Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
File: QcDxLXt-PST_2s2mIykIit-CLGU.mft (raw, json)
Hash identifier: BBZ9yrdG2Eaek5zkyAIX7TNWNYDMG6OoapzSc5YtMc4=
Subject key identifier: 74:2A:01:03:F6:63:B5:C7:97:D7:73:0C:34:30:35:8F:4F:A5:EC:C6
Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Certificate serial: 019FAC759C332E1F3639EB45A994A9FBA6B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
Manifest number: 021C
Signing time: Wed 29 Jul 2026 06:00:16 +0000
Manifest this update: Wed 29 Jul 2026 06:00:16 +0000
Manifest next update: Thu 30 Jul 2026 06:00:16 +0000
Files and hashes: 1: QcDxLXt-PST_2s2mIykIit-CLGU.crl (hash: I4RY9/YgX7f94XGUkFXpNH1UT3v51/xXv7LLJQ1EqAA=)
2: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (hash: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:9c:33:2e:1f:36:39:eb:45:a9:94:a9:fb:a6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Validity
Not Before: Jul 29 06:00:16 2026 GMT
Not After : Jul 30 06:00:16 2026 GMT
Subject: CN=742a0103f663b5c797d7730c3430358f4fa5ecc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:81:df:b5:8b:31:14:be:88:99:e7:88:35:
f3:fa:d4:eb:a2:2c:b6:bf:29:c1:86:92:13:2d:af:
7d:8a:be:f8:5e:d4:1a:c5:0d:84:08:2e:cd:f2:e4:
19:b4:ef:5c:a3:74:0a:31:64:2c:cf:88:5c:30:53:
83:a0:de:0c:42:66:2c:c8:54:b1:8d:93:64:44:74:
be:1b:d6:be:74:3d:a4:54:09:b6:e0:63:56:34:1c:
80:f7:6f:30:80:6e:a6:48:47:32:13:be:86:e8:6b:
6a:05:2e:6b:b2:1d:cc:97:45:3e:b4:ed:da:33:00:
ec:f9:5f:e0:63:43:a1:4a:01:49:bc:60:69:29:e8:
d5:76:cc:a6:f5:e4:f5:c7:e2:10:24:ea:bc:9d:ef:
fc:1b:4a:c2:19:00:82:1e:23:61:d7:37:cb:c0:c2:
ee:5b:5e:9d:e0:10:e1:68:9f:04:b9:84:16:db:eb:
18:26:c6:39:3a:8d:37:ca:c4:94:1f:39:05:31:f0:
c1:13:b4:a3:dc:22:1e:6e:73:d3:5a:00:5f:48:f6:
a3:aa:d8:93:eb:92:45:14:ca:ef:17:c7:06:4c:c9:
ba:df:2f:3b:5e:4d:1c:1c:af:2c:08:40:9c:b6:4e:
4f:6e:53:68:b0:6d:00:60:db:b5:26:e5:a9:c1:c8:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2A:01:03:F6:63:B5:C7:97:D7:73:0C:34:30:35:8F:4F:A5:EC:C6
X509v3 Authority Key Identifier:
keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f8:c9:95:69:2e:46:27:d5:5b:07:7f:4e:33:8c:4f:c1:1e:
93:0b:76:d7:e2:6d:69:73:e0:94:46:f9:a0:6e:2b:76:b2:22:
14:16:ab:00:07:05:20:44:b8:32:d9:0b:98:63:60:de:df:2e:
3b:cf:bd:41:e3:38:65:1b:ac:72:39:2c:10:82:ad:c3:fc:0f:
42:f4:7b:12:dc:11:66:54:93:99:4a:51:56:31:2b:27:f5:39:
b4:4b:df:36:d8:15:13:50:0e:a5:1a:76:9e:7a:fe:cd:e9:eb:
51:c3:4d:a7:41:59:8a:41:d4:88:c6:1d:0b:d4:43:65:23:16:
8c:5b:a5:45:14:0e:34:3f:35:19:bb:e0:be:a7:f2:70:84:6f:
b2:d4:66:b7:1f:dd:86:45:9d:b7:94:38:f0:33:13:98:0c:5e:
4a:f0:b8:e3:5e:53:3c:9d:86:8e:f6:52:2b:93:7d:2d:9d:cc:
54:3d:4e:16:01:23:77:9a:d7:de:cb:26:9e:b7:3c:24:66:8d:
b6:84:bc:d0:6a:69:87:02:09:76:78:54:b9:c2:f2:fe:de:a3:
c4:1e:ce:b0:39:7e:d0:11:78:a3:98:13:15:10:7a:db:6a:cd:
09:22:79:44:c9:a0:1b:aa:b4:05:fc:fe:e4:16:67:7d:f4:c3:
7d:7d:fa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:33:32 2026 by rpki-client