Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
File: QcDxLXt-PST_2s2mIykIit-CLGU.mft (raw, json)
Hash identifier: jiHaPrazTjx42G0Ci+WiR646/0KjHIRmj0WetZI0S74=
Subject key identifier: 63:ED:43:6A:EA:97:14:06:CC:67:33:D6:E3:C5:58:BA:9E:AF:47:6C
Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Certificate serial: 01A1DC82473C29789488C8B393E860710D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
Manifest number: 033E
Signing time: Sun 15 Nov 2026 00:01:27 +0000
Manifest this update: Sun 15 Nov 2026 00:01:27 +0000
Manifest next update: Mon 16 Nov 2026 00:01:27 +0000
Files and hashes: 1: QcDxLXt-PST_2s2mIykIit-CLGU.crl (hash: o6wHSXNoSoWNIGxV9KI0lrXAT9Q3gEtKCgOTE0oU4zU=)
2: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (hash: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:47:3c:29:78:94:88:c8:b3:93:e8:60:71:0d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Validity
Not Before: Nov 15 00:01:27 2026 GMT
Not After : Nov 16 00:01:27 2026 GMT
Subject: CN=63ed436aea971406cc6733d6e3c558ba9eaf476c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:9b:01:31:22:8b:71:28:60:81:c3:eb:91:
8f:dd:60:68:8d:a2:7d:0c:27:5d:c4:4e:65:cb:e6:
93:b5:67:e4:d7:2c:d1:ad:2c:8a:43:d0:0c:7e:e7:
8a:c5:f1:87:55:54:4c:8c:c7:24:a4:29:e4:7a:00:
05:7c:35:b8:bd:54:04:31:a7:c0:cb:d5:ad:a8:d3:
bb:33:8e:bf:83:9a:ff:07:00:b3:e4:fd:be:de:d0:
a6:41:e7:14:1c:90:14:8c:2a:61:ad:cb:8a:12:ff:
63:c3:f1:b2:fd:5f:40:95:db:99:72:d6:dc:fa:e2:
0e:f8:0b:22:3c:30:d1:01:b2:2f:70:cb:4b:56:d0:
6c:22:42:09:5a:b7:42:c5:d1:d1:14:0c:b2:31:07:
cd:b3:88:6e:ec:91:e8:fe:b2:1f:87:d6:5e:be:9b:
0a:7c:9f:0f:46:ea:eb:cf:8d:88:cc:9a:11:75:d3:
7a:10:1e:6a:d5:c0:be:75:2e:a7:69:5b:0a:7d:1e:
89:8b:59:ab:50:38:ae:1c:14:d2:bd:cc:23:a9:2c:
88:3d:65:fa:a7:da:b4:9e:a5:ac:8e:f4:5c:8e:d0:
da:93:0b:a1:e6:e2:96:5a:3f:2a:1c:24:76:2b:92:
a1:b8:b8:a2:27:be:73:d4:45:d7:4f:af:6f:99:7c:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:ED:43:6A:EA:97:14:06:CC:67:33:D6:E3:C5:58:BA:9E:AF:47:6C
X509v3 Authority Key Identifier:
keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9c:ec:a7:b1:cb:e2:d4:c7:bd:4b:ca:76:49:e7:9e:17:cc:
19:49:78:bc:67:56:5a:76:06:b0:a8:ad:fe:09:1e:9c:4f:04:
47:47:62:ee:55:a1:25:f3:52:c2:57:2e:73:9e:d2:2a:4e:98:
a6:96:f2:12:3f:13:66:06:a3:e6:4a:67:f3:9e:0d:86:e7:16:
ec:a0:d9:e5:42:20:d8:f9:e3:f2:f8:7b:25:04:2d:e2:89:7f:
48:43:70:d7:fc:8d:56:05:f3:de:3d:45:b5:ec:b7:a2:7e:12:
81:41:1e:9a:2b:ed:01:95:e0:40:8b:86:34:fa:6f:37:a1:c5:
cf:61:f7:e7:0a:2f:34:64:f0:ff:72:6a:a9:22:1b:cd:14:6a:
ef:bd:a8:dd:c4:9b:49:42:2c:93:fa:51:32:6e:04:d6:83:6c:
c8:65:2f:4a:a1:90:03:b5:65:e8:86:35:05:04:ba:57:bb:ba:
63:84:b9:12:de:fa:26:fd:fc:94:e4:71:0d:b0:9a:ba:00:77:
fd:08:8d:78:a3:09:67:c3:b9:7c:1c:b6:26:8e:29:be:82:ae:
6c:ad:7d:d1:a0:b7:04:89:30:25:39:f3:bb:29:b2:42:34:a9:
f5:23:73:ec:a6:91:61:4e:38:32:f3:a5:be:73:e3:d0:4f:77:
57:69:07:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:31:37 2026 by rpki-client