Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
File: QcDxLXt-PST_2s2mIykIit-CLGU.mft (raw, json)
Hash identifier: 8D7HXk7fkYNYxs7Mm6GnrW0DWF3xe5IrSUPzPD4YdOo=
Subject key identifier: EE:C2:EE:34:F3:50:19:CF:A8:1C:EB:CB:80:59:FA:64:D0:31:B9:82
Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Certificate serial: 019F19B2024C9B7AE6200DF319A02814A3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
Manifest number: 01D0
Signing time: Tue 30 Jun 2026 18:02:03 +0000
Manifest this update: Tue 30 Jun 2026 18:02:03 +0000
Manifest next update: Wed 01 Jul 2026 18:02:03 +0000
Files and hashes: 1: QcDxLXt-PST_2s2mIykIit-CLGU.crl (hash: ejJErrqaEIBAldFutDTIq8pH75YAr/fqW0fq6QwIX1E=)
2: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (hash: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b2:02:4c:9b:7a:e6:20:0d:f3:19:a0:28:14:a3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Validity
Not Before: Jun 30 18:02:03 2026 GMT
Not After : Jul 1 18:02:03 2026 GMT
Subject: CN=eec2ee34f35019cfa81cebcb8059fa64d031b982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1f:66:fb:f8:bd:dd:77:de:dc:f6:3e:18:b1:
a1:f1:44:3f:7b:ef:2b:27:c8:6b:28:95:cc:95:f5:
9d:d6:d5:ec:88:f5:73:07:83:ed:78:58:d6:2c:45:
71:d7:ff:7b:82:57:bb:0c:af:cd:7e:e5:25:12:0e:
23:bf:db:d1:5f:73:46:ff:a6:3a:d1:75:30:cc:16:
04:cf:c6:e8:d3:6b:46:bd:6d:2f:8e:92:ed:36:43:
3e:17:7b:71:03:e3:0f:67:af:f1:a7:ab:e6:b1:99:
da:fe:a9:57:0f:e0:a5:dc:8c:9f:71:e6:5a:8b:2a:
80:30:17:9b:8e:97:67:5c:d9:e3:e9:ee:97:56:10:
54:d2:66:0a:5d:d9:25:5f:25:81:9d:cb:aa:50:7a:
cf:8e:e8:71:ea:db:e9:e9:95:b3:1a:f6:53:fc:6d:
a0:60:00:46:0b:3a:be:87:5a:db:f3:a3:15:49:b2:
05:85:73:90:ab:fd:09:0e:27:97:e9:55:04:88:72:
db:30:bb:28:bd:16:26:bf:6c:6f:72:41:1a:3a:0f:
3e:14:cf:37:ef:e5:6e:99:89:8e:c7:a3:ef:87:57:
3c:3d:bb:5a:fe:ef:63:53:e8:7b:07:80:5e:6b:b8:
f0:82:32:f6:8d:ef:92:56:bb:2b:26:6f:e6:48:64:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C2:EE:34:F3:50:19:CF:A8:1C:EB:CB:80:59:FA:64:D0:31:B9:82
X509v3 Authority Key Identifier:
keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:33:5d:3c:f2:eb:37:45:0b:6d:a6:fb:fe:48:bf:cf:66:6f:
6a:9c:78:02:7a:bf:11:77:87:eb:b3:b4:d9:6f:ba:1d:0f:40:
50:b0:18:82:e4:cb:9a:7b:a8:c6:44:94:2f:b7:fe:24:6b:55:
0e:5d:73:df:b7:6a:a6:1a:23:3c:07:4c:ec:31:8d:5e:aa:da:
35:69:de:6c:b2:b1:86:b6:67:36:de:18:e2:32:30:5a:ae:f1:
62:0c:70:c6:da:0e:2d:73:09:8f:51:b2:da:cc:72:5d:aa:22:
60:aa:de:a2:f0:d9:c9:90:0e:36:7a:87:18:4b:6c:13:bb:0f:
e5:f1:81:fa:97:c3:dd:1f:af:b1:a2:15:53:e8:3d:3f:e7:a6:
0d:f1:84:4f:98:78:a8:7a:b4:3c:ae:b3:93:08:22:92:fb:05:
1d:ad:5a:e2:01:d1:72:65:9b:1b:ae:f2:e4:cd:18:7c:21:61:
de:39:ca:90:4d:20:7a:41:80:58:ee:3f:ee:55:ea:6e:54:93:
31:fe:b8:58:98:e9:ab:6d:62:a1:d4:1b:40:95:94:07:3a:3f:
80:6b:3b:39:38:f6:70:e5:c1:e7:81:48:89:4c:cb:97:5d:c0:
16:bf:ca:a4:11:37:82:81:5d:2f:4a:02:dd:4c:41:02:8f:d3:
9f:aa:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:32:36 2026 by rpki-client