Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json)
Hash identifier: YP1fiGkOhy5lFcrU0zdbxv4L06ZYNC394kg9mKGxzWM=
Subject key identifier: 69:D5:59:34:60:C1:F0:16:2A:E8:00:30:F3:14:AE:0F:80:5B:02:E1
Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d
Certificate serial: 019E1EA34FBD31DA92F8D05DDD080F48BE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
Manifest number: 017D
Signing time: Wed 13 May 2026 00:01:19 +0000
Manifest this update: Wed 13 May 2026 00:01:19 +0000
Manifest next update: Thu 14 May 2026 00:01:19 +0000
Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: mC+zomI7iLn9f58yo3cR/ULTaDW4A/EHrdKtOTpCMEY=)
2: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (hash: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:4f:bd:31:da:92:f8:d0:5d:dd:08:0f:48:be:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d
Validity
Not Before: May 13 00:01:19 2026 GMT
Not After : May 14 00:01:19 2026 GMT
Subject: CN=69d5593460c1f0162ae80030f314ae0f805b02e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:05:56:76:ff:6c:cd:c7:87:d8:41:52:0f:03:
0a:6a:c7:e4:67:f0:99:f9:01:cb:fe:7d:45:d0:fe:
d9:e1:bc:7f:1c:bf:f0:3a:9a:5d:5d:65:f1:db:4f:
b8:30:5c:60:89:7e:ef:f6:04:52:00:cf:96:be:26:
90:7c:1e:e9:94:76:b0:04:a9:63:e2:03:8e:b5:99:
2a:39:48:bd:88:5f:e3:66:cd:3a:ef:24:8d:6e:f8:
4c:0b:b6:18:43:cc:32:65:b6:f6:27:b4:0f:a4:24:
57:39:64:a6:b3:0e:dd:02:bf:8b:49:e9:bb:54:83:
46:96:50:07:eb:20:1c:5e:c2:2c:8d:5a:f9:ac:af:
3b:17:f8:f4:fc:1e:f3:eb:0b:af:42:2f:b1:dd:1e:
97:60:ba:ca:72:5f:fd:00:d3:53:7e:02:4e:01:96:
44:a7:5f:1b:5a:28:a7:62:b8:d5:ad:f0:b6:70:d4:
41:e9:2d:92:9d:d2:7a:74:e9:de:90:35:27:ee:60:
95:8e:dd:43:93:f5:49:bc:34:28:4d:f2:31:4e:f7:
9a:4e:b1:7e:a6:69:04:9e:0e:df:9b:51:2d:8f:77:
66:70:1f:07:34:03:0a:99:9d:55:cf:c0:fe:2e:ab:
1c:19:77:15:25:9d:87:06:ba:55:c1:6f:45:df:63:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D5:59:34:60:C1:F0:16:2A:E8:00:30:F3:14:AE:0F:80:5B:02:E1
X509v3 Authority Key Identifier:
keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ae:5a:d7:68:48:04:11:c7:43:25:70:e3:c6:a6:a3:48:34:
c5:6f:cc:8b:dc:2e:26:ed:e1:e4:9f:a6:e7:84:81:0f:c1:fe:
15:7b:81:ac:92:5a:ce:16:fa:b8:92:df:b9:91:a1:44:04:ef:
ac:c1:95:cd:89:8b:f2:59:3e:99:be:8d:79:6f:09:ac:19:d8:
be:9a:24:2b:9e:6e:c4:c7:50:cf:1f:62:7a:7b:ba:d7:8a:77:
45:e0:87:10:e0:d0:07:5b:63:10:35:c3:07:02:45:27:06:69:
e4:28:f4:37:1a:10:42:5b:d5:85:6c:e7:07:07:72:29:42:12:
37:74:cc:b4:11:52:89:8d:7f:57:8b:ce:f9:55:1c:21:9c:6d:
3a:15:5f:8c:d3:5f:3a:ee:78:9e:1a:1f:d0:45:ad:c5:0b:12:
8a:09:6f:62:ab:d2:88:c5:67:d1:ce:db:30:f3:4f:7a:9d:78:
d9:5b:f3:71:59:26:12:86:86:0e:d5:7b:db:8b:40:30:bb:44:
8e:51:ba:ff:eb:35:41:54:7b:e0:5b:71:3c:a7:d1:56:89:41:
19:ac:c9:e1:26:e7:49:43:66:6a:65:1e:02:48:31:82:30:ca:
71:4a:79:f0:0c:f1:30:4d:b1:73:a5:d1:e0:82:bd:ed:36:3e:
7b:8d:69:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo0+9MdqS+NBd3QgPSL5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjA0NzViNjgwYTE4ZTRkYTM0YjJhMjg5OTA2MjgzZTI4
NWQ4MmQwHhcNMjYwNTEzMDAwMTE5WhcNMjYwNTE0MDAwMTE5WjAzMTEwLwYDVQQD
Eyg2OWQ1NTkzNDYwYzFmMDE2MmFlODAwMzBmMzE0YWUwZjgwNWIwMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gVWdv9szceH2EFSDwMKasfkZ/CZ
+QHL/n1F0P7Z4bx/HL/wOppdXWXx20+4MFxgiX7v9gRSAM+WviaQfB7plHawBKlj
4gOOtZkqOUi9iF/jZs067ySNbvhMC7YYQ8wyZbb2J7QPpCRXOWSmsw7dAr+LSem7
VINGllAH6yAcXsIsjVr5rK87F/j0/B7z6wuvQi+x3R6XYLrKcl/9ANNTfgJOAZZE
p18bWiinYrjVrfC2cNRB6S2SndJ6dOnekDUn7mCVjt1Dk/VJvDQoTfIxTveaTrF+
pmkEng7fm1Etj3dmcB8HNAMKmZ1Vz8D+LqscGXcVJZ2HBrpVwW9F32NABQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnVWTRgwfAWKugAMPMUrg+AWwLhMB8GA1UdIwQY
MBaAFEIgR1toChjk2jSyoomQYoPihdgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlCSFcyZ0tHT1RhTkxLaWlaQmlnLUtGMkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNDc2ODgtOTkzYS00MGZmLWJiNmEt
NDViOGU0OWJkMTQzLzEvUWlCSFcyZ0tHT1RhTkxLaWlaQmlnLUtGMkMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xNDc2ODgtOTkzYS00MGZmLWJiNmEtNDViOGU0OWJkMTQz
LzEvUWlCSFcyZ0tHT1RhTkxLaWlaQmlnLUtGMkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGq5a12hI
BBHHQyVw48amo0g0xW/Mi9wuJu3h5J+m54SBD8H+FXuBrJJazhb6uJLfuZGhRATv
rMGVzYmL8lk+mb6NeW8JrBnYvpokK55uxMdQzx9ienu614p3ReCHEODQB1tjEDXD
BwJFJwZp5Cj0NxoQQlvVhWznBwdyKUISN3TMtBFSiY1/V4vO+VUcIZxtOhVfjNNf
Ou54nhof0EWtxQsSiglvYqvSiMVn0c7bMPNPep142VvzcVkmEoaGDtV724tAMLtE
jlG6/+s1QVR74FtxPKfRVolBGazJ4SbnSUNmamUeAkgxgjDKcUp58AzxME2xc6XR
4IK97TY+e41pcQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:00:30 2026 by rpki-client