Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json)
Hash identifier: NpdPZZb4r7+0mUe0VUzhv2Tw47aWTbMMQ83v+dZ8L0A=
Subject key identifier: A2:72:A6:75:A2:C1:23:B5:E7:DD:A6:A8:A6:7E:9D:CB:83:EF:B8:D0
Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d
Certificate serial: 019D9963000282ED26E5A81F01FE1CDAB465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
Manifest number: 0138
Signing time: Fri 17 Apr 2026 03:01:35 +0000
Manifest this update: Fri 17 Apr 2026 03:01:35 +0000
Manifest next update: Sat 18 Apr 2026 03:01:35 +0000
Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: ugWCGus+C6aWLI8DcaDv0CPWHdIIeOqitIbaVNMGtI4=)
2: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (hash: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:00:02:82:ed:26:e5:a8:1f:01:fe:1c:da:b4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d
Validity
Not Before: Apr 17 03:01:35 2026 GMT
Not After : Apr 18 03:01:35 2026 GMT
Subject: CN=a272a675a2c123b5e7dda6a8a67e9dcb83efb8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:b3:06:28:9a:55:ce:53:4a:a2:bb:97:75:
47:60:15:28:c4:7d:37:8a:d0:97:8a:61:76:39:65:
cb:65:63:7a:cd:b3:3b:1a:4d:d8:7b:81:1c:2d:9c:
43:c1:22:b9:41:09:b6:6b:8c:a5:90:64:5c:47:02:
08:bf:3b:80:1c:15:13:2c:dd:05:27:5d:92:41:40:
7f:72:2e:f2:be:14:82:34:d7:dc:ee:14:c7:0d:8a:
a8:7a:ef:2c:6c:21:1e:a1:48:3b:30:e1:2f:6d:03:
fd:16:15:85:bb:49:e0:53:8b:1c:b7:95:81:4c:1f:
91:9d:3b:0f:e5:72:33:3d:fb:ec:de:2a:b1:bb:f1:
d4:22:f0:8a:ec:de:11:f3:8d:d7:ee:1a:b7:8a:c9:
1f:b2:b3:3e:52:5f:ab:84:ad:ff:d4:a1:d8:ad:30:
8b:2c:83:a1:11:51:84:27:05:b3:24:a3:da:f1:7b:
6d:d2:18:63:0a:06:07:5d:0c:de:a2:81:b9:ae:fc:
b6:ee:ef:44:c6:61:95:97:06:04:b2:64:73:78:52:
14:e3:de:48:f3:8c:dd:fa:ad:9e:81:a3:ab:36:74:
3d:a8:f2:e6:78:ba:de:0e:3a:7b:2c:e4:46:f0:0b:
a6:66:db:f7:7c:df:ed:1a:5c:96:3d:af:c8:c9:80:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:72:A6:75:A2:C1:23:B5:E7:DD:A6:A8:A6:7E:9D:CB:83:EF:B8:D0
X509v3 Authority Key Identifier:
keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d3:c2:04:43:7b:41:2a:ce:ec:25:80:41:18:89:db:5a:48:
f7:0f:c4:ad:a5:4c:87:3b:f4:e7:da:77:1b:41:2b:73:ae:a7:
ab:2a:30:0a:74:f8:21:0b:6f:b5:aa:ab:c2:2a:53:64:4f:22:
f5:3c:ac:3e:8f:61:22:9d:58:35:d1:05:14:fb:75:d3:03:9f:
6e:c5:4b:df:c2:83:fd:74:f0:d1:e2:eb:ea:67:73:19:d0:0e:
fc:38:76:5b:6f:90:7a:59:09:3c:5a:ce:d9:b8:03:f7:74:67:
4d:80:c3:fc:2d:b7:43:5c:cc:4b:cb:fa:90:d3:49:5b:32:d1:
17:6a:65:3b:d4:f9:39:68:f7:6b:5a:e9:b7:c8:c5:f2:22:ba:
96:1d:44:f7:d1:a2:aa:75:bc:d0:20:e2:f2:ee:f5:13:1d:df:
df:a3:ba:c0:18:f2:8d:0f:0c:bb:11:af:bf:22:3f:5b:f9:5d:
0e:17:69:2d:ac:1b:c4:5b:f4:a5:c8:13:9d:17:f4:de:8d:33:
0f:52:b0:f2:0b:9c:61:ad:fc:de:d0:07:06:d9:32:1b:03:f8:
bc:0c:1f:dc:11:b7:9d:2c:89:95:a6:de:d3:9e:49:93:71:a9:
e8:cb:70:5e:2b:fa:ec:0c:5f:3c:9d:f1:8b:1e:11:61:02:7f:
5a:52:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:58:17 2026 by rpki-client