Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
File: QcDxLXt-PST_2s2mIykIit-CLGU.mft (raw, json)
Hash identifier: ogkx9rH3cPZB6jnzvgIJivXL9lQPYwhbpYJETKa1Dfg=
Subject key identifier: 13:15:60:18:FA:2B:8C:14:EA:55:EE:47:5D:E2:8F:77:CC:94:EF:7A
Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Certificate serial: 019EC0DAD0C8ED6FD8267F1F9005B4907B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
Manifest number: 01A2
Signing time: Sat 13 Jun 2026 12:00:26 +0000
Manifest this update: Sat 13 Jun 2026 12:00:26 +0000
Manifest next update: Sun 14 Jun 2026 12:00:26 +0000
Files and hashes: 1: QcDxLXt-PST_2s2mIykIit-CLGU.crl (hash: OtzZPHV8mB2pH9yettFhFuWyZhIgn/tX9ZJRuXhbF8o=)
2: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (hash: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:d0:c8:ed:6f:d8:26:7f:1f:90:05:b4:90:7b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Validity
Not Before: Jun 13 12:00:26 2026 GMT
Not After : Jun 14 12:00:26 2026 GMT
Subject: CN=13156018fa2b8c14ea55ee475de28f77cc94ef7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:69:ce:51:d9:60:62:51:94:eb:e8:dd:58:53:
56:30:94:ee:76:50:e9:ff:1a:31:c8:61:03:db:42:
37:e3:8a:b7:da:c1:ca:1c:bf:2a:85:d7:e8:aa:d5:
f3:73:63:6f:d8:8b:ae:e5:83:a6:a2:d6:20:9b:43:
88:a6:83:80:a2:83:cb:15:78:aa:64:4a:f8:58:3b:
c0:c3:d8:5d:92:10:d2:bf:3c:1f:38:aa:26:7c:c3:
a2:25:12:a4:59:c1:bf:1f:47:d7:e4:27:4e:9d:e8:
d6:45:cf:99:f2:30:10:39:6c:ed:cd:33:71:61:31:
c0:cf:43:32:ca:6b:1c:37:b0:94:c8:87:cb:f3:eb:
bf:4c:4d:bb:ad:75:79:cb:8b:ee:06:e0:64:b7:d3:
b4:74:12:6c:89:38:d5:3f:fc:8c:94:e2:b1:bb:96:
b0:64:92:04:9d:c4:07:a3:5a:30:cd:62:ee:f5:c1:
3e:58:44:c8:62:ab:e8:fc:39:0d:8e:38:b6:40:35:
48:49:cd:67:bf:2c:2a:b1:6e:71:de:60:57:ad:56:
46:f3:82:51:8a:eb:fd:66:b4:ea:96:39:de:db:53:
02:67:9e:14:cb:39:23:7e:b4:dc:8b:c2:24:ad:85:
ee:fe:9c:f6:0c:a2:cc:85:f3:8f:c0:85:4b:ae:a8:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:15:60:18:FA:2B:8C:14:EA:55:EE:47:5D:E2:8F:77:CC:94:EF:7A
X509v3 Authority Key Identifier:
keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:60:27:24:57:00:ac:7f:39:34:de:a3:d5:a7:d3:d6:d8:44:
60:03:d7:06:10:13:bf:aa:df:d8:eb:8d:1c:88:81:fb:30:cd:
fd:6e:bf:27:61:f4:c0:20:7c:6b:3d:30:93:5f:0f:81:b7:92:
96:6b:e7:5b:ce:51:f4:fc:dc:74:a4:6a:82:c1:65:a8:56:fa:
37:83:90:30:79:9c:53:fa:d0:4e:de:39:d1:0e:ed:6f:17:3e:
13:3e:83:af:e1:0a:a6:fa:99:db:ca:f0:0c:d5:1f:47:84:db:
ed:0f:bd:0e:b0:d0:ec:5b:2e:c5:d4:9f:97:b7:af:d5:5c:b9:
3d:bc:20:b5:8b:f6:eb:4c:c6:e3:f0:af:02:92:4a:7a:ca:4e:
34:72:6b:45:0b:a9:81:33:31:a8:ab:82:ef:c9:bb:0c:cb:08:
7c:47:16:0d:2e:4f:86:ea:58:02:18:e7:3c:f3:dd:a3:53:d7:
13:b7:ea:02:c6:0d:64:6d:09:0f:e7:79:29:95:c7:41:63:02:
f3:88:ed:09:7f:e9:c7:3f:bd:b1:cc:82:ad:6b:0f:7b:63:28:
d5:cb:19:dc:43:be:d5:f2:fb:40:1a:1c:2c:98:95:4b:39:d9:
e1:8e:35:43:10:0d:25:c2:a2:d5:85:7c:ee:75:e5:21:1e:f2:
89:c2:ae:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2tDI7W/YJn8fkAW0kHuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYzBmMTJkN2I3ZTNkMjRmZmRhY2RhNjIzMjkwODhhZGY4
MjJjNjUwHhcNMjYwNjEzMTIwMDI2WhcNMjYwNjE0MTIwMDI2WjAzMTEwLwYDVQQD
EygxMzE1NjAxOGZhMmI4YzE0ZWE1NWVlNDc1ZGUyOGY3N2NjOTRlZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmnOUdlgYlGU6+jdWFNWMJTudlDp
/xoxyGED20I344q32sHKHL8qhdfoqtXzc2Nv2Iuu5YOmotYgm0OIpoOAooPLFXiq
ZEr4WDvAw9hdkhDSvzwfOKomfMOiJRKkWcG/H0fX5CdOnejWRc+Z8jAQOWztzTNx
YTHAz0MyymscN7CUyIfL8+u/TE27rXV5y4vuBuBkt9O0dBJsiTjVP/yMlOKxu5aw
ZJIEncQHo1owzWLu9cE+WETIYqvo/DkNjji2QDVISc1nvywqsW5x3mBXrVZG84JR
iuv9ZrTqljne21MCZ54UyzkjfrTci8IkrYXu/pz2DKLMhfOPwIVLrqg2wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMVYBj6K4wU6lXuR13ij3fMlO96MB8GA1UdIwQY
MBaAFEHA8S17fj0k/9rNpiMpCIrfgixlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85OWE4ZmQtYmY2ZS00MWRhLWI5MmUt
Y2U5ZWQ5MjVlNTFiLzEvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85OWE4ZmQtYmY2ZS00MWRhLWI5MmUtY2U5ZWQ5MjVlNTFi
LzEvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2AnJFcA
rH85NN6j1afT1thEYAPXBhATv6rf2OuNHIiB+zDN/W6/J2H0wCB8az0wk18PgbeS
lmvnW85R9PzcdKRqgsFlqFb6N4OQMHmcU/rQTt450Q7tbxc+Ez6Dr+EKpvqZ28rw
DNUfR4Tb7Q+9DrDQ7FsuxdSfl7ev1Vy5PbwgtYv260zG4/CvApJKespONHJrRQup
gTMxqKuC78m7DMsIfEcWDS5PhupYAhjnPPPdo1PXE7fqAsYNZG0JD+d5KZXHQWMC
84jtCX/pxz+9scyCrWsPe2Mo1csZ3EO+1fL7QBocLJiVSznZ4Y41QxANJcKi1YV8
7nXlIR7yicKuuQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:43:41 2026 by rpki-client