Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
File: QcDxLXt-PST_2s2mIykIit-CLGU.mft (raw, json)
Hash identifier: 9AJAjtonQRtUkNTHlojEnplwtQSe9KNpVbW2twzvX2g=
Subject key identifier: 58:DF:72:00:CC:3B:E8:B7:F7:81:FB:E9:11:A2:C2:F5:27:56:7F:31
Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Certificate serial: 019CAFB5825FCC164EF2D4D60E98BB1AB2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
Manifest number: 90
Signing time: Mon 02 Mar 2026 18:00:34 +0000
Manifest this update: Mon 02 Mar 2026 18:00:34 +0000
Manifest next update: Tue 03 Mar 2026 18:00:34 +0000
Files and hashes: 1: QcDxLXt-PST_2s2mIykIit-CLGU.crl (hash: eyiOoi1dPLs+LQgpL9hnpO30DXomeRTD+jRdwUvcxUI=)
2: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (hash: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:82:5f:cc:16:4e:f2:d4:d6:0e:98:bb:1a:b2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Validity
Not Before: Mar 2 18:00:34 2026 GMT
Not After : Mar 3 18:00:34 2026 GMT
Subject: CN=58df7200cc3be8b7f781fbe911a2c2f527567f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:ed:46:5f:ec:fb:55:d6:b9:22:c8:bc:3e:
ce:69:dd:d5:0e:9d:7f:1d:74:37:27:03:6c:d7:24:
83:25:b3:c8:c0:2b:15:d1:1a:2d:e4:79:dc:a2:9b:
14:4a:e0:bf:82:6e:88:63:7e:c5:f7:ec:5c:bd:01:
68:c6:ba:cc:65:bb:0b:e5:53:62:c7:04:7c:9f:55:
43:27:72:da:b3:97:ab:28:1c:7a:82:d0:66:80:2b:
dd:05:3f:a5:42:3d:a4:c5:68:14:47:1f:97:70:9f:
9f:2a:08:41:3c:06:12:42:24:20:54:b4:37:9d:b1:
69:30:08:38:71:38:ec:21:50:41:d0:6c:b6:59:90:
78:a0:93:49:8a:98:fc:aa:7b:de:5f:92:d8:81:f0:
20:a8:53:b5:3e:78:d0:5b:25:b8:0e:ee:26:8f:48:
ef:91:40:45:ef:10:97:b7:3d:91:e5:7a:b6:33:8d:
f5:43:a4:4c:6d:13:9e:d8:f0:e0:84:78:6d:9e:7a:
96:60:e2:66:b7:d8:f0:50:27:1e:21:4a:94:84:9e:
23:1a:23:df:fb:1b:97:cb:8e:01:be:0a:f2:35:00:
76:e2:cc:95:52:7f:50:2b:ee:9c:68:98:e4:19:36:
28:0f:d3:fb:90:d3:50:0e:e0:a3:bb:9f:97:ce:34:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DF:72:00:CC:3B:E8:B7:F7:81:FB:E9:11:A2:C2:F5:27:56:7F:31
X509v3 Authority Key Identifier:
keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b5:89:11:3c:57:32:04:e1:eb:ee:73:8a:8d:c8:9a:6c:19:
96:75:c4:d1:c9:76:f3:95:62:96:e4:0f:17:9f:54:2a:9c:f5:
00:70:e2:33:e7:31:b7:a7:ce:16:88:ce:8d:ed:6b:cf:74:b5:
8e:ff:17:dd:23:0c:a0:a4:e0:0b:8b:8d:d6:65:4e:49:aa:88:
5e:72:e6:30:b0:9d:e8:b4:e2:21:5d:81:62:e8:35:47:e8:58:
90:eb:26:9d:59:e5:d9:b2:ff:89:a6:34:fc:43:25:a7:ed:e6:
bc:41:71:23:34:63:0e:ae:bb:a3:0a:7c:8d:36:39:2c:7a:3a:
94:36:d1:b7:9b:7f:2b:a0:ff:d5:24:63:b2:17:68:ff:94:82:
e9:b9:3d:39:5d:14:c3:f6:15:0a:a1:24:76:b2:2c:fa:3e:44:
06:7a:20:fd:85:8d:95:a7:db:d5:e8:28:a9:51:46:dd:e6:0a:
48:12:e5:23:d9:8d:98:83:93:f9:d0:e0:33:61:da:01:d2:4b:
94:6e:4c:e4:42:a2:ae:85:55:af:c3:6a:29:dc:5d:96:22:2d:
b9:85:5d:57:43:4e:25:3b:4d:d6:52:b6:b2:5c:5b:b3:db:fe:
96:c9:97:79:be:01:45:72:cf:bf:4b:53:a2:f5:64:f2:0c:57:
a6:2b:cb:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvtYJfzBZO8tTWDpi7GrL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYzBmMTJkN2I3ZTNkMjRmZmRhY2RhNjIzMjkwODhhZGY4
MjJjNjUwHhcNMjYwMzAyMTgwMDM0WhcNMjYwMzAzMTgwMDM0WjAzMTEwLwYDVQQD
Eyg1OGRmNzIwMGNjM2JlOGI3Zjc4MWZiZTkxMWEyYzJmNTI3NTY3ZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWztRl/s+1XWuSLIvD7Oad3VDp1/
HXQ3JwNs1ySDJbPIwCsV0Rot5HncopsUSuC/gm6IY37F9+xcvQFoxrrMZbsL5VNi
xwR8n1VDJ3Las5erKBx6gtBmgCvdBT+lQj2kxWgURx+XcJ+fKghBPAYSQiQgVLQ3
nbFpMAg4cTjsIVBB0Gy2WZB4oJNJipj8qnveX5LYgfAgqFO1PnjQWyW4Du4mj0jv
kUBF7xCXtz2R5Xq2M431Q6RMbROe2PDghHhtnnqWYOJmt9jwUCceIUqUhJ4jGiPf
+xuXy44BvgryNQB24syVUn9QK+6caJjkGTYoD9P7kNNQDuCju5+XzjRIUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjfcgDMO+i394H76RGiwvUnVn8xMB8GA1UdIwQY
MBaAFEHA8S17fj0k/9rNpiMpCIrfgixlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85OWE4ZmQtYmY2ZS00MWRhLWI5MmUt
Y2U5ZWQ5MjVlNTFiLzEvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85OWE4ZmQtYmY2ZS00MWRhLWI5MmUtY2U5ZWQ5MjVlNTFi
LzEvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLWJETxX
MgTh6+5zio3ImmwZlnXE0cl285ViluQPF59UKpz1AHDiM+cxt6fOFojOje1rz3S1
jv8X3SMMoKTgC4uN1mVOSaqIXnLmMLCd6LTiIV2BYug1R+hYkOsmnVnl2bL/iaY0
/EMlp+3mvEFxIzRjDq67owp8jTY5LHo6lDbRt5t/K6D/1SRjshdo/5SC6bk9OV0U
w/YVCqEkdrIs+j5EBnog/YWNlafb1egoqVFG3eYKSBLlI9mNmIOT+dDgM2HaAdJL
lG5M5EKiroVVr8NqKdxdliItuYVdV0NOJTtN1lK2slxbs9v+lsmXeb4BRXLPv0tT
ovVk8gxXpivLMA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:39:36 2026 by rpki-client