Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
File: QcDxLXt-PST_2s2mIykIit-CLGU.mft (raw, json)
Hash identifier: 96xiS4YCa66JVuUCXLV1rhFAYU4UmzL6oEu+VbXThkE=
Subject key identifier: 19:46:DD:92:59:0C:4D:99:91:A7:4C:8C:14:68:60:2F:89:D8:CE:67
Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Certificate serial: 019F916C406EA757335572950A7BE66B0AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
Manifest number: 020E
Signing time: Fri 24 Jul 2026 00:00:18 +0000
Manifest this update: Fri 24 Jul 2026 00:00:18 +0000
Manifest next update: Sat 25 Jul 2026 00:00:18 +0000
Files and hashes: 1: QcDxLXt-PST_2s2mIykIit-CLGU.crl (hash: vBHEaPKz+eZU2lrjKeSnJk93HNzr1CCc47LW+1ELB/E=)
2: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (hash: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:40:6e:a7:57:33:55:72:95:0a:7b:e6:6b:0a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Validity
Not Before: Jul 24 00:00:18 2026 GMT
Not After : Jul 25 00:00:18 2026 GMT
Subject: CN=1946dd92590c4d9991a74c8c1468602f89d8ce67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:5d:22:d0:9b:34:f5:6f:48:38:1b:7b:d0:
2d:9b:46:b1:82:48:72:5f:bb:52:55:48:9b:63:87:
df:42:f8:4b:ac:fe:a4:d8:01:7d:5b:7b:63:e3:0a:
96:e3:c5:3a:a2:ed:9e:60:a7:05:a6:03:0c:c4:d9:
b4:24:9f:aa:22:b0:f9:ad:1f:d8:40:33:28:48:0e:
6c:a2:37:06:79:97:b6:ba:1c:02:e4:99:cf:56:e4:
3e:88:af:78:c9:eb:db:76:3f:58:cb:77:cb:41:43:
00:cb:87:56:f0:89:d5:49:45:1a:36:65:ba:4f:c3:
b8:b4:a7:f3:30:6d:91:1b:e3:c3:05:7b:c1:5a:d6:
07:56:f4:fc:0c:98:ed:76:f4:c6:df:0b:be:1a:2f:
93:2c:02:24:2a:e9:90:9f:09:ab:0b:f6:61:64:8e:
70:76:a9:b7:24:4e:d9:ae:b7:72:1f:dd:83:b0:f2:
e3:29:6f:f5:f3:b6:27:b8:ca:04:6c:a2:a1:9b:c4:
dc:ff:7f:20:7f:5d:fe:6c:a6:ef:21:17:c3:39:04:
76:d2:c7:b1:b0:5c:65:7f:94:e9:2b:bd:e3:70:2c:
11:6e:00:f8:17:66:b7:f3:ae:5f:9d:2c:2e:b9:6e:
fc:82:1d:bd:66:4a:1f:55:84:ad:d3:27:56:8e:7e:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:46:DD:92:59:0C:4D:99:91:A7:4C:8C:14:68:60:2F:89:D8:CE:67
X509v3 Authority Key Identifier:
keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e8:4d:a2:8e:65:67:dc:1e:3e:c4:1a:e8:b5:82:af:60:53:
26:bd:b2:13:59:8a:a0:fc:48:86:2e:f2:4f:35:b3:84:ba:3b:
ec:67:c9:6e:97:1b:85:20:53:df:59:8b:88:8c:4b:38:ad:37:
07:90:99:4d:88:82:7f:fa:85:79:bd:d5:08:d3:80:fb:7c:e3:
9f:43:03:38:63:84:23:33:26:83:11:dc:cb:d2:3d:dc:14:3b:
47:ab:98:1c:bf:87:ad:05:52:93:60:5a:8c:8e:ea:18:38:76:
fb:0e:eb:b9:17:61:c2:89:60:2a:2d:4b:57:16:84:4d:99:3a:
89:12:cf:36:13:e0:32:b8:dd:f5:e4:ae:a6:18:1b:1a:3d:5a:
a8:b9:16:e1:e1:e7:e8:2e:b3:86:e2:16:83:db:94:71:14:22:
71:61:1e:b2:53:8b:df:e6:b8:ca:c1:b5:a4:c3:ab:a4:7d:c4:
64:43:3a:8b:21:b6:33:2a:70:a7:71:1d:31:64:cf:0d:de:c4:
0c:09:11:04:42:1a:8d:09:03:62:d2:6d:96:fd:0c:3e:e5:e6:
35:94:61:af:e2:46:5d:38:42:a1:ea:7f:f1:d4:8c:fa:3b:19:
36:45:8e:48:b1:3b:45:cd:0f:77:32:3a:34:41:06:f7:38:23:
ac:67:47:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbEBup1czVXKVCnvmawrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYzBmMTJkN2I3ZTNkMjRmZmRhY2RhNjIzMjkwODhhZGY4
MjJjNjUwHhcNMjYwNzI0MDAwMDE4WhcNMjYwNzI1MDAwMDE4WjAzMTEwLwYDVQQD
EygxOTQ2ZGQ5MjU5MGM0ZDk5OTFhNzRjOGMxNDY4NjAyZjg5ZDhjZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH1dItCbNPVvSDgbe9Atm0axgkhy
X7tSVUibY4ffQvhLrP6k2AF9W3tj4wqW48U6ou2eYKcFpgMMxNm0JJ+qIrD5rR/Y
QDMoSA5sojcGeZe2uhwC5JnPVuQ+iK94yevbdj9Yy3fLQUMAy4dW8InVSUUaNmW6
T8O4tKfzMG2RG+PDBXvBWtYHVvT8DJjtdvTG3wu+Gi+TLAIkKumQnwmrC/ZhZI5w
dqm3JE7ZrrdyH92DsPLjKW/187YnuMoEbKKhm8Tc/38gf13+bKbvIRfDOQR20sex
sFxlf5TpK73jcCwRbgD4F2a3865fnSwuuW78gh29ZkofVYSt0ydWjn7ojQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlG3ZJZDE2ZkadMjBRoYC+J2M5nMB8GA1UdIwQY
MBaAFEHA8S17fj0k/9rNpiMpCIrfgixlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85OWE4ZmQtYmY2ZS00MWRhLWI5MmUt
Y2U5ZWQ5MjVlNTFiLzEvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85OWE4ZmQtYmY2ZS00MWRhLWI5MmUtY2U5ZWQ5MjVlNTFi
LzEvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuhNoo5l
Z9wePsQa6LWCr2BTJr2yE1mKoPxIhi7yTzWzhLo77GfJbpcbhSBT31mLiIxLOK03
B5CZTYiCf/qFeb3VCNOA+3zjn0MDOGOEIzMmgxHcy9I93BQ7R6uYHL+HrQVSk2Ba
jI7qGDh2+w7ruRdhwolgKi1LVxaETZk6iRLPNhPgMrjd9eSuphgbGj1aqLkW4eHn
6C6zhuIWg9uUcRQicWEeslOL3+a4ysG1pMOrpH3EZEM6iyG2Mypwp3EdMWTPDd7E
DAkRBEIajQkDYtJtlv0MPuXmNZRhr+JGXThCoep/8dSM+jsZNkWOSLE7Rc0PdzI6
NEEG9zgjrGdHoQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:33:16 2026 by rpki-client