Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
File: QcDxLXt-PST_2s2mIykIit-CLGU.mft (raw, json)
Hash identifier: U8e2I2eETwPnjbrjuGBuSztWnmH3gGPn9xUZaSps+xQ=
Subject key identifier: D5:24:07:5E:84:EA:A7:B7:1B:57:4A:03:3E:69:05:73:F2:B5:56:B8
Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Certificate serial: 019E31F2A359388C43CE0372B7C290038D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
Manifest number: 0158
Signing time: Sat 16 May 2026 18:00:45 +0000
Manifest this update: Sat 16 May 2026 18:00:45 +0000
Manifest next update: Sun 17 May 2026 18:00:45 +0000
Files and hashes: 1: QcDxLXt-PST_2s2mIykIit-CLGU.crl (hash: GCZBsOiiby3EOOt9m+Vc2TLtUdJlyC+0gpTWJV5xqiY=)
2: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (hash: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:a3:59:38:8c:43:ce:03:72:b7:c2:90:03:8d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Validity
Not Before: May 16 18:00:45 2026 GMT
Not After : May 17 18:00:45 2026 GMT
Subject: CN=d524075e84eaa7b71b574a033e690573f2b556b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:5f:fd:ef:68:86:92:32:8b:88:5a:4f:3a:
ed:9e:93:28:04:d6:48:91:9c:6b:e7:e4:90:cd:3c:
44:f9:bf:7a:43:ab:1a:7a:29:cd:61:16:a6:5a:ea:
d8:f6:5c:18:dd:43:0e:d9:68:d1:30:8c:8e:46:68:
31:11:b6:52:b0:7c:2d:7a:4b:92:32:ea:6b:da:b9:
ff:cf:5c:a2:dc:05:b7:f6:c2:cf:c4:37:ef:53:80:
e7:24:27:f3:da:33:e5:21:73:3c:fb:17:2c:f0:c2:
6c:8c:23:4f:55:79:30:ef:7e:29:77:09:80:bb:34:
81:45:d3:3c:16:b4:63:3a:48:cc:a2:45:a9:bf:a7:
5a:2d:ca:01:c3:b3:2a:c8:a8:4d:4f:6a:5b:b6:1a:
34:dc:b0:7e:e4:3a:54:06:ba:73:98:68:28:49:1b:
27:03:9c:55:37:c4:78:53:d5:d5:bc:17:89:5e:11:
cd:7c:4b:e0:75:c0:43:10:c9:3c:b0:58:80:99:fb:
f4:3d:46:2f:b3:b7:af:dc:75:a9:0a:5f:73:c1:82:
01:42:c6:87:79:dd:87:d7:22:44:e2:f1:5a:75:08:
7e:ad:f7:b5:d2:90:1f:76:e5:85:85:5d:c7:c1:84:
ac:ff:95:b0:16:7c:c5:db:34:af:f4:ab:26:26:5f:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:24:07:5E:84:EA:A7:B7:1B:57:4A:03:3E:69:05:73:F2:B5:56:B8
X509v3 Authority Key Identifier:
keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:96:8a:70:09:90:24:3a:65:2d:87:34:89:8e:04:81:3e:54:
fb:e3:bd:d7:59:58:10:a2:db:5b:ee:15:6b:d2:7a:3e:8e:de:
c4:55:77:e5:cf:df:74:24:3d:24:47:10:27:66:34:25:cb:68:
e9:8c:fc:9b:76:ec:14:89:18:fb:f1:8c:20:8f:31:93:5c:9b:
ac:14:7e:f3:ae:77:72:fc:06:4d:c5:4e:11:12:0f:65:09:06:
2d:a9:fd:97:33:c9:87:c8:79:40:24:1f:46:1e:aa:57:f6:4a:
ec:09:64:1d:83:ed:3d:7a:ee:7f:2c:64:f2:5f:98:cf:43:3d:
25:71:c4:16:8b:25:89:13:5b:c3:84:8c:00:e2:57:8a:44:80:
14:27:69:2b:a1:84:66:4b:3b:82:60:9a:54:96:8e:b2:78:46:
8c:f0:56:26:b7:8a:60:75:8c:a0:f1:bd:7a:8e:80:01:29:40:
b3:e1:31:f8:53:fd:20:88:e7:b6:a7:8d:6d:8e:c5:a3:5e:59:
35:4b:a0:7b:1b:ce:13:d9:48:c2:f4:b9:33:85:00:2e:25:69:
f9:12:ad:1f:ef:48:48:37:6b:86:a4:2b:56:b3:12:93:64:14:
97:70:d1:0f:7c:35:70:98:e7:48:60:34:58:d8:3b:ae:8b:42:
ab:ad:6f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:00:41 2026 by rpki-client