Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
File: QcDxLXt-PST_2s2mIykIit-CLGU.mft (raw, json)
Hash identifier: sDfiLxitEY/mwt/NZvACkKvArNTWJtykLdmpqhtqO+E=
Subject key identifier: D3:CB:26:95:CC:D8:C7:15:F2:79:4E:BA:59:B5:F4:3B:79:35:6E:18
Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Certificate serial: 01A15364F1A8024B1EF55D52F200F7EB45B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
Manifest number: 02F7
Signing time: Mon 19 Oct 2026 09:01:26 +0000
Manifest this update: Mon 19 Oct 2026 09:01:26 +0000
Manifest next update: Tue 20 Oct 2026 09:01:26 +0000
Files and hashes: 1: QcDxLXt-PST_2s2mIykIit-CLGU.crl (hash: OKxLhIubN5FTm2bcMk6gzzm/yFyDXwfgcGabpcAp+Kg=)
2: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (hash: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:64:f1:a8:02:4b:1e:f5:5d:52:f2:00:f7:eb:45:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Validity
Not Before: Oct 19 09:01:26 2026 GMT
Not After : Oct 20 09:01:26 2026 GMT
Subject: CN=d3cb2695ccd8c715f2794eba59b5f43b79356e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:3e:16:be:f4:9b:10:57:b6:0f:ce:dd:f6:
12:2f:48:20:cc:e4:1a:69:d1:9b:eb:47:0f:d5:d7:
a5:f9:4e:7c:95:5f:7a:be:79:c4:bd:6c:c7:13:71:
0c:b6:dc:b3:af:e2:af:b9:cb:86:ce:c8:38:71:45:
a5:34:67:86:cf:8c:f4:bf:8d:f8:87:e6:63:8a:c1:
0f:c1:9a:35:ac:0b:73:3e:06:be:1a:27:e3:52:26:
30:e0:36:85:c6:fa:65:3f:d2:06:c6:a4:f7:4b:16:
20:70:d5:58:ca:bd:50:18:39:0c:d3:5a:04:14:27:
76:c0:3a:8d:df:c4:c6:0a:41:16:4f:e6:ad:dc:8e:
c1:be:70:d8:cc:c0:5c:e1:65:8e:7c:45:b2:39:df:
7f:42:5f:16:c9:4d:ff:bb:40:37:de:12:af:8d:ba:
ac:b0:e1:b7:e1:c4:4f:c5:04:3c:be:e1:a3:53:33:
08:9b:e0:27:3b:af:f3:da:d0:44:88:df:56:1d:2d:
fc:51:73:1b:f7:0d:7f:5f:33:c6:a5:fb:f2:34:f0:
d2:e7:7a:0d:99:30:46:1a:12:90:12:50:2a:e8:51:
85:d6:25:e2:64:85:00:da:2e:c7:2a:bd:05:7a:c8:
f7:31:58:2b:b9:0a:24:86:f4:a7:28:1f:bf:9e:e1:
e4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CB:26:95:CC:D8:C7:15:F2:79:4E:BA:59:B5:F4:3B:79:35:6E:18
X509v3 Authority Key Identifier:
keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:10:0d:3f:77:a4:c5:ca:da:17:20:8d:bf:81:b7:68:84:54:
c6:be:fa:b7:e2:ce:3f:ee:dd:c1:ad:1a:29:ab:b7:2b:c4:24:
36:a3:76:d7:5a:ad:a0:01:6e:fc:1a:cb:aa:74:88:3f:32:7f:
14:bc:84:26:3b:fa:57:fa:2d:de:54:50:bc:c8:97:9c:44:79:
45:76:dc:e8:b8:a9:e2:0d:5d:30:25:3e:60:5c:73:46:1f:54:
df:af:ed:6d:dc:2a:bf:04:6f:50:87:5e:04:e1:f0:e5:37:fd:
f2:f6:90:ec:59:8d:bd:b9:d0:0c:c7:0f:42:7d:ed:f5:b2:22:
46:94:42:8f:b4:b2:d7:2c:4d:a8:ed:0b:20:da:05:1e:fb:dc:
ce:a0:4e:50:00:3e:7c:53:89:c5:a9:6f:61:b1:6e:ca:63:8c:
63:5c:96:be:50:b3:25:de:d9:83:9e:72:61:42:41:d1:19:62:
2c:a8:88:31:65:04:6f:90:a0:34:04:34:5c:a6:02:dd:45:d5:
35:0f:98:7c:c1:e5:31:e6:de:85:63:03:7e:a2:05:6f:71:73:
ae:e2:5c:fd:ae:5e:da:88:d4:5d:f3:b4:d8:51:2e:1a:e6:3d:
7f:6f:b9:58:4b:44:a2:d9:ea:4f:bd:d6:31:f6:ac:7f:0c:b2:
cf:da:06:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFTZPGoAkse9V1S8gD360WxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYzBmMTJkN2I3ZTNkMjRmZmRhY2RhNjIzMjkwODhhZGY4
MjJjNjUwHhcNMjYxMDE5MDkwMTI2WhcNMjYxMDIwMDkwMTI2WjAzMTEwLwYDVQQD
EyhkM2NiMjY5NWNjZDhjNzE1ZjI3OTRlYmE1OWI1ZjQzYjc5MzU2ZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXg+Fr70mxBXtg/O3fYSL0ggzOQa
adGb60cP1del+U58lV96vnnEvWzHE3EMttyzr+KvucuGzsg4cUWlNGeGz4z0v434
h+ZjisEPwZo1rAtzPga+GifjUiYw4DaFxvplP9IGxqT3SxYgcNVYyr1QGDkM01oE
FCd2wDqN38TGCkEWT+at3I7BvnDYzMBc4WWOfEWyOd9/Ql8WyU3/u0A33hKvjbqs
sOG34cRPxQQ8vuGjUzMIm+AnO6/z2tBEiN9WHS38UXMb9w1/XzPGpfvyNPDS53oN
mTBGGhKQElAq6FGF1iXiZIUA2i7HKr0Fesj3MVgruQokhvSnKB+/nuHk7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPLJpXM2McV8nlOulm19Dt5NW4YMB8GA1UdIwQY
MBaAFEHA8S17fj0k/9rNpiMpCIrfgixlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85OWE4ZmQtYmY2ZS00MWRhLWI5MmUt
Y2U5ZWQ5MjVlNTFiLzEvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85OWE4ZmQtYmY2ZS00MWRhLWI5MmUtY2U5ZWQ5MjVlNTFi
LzEvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxANP3ek
xcraFyCNv4G3aIRUxr76t+LOP+7dwa0aKau3K8QkNqN211qtoAFu/BrLqnSIPzJ/
FLyEJjv6V/ot3lRQvMiXnER5RXbc6Lip4g1dMCU+YFxzRh9U36/tbdwqvwRvUIde
BOHw5Tf98vaQ7FmNvbnQDMcPQn3t9bIiRpRCj7Sy1yxNqO0LINoFHvvczqBOUAA+
fFOJxalvYbFuymOMY1yWvlCzJd7Zg55yYUJB0RliLKiIMWUEb5CgNAQ0XKYC3UXV
NQ+YfMHlMebehWMDfqIFb3FzruJc/a5e2ojUXfO02FEuGuY9f2+5WEtEotnqT73W
Mfasfwyyz9oG4Q==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:21:21 2026 by rpki-client