ef:02:d6:75:
32:11:5a:79:d0:2d:98:d0:0a:d7:1b:aa:a2:87:04:
01:ec:10:4b:22:8e:94:bb:0f:7f:a3:3f:6b:b1:ab:
ce:6a:11:7e:81:86:56:e5:4f:ea:f3:21:3d:98:22:
f3:e4:60:a2:b4:68:c1:66:b0:19:ec:64:b6:ce:df:
09:b5:17:b6:64:34:bb:01:5e:2f:a0:18:10:d5:d5:
93:5c:65:b9:58:e6:75:ce:71:bc:81:67:b1:a9:8e:
5c:84:ef:50:b5:6d:90:7a:16:68:91:05:14:0b:e9:
81:0e:10:0e:80:c8:85:96:35:93:88:bd:e5:74:2b:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CE:CB:D4:30:21:A3:69:43:BB:3B:3E:0F:6D:29:1E:04:68:BE:BF
X509v3 Authority Key Identifier:
keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:34:4e:34:1f:b3:45:ff:b4:5e:a1:ca:16:58:f1:a4:64:6e:
ce:0b:55:98:6e:c9:89:dc:ab:b4:2c:04:bd:ba:09:8a:07:3f:
b4:9d:77:3a:c0:7f:d6:48:31:86:7e:84:ea:3d:e0:70:09:74:
58:2b:44:7e:36:63:c3:d8:06:d2:e3:20:6e:86:06:b0:31:2a:
e2:dc:52:bc:9d:0c:dd:dd:54:3d:d8:14:36:5c:4f:c5:27:39:
08:c3:42:88:6a:82:e0:26:5a:42:8d:b0:b7:b0:38:60:83:38:
d0:ce:a1:6d:64:5d:ee:d0:97:e2:62:f4:da:b2:18:7e:54:2a:
05:13:0a:74:1a:82:5b:c8:af:a2:53:49:8b:36:56:59:3b:a0:
d3:a9:fe:85:c1:8b:ac:44:8b:0d:02:7a:ee:f7:a3:ca:4c:a1:
d3:d9:18:1a:4b:29:ab:cd:a3:7b:80:c0:f7:eb:bf:c5:05:57:
7a:a7:3a:eb:7d:bf:79:16:d4:2e:7f:ee:ad:6a:5e:02:fe:82:
44:e4:f5:e3:d8:9d:89:0a:0c:3c:19:e0:ed:1d:2b:92:77:c1:
7c:4f:02:e2:bd:4f:60:84:0b:3b:06:8c:90:e9:0b:07:4e:42:
8b:dd:76:e4:ea:0f:44:9e:b3:f0:63:e8:e2:6c:fa:5f:bd:7a:
4b:78:f8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:31:24 2026 by rpki-client