Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
File: QcDxLXt-PST_2s2mIykIit-CLGU.mft (raw, json)
Hash identifier: sgEsvnL/Gxfyv6Z+fwOZYNh5Z6b10jvnVnmKU51z6lg=
Subject key identifier: A6:B7:91:BD:CF:AE:DA:40:C4:99:A8:37:38:32:49:84:B7:66:97:4B
Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Certificate serial: 019D38D2EB105D930C7ACEB52F77C3BC2702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
Manifest number: D7
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: QcDxLXt-PST_2s2mIykIit-CLGU.crl (hash: Eiy3lFuM7OoKEhI15ESDj6g1yuiqd6DaKl3H+2E+Uo4=)
2: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (hash: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:eb:10:5d:93:0c:7a:ce:b5:2f:77:c3:bc:27:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=a6b791bdcfaeda40c499a83738324984b766974b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:31:a6:a0:e3:b5:a5:90:52:b5:ef:48:f5:8b:
da:42:0c:b1:97:66:4c:02:03:97:01:45:a5:cc:04:
0a:2e:75:d9:5b:40:60:d0:64:57:43:d3:ae:51:d5:
0b:7b:a2:39:e0:e1:ed:46:2f:72:ba:32:26:9f:28:
9c:37:26:11:0a:62:b1:38:54:47:5d:bd:44:e9:c8:
63:17:bd:ae:14:ad:08:86:33:e5:23:2e:e9:5f:26:
26:31:8f:ef:8a:31:18:ca:9a:3c:59:59:5f:b7:9f:
0b:f2:d0:6a:4d:9e:d8:36:14:a2:ff:aa:ca:49:23:
1a:4c:41:83:c8:ca:00:0d:ae:b1:e5:e0:54:cc:70:
3e:ae:60:78:f8:37:66:cc:e3:20:37:61:7b:21:ca:
10:0c:1d:92:c0:73:e2:b9:e2:fb:5a:a4:67:49:d6:
9e:6a:73:4a:b6:e4:d3:c5:3a:03:13:7b:17:41:19:
6d:1d:7d:7f:89:1f:27:4e:1e:53:92:61:33:45:04:
1a:41:f7:cc:1c:0c:e0:82:38:52:11:23:95:19:97:
b9:23:78:75:85:73:33:87:9c:9a:7a:9f:3b:59:dc:
d2:12:0b:95:6d:51:34:8d:88:be:5c:6f:fe:e9:8e:
da:9a:96:29:53:ae:80:cd:5c:82:f5:ad:06:a4:ee:
c2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B7:91:BD:CF:AE:DA:40:C4:99:A8:37:38:32:49:84:B7:66:97:4B
X509v3 Authority Key Identifier:
keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a5:98:e3:5e:01:a9:8a:5b:b8:4a:3a:5b:70:da:f4:36:f1:
b7:0a:98:35:b2:9a:85:c0:d4:d8:36:33:b2:12:6f:e8:88:25:
90:34:dd:99:47:54:35:22:d9:14:65:1c:b0:50:e3:0d:1f:6c:
e9:1b:75:5d:3c:2a:ba:58:04:34:94:79:7c:fe:6e:60:7a:cd:
2b:75:27:ac:19:9f:07:38:70:31:5f:97:c2:0c:5c:89:73:c3:
05:a8:13:8e:de:cb:6a:eb:67:26:dd:51:44:c6:03:6d:1d:85:
70:df:a7:8e:35:c5:61:bc:4d:84:61:e2:24:0c:76:57:e6:f2:
95:81:84:19:cb:ce:b2:d2:fa:6a:5d:97:58:86:cc:d9:f2:79:
65:bb:7f:01:bc:32:46:d1:7f:5d:f3:b2:56:d1:db:94:56:8f:
93:da:ab:df:5c:26:a4:b7:24:00:be:7b:e6:da:39:eb:95:ca:
99:f6:3f:e3:56:6f:ed:e4:27:b1:16:d7:19:2a:7f:ba:98:3c:
8d:9b:7a:d5:75:c3:d3:d4:62:92:df:30:35:af:a3:00:8d:d4:
46:43:58:0d:1a:38:4a:f6:dd:e7:ea:31:c2:80:3a:a0:e6:35:
46:ec:17:74:62:ba:90:92:07:4c:7e:67:f6:51:7d:4c:a4:e2:
f6:06:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:18 2026 by rpki-client