
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
File: QcDxLXt-PST_2s2mIykIit-CLGU.mft (raw, json)
Hash identifier: ksVGVD/72fh3oy0Mz4q2d48a0Mndbuc61bz1tcJVJX0=
Subject key identifier: 04:8B:4F:D0:88:4D:08:0D:45:98:B2:B0:2E:B5:86:8E:AC:3D:7E:CD
Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Certificate serial: 019DA4F93D260A0DBF00C5369935CF6A64EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
Manifest number: 010F
Signing time: Sun 19 Apr 2026 09:01:30 +0000
Manifest this update: Sun 19 Apr 2026 09:01:30 +0000
Manifest next update: Mon 20 Apr 2026 09:01:30 +0000
Files and hashes: 1: QcDxLXt-PST_2s2mIykIit-CLGU.crl (hash: xlmW5uziCrVYA0kD83Okf9GgH8lSqVhlvKb7fWYsou4=)
2: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (hash: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:3d:26:0a:0d:bf:00:c5:36:99:35:cf:6a:64:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Validity
Not Before: Apr 19 09:01:30 2026 GMT
Not After : Apr 20 09:01:30 2026 GMT
Subject: CN=048b4fd0884d080d4598b2b02eb5868eac3d7ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:c6:bf:1b:6f:25:4a:af:d0:e0:9c:4a:22:
f7:6b:b1:85:a1:7e:9a:cf:1d:b2:e3:13:da:a5:28:
04:c1:ae:e9:6e:5c:2a:42:79:e8:d6:0a:e6:6a:be:
8f:a4:53:70:f9:2e:4b:cd:32:56:9c:42:ac:6a:45:
d3:60:2e:1a:d6:17:07:10:b3:3d:64:e6:f3:a8:5b:
87:a1:cf:da:34:df:d1:79:77:6f:ab:9d:e3:08:b4:
ee:aa:94:36:23:79:7d:9c:bf:30:f3:45:4c:08:c4:
af:00:5d:77:dd:ed:1d:e7:b3:9a:50:2f:7e:04:1e:
b6:dd:52:aa:41:f3:4f:86:2f:a2:57:d6:dc:47:1e:
b6:db:ce:dc:b4:52:fe:c7:cd:12:ff:f7:a9:c4:7a:
dd:06:8a:fb:10:69:b5:59:ac:4c:cb:6a:2a:ce:65:
aa:c5:3b:67:b6:14:c6:04:93:d5:3e:83:10:d7:6b:
fb:e1:83:6b:9d:28:cf:2c:72:a1:0c:0a:d4:74:50:
7b:3a:d4:1d:d8:f5:81:21:8b:58:cf:b1:f7:5c:71:
63:cc:04:4f:e1:ba:2a:67:5c:97:b2:73:63:a4:41:
39:7d:50:06:1d:ce:8d:0c:b8:b5:a5:78:4f:44:15:
85:8e:db:58:e8:09:ad:fb:8f:1f:b3:8f:48:4e:0c:
93:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8B:4F:D0:88:4D:08:0D:45:98:B2:B0:2E:B5:86:8E:AC:3D:7E:CD
X509v3 Authority Key Identifier:
keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9f:e7:0a:40:15:5e:3b:b1:67:77:57:f5:77:e7:a2:f3:a7:
51:07:ab:08:87:61:99:0c:95:8e:ee:f1:26:5a:ed:1c:be:18:
08:db:1b:f5:25:33:9c:ed:4b:a5:db:d7:72:31:23:80:1c:e1:
aa:76:79:88:5a:83:3c:a1:24:8d:2f:c4:13:4d:10:c5:e3:b9:
d6:a8:3e:73:27:71:b4:97:0c:15:a2:7e:bd:48:2b:80:8b:52:
a3:5f:72:bf:5b:29:c5:50:6d:28:77:a8:d0:02:9b:39:a4:e2:
53:be:d3:b2:ea:79:83:87:d6:d3:b4:bf:7a:13:46:02:fc:fa:
ff:c3:4c:de:f5:33:a2:39:42:df:8e:0e:25:b6:34:62:53:f4:
a0:4d:5f:4f:d9:f2:20:46:32:01:7f:3a:73:6e:aa:5b:33:de:
3f:36:8b:48:3c:d6:08:fc:56:cd:ed:d8:18:2d:e4:1d:ef:18:
01:3b:b3:45:42:a2:30:1f:05:04:49:95:ce:3b:98:67:65:a1:
86:d5:02:23:82:6d:08:8b:d3:33:e1:89:b7:90:14:c3:b2:ed:
3f:9d:1c:09:55:f7:54:dc:a4:75:87:ad:6d:da:0c:77:14:29:
8c:94:86:3f:6b:7e:c0:60:e6:36:7a:1d:c7:e3:66:a6:7c:0f:
4d:d6:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:57:13 2026 by rpki-client