Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json)
Hash identifier: rVWLNr33IgLAoruD7nXlz26C7034As5tugwfEJqg1BY=
Subject key identifier: 42:D9:A3:F1:48:2E:E2:71:6E:3C:E1:CD:71:56:03:07:9C:12:CF:48
Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d
Certificate serial: 01A02055333C6973F8E5B389C9BE8394AD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
Manifest number: 0287
Signing time: Thu 20 Aug 2026 18:00:49 +0000
Manifest this update: Thu 20 Aug 2026 18:00:49 +0000
Manifest next update: Fri 21 Aug 2026 18:00:49 +0000
Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: fDmOWU+U6vyUiFNCSQQRkYuhRQ4vqM2Y9iTDKzPsqAU=)
2: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (hash: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:33:3c:69:73:f8:e5:b3:89:c9:be:83:94:ad:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d
Validity
Not Before: Aug 20 18:00:49 2026 GMT
Not After : Aug 21 18:00:49 2026 GMT
Subject: CN=42d9a3f1482ee2716e3ce1cd715603079c12cf48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:a8:6b:af:6f:8c:60:83:c9:1b:a5:27:cb:
30:6c:e3:17:3c:48:03:6d:b9:18:fc:4a:de:67:26:
08:0c:2e:45:83:de:5f:ab:39:3e:3b:88:a7:79:9c:
b0:1f:cd:64:62:a7:9e:a1:57:7e:00:cc:9c:94:cd:
2d:61:ed:f7:b6:26:d9:9b:71:8e:99:68:a6:1f:49:
84:c2:b6:79:67:28:a5:7d:4a:fd:e0:2b:d9:49:bf:
e4:37:b3:f1:2e:5d:81:4e:60:80:9a:e8:d5:a9:29:
0e:ea:9f:67:99:4c:39:8d:b4:f6:9e:9e:a1:cb:42:
ca:94:7f:cf:1c:d8:1c:24:0f:3b:0d:9d:81:02:d4:
cb:a9:4d:52:ff:11:06:7f:03:e0:bb:46:85:fc:d8:
35:1c:38:b3:69:c5:db:d2:d0:6e:21:f9:a1:6a:a8:
21:e9:58:43:58:3d:6a:a5:6e:2c:61:cb:1a:51:68:
1e:e6:9a:92:e6:85:4b:cf:e1:63:a2:1f:43:93:87:
67:45:4e:c0:21:46:16:42:5b:a4:e6:cd:12:f3:bf:
a6:23:70:81:16:15:c2:32:ff:ab:14:37:f9:f5:e9:
68:19:57:76:cf:2c:c9:89:da:7d:bb:a8:b7:c4:a1:
af:c2:fe:49:49:51:90:1c:b6:85:6f:df:f8:51:e4:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D9:A3:F1:48:2E:E2:71:6E:3C:E1:CD:71:56:03:07:9C:12:CF:48
X509v3 Authority Key Identifier:
keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:97:3e:20:9c:e7:b4:b6:2e:2e:78:c5:04:ee:c5:7c:5a:72:
e1:73:86:e8:6e:45:21:d8:f4:cf:d5:b3:03:4c:d6:9e:c8:95:
4e:77:58:92:57:59:c1:80:6a:63:1b:35:97:df:f0:1d:08:00:
0c:8e:17:88:16:02:a5:7a:75:e6:51:c0:d6:30:b1:60:c9:24:
42:5b:c9:33:6e:25:4a:af:1c:b6:c1:60:0e:f8:8d:65:66:c3:
5f:e7:ea:d1:db:78:2d:61:32:f4:d1:2f:89:62:e6:e2:d7:35:
e0:66:95:2a:50:81:a1:de:45:ef:83:cf:ed:63:12:56:d2:a2:
23:60:ac:92:99:cb:d9:80:5d:a6:86:13:35:36:16:9d:54:5f:
93:14:94:63:c6:6b:00:98:05:63:e1:09:a3:dd:7a:cc:65:64:
d6:6d:53:02:4f:59:75:c6:3f:b6:70:b3:f8:8b:86:75:90:b2:
4b:40:73:b6:90:77:f8:5d:0a:7e:56:d8:f1:a4:57:f8:00:dd:
91:ee:0f:50:10:af:e7:75:34:d1:26:ec:28:31:29:4f:a2:82:
e3:e0:7d:bf:88:9a:47:41:b5:39:31:b4:1e:28:97:8f:49:5b:
37:de:8f:46:a4:26:27:cb:9d:7a:0a:18:3b:2b:6b:a5:e4:47:
69:fe:f1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:25:00 2026 by rpki-client