Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
File: QiBHW2gKGOTaNLKiiZBig-KF2C0.mft (raw, json)
Hash identifier: z4JGS2CeH7memx5UjPrXDMKM3GLHfEhuMEZETortma4=
Subject key identifier: 61:89:84:AB:0F:22:C4:E3:62:6A:E5:4E:70:3D:7C:09:A5:16:C7:12
Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d
Certificate serial: 019D1FB8854324493D7DEDA5E735BF285FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
Manifest number: F9
Signing time: Tue 24 Mar 2026 12:01:19 +0000
Manifest this update: Tue 24 Mar 2026 12:01:19 +0000
Manifest next update: Wed 25 Mar 2026 12:01:19 +0000
Files and hashes: 1: QiBHW2gKGOTaNLKiiZBig-KF2C0.crl (hash: 3iqeQzZoCxd8d6C8amtnIs3K+j6NqsMOhlahV+hhAxY=)
2: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (hash: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:b8:85:43:24:49:3d:7d:ed:a5:e7:35:bf:28:5f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d
Validity
Not Before: Mar 24 12:01:19 2026 GMT
Not After : Mar 25 12:01:19 2026 GMT
Subject: CN=618984ab0f22c4e3626ae54e703d7c09a516c712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:39:b5:fc:e9:19:4c:b3:1b:6e:2b:ba:68:
db:f8:16:62:3c:74:5c:10:80:d3:ec:ad:a0:45:1f:
92:a1:1e:bd:54:d8:be:65:77:40:5c:80:d8:21:3f:
1e:0b:cb:d3:5f:e2:3a:f8:77:ec:45:30:7f:f7:be:
32:9f:98:12:3e:c2:04:0b:46:2d:5f:2d:1e:b6:4c:
b0:be:40:70:f5:84:be:20:ab:b1:aa:b9:5b:07:06:
e3:16:88:0e:c3:04:59:66:23:8a:e9:14:08:40:91:
eb:ee:73:fe:94:4d:3a:02:62:ee:4e:f1:55:df:fe:
17:88:65:c7:ef:f5:2a:99:c2:8e:54:95:0f:0e:28:
42:11:86:33:00:6e:4d:68:70:29:03:8e:32:08:33:
fd:32:b3:d2:02:e2:b6:c3:da:97:49:53:b8:ec:bb:
ac:bf:e2:60:af:a6:3c:db:fb:eb:18:8d:a9:75:82:
70:d5:8f:3d:3a:ae:e7:71:24:f0:3b:11:d7:e0:af:
f2:33:e6:17:3b:30:9a:45:ef:38:53:ca:72:f5:47:
8b:9e:ea:e2:31:ae:04:a3:93:64:3b:2d:0c:1d:27:
75:fa:ed:6e:9e:f0:ce:97:f7:85:78:ae:49:70:c2:
1b:eb:26:6e:6f:4e:62:35:c8:ea:9b:37:58:72:d8:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:89:84:AB:0F:22:C4:E3:62:6A:E5:4E:70:3D:7C:09:A5:16:C7:12
X509v3 Authority Key Identifier:
keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b9:3d:cb:2d:16:3a:38:7f:9b:a9:5c:c5:16:eb:42:36:ff:
83:b7:5c:34:c9:7e:a7:47:8d:26:ac:af:8f:af:c0:d8:99:a7:
00:c5:de:f1:e8:43:d4:d3:87:70:09:0c:c2:0e:b6:33:fb:e9:
b0:12:60:c6:0f:6e:d6:e6:5b:fc:a3:f4:01:8e:e8:ef:58:70:
be:3f:6e:21:5d:15:81:38:0c:3f:da:1e:5b:d7:f0:57:a8:26:
51:ec:f3:ef:a8:15:42:35:8a:cf:47:c4:99:d7:f1:18:89:5c:
31:6d:04:b7:14:b5:aa:f1:77:cc:3f:ba:35:4a:3c:ff:9f:29:
80:3d:d4:1c:09:9c:07:22:ae:a0:a9:d6:01:97:e8:13:c2:db:
73:fa:7d:81:05:52:40:5c:82:49:9d:38:22:36:be:06:3d:35:
79:2c:95:db:73:fd:69:48:b9:29:4c:5c:5c:0c:a4:30:ae:0b:
ec:a1:b9:f9:01:6a:bc:e0:39:56:8a:82:1a:b0:ce:23:03:eb:
6f:66:20:37:fc:f2:2c:c0:a9:a0:fa:cd:d4:aa:ca:06:91:63:
32:bd:5d:58:68:5f:5f:89:e4:f0:be:fd:39:8b:95:8e:94:53:
15:12:cd:b2:91:00:46:b4:18:1b:13:e7:02:74:8a:af:d1:62:
2b:23:be:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 18:17:56 2026 by rpki-client