Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
File: QcDxLXt-PST_2s2mIykIit-CLGU.mft (raw, json)
Hash identifier: ZuBMvW7r85D+8t5ikEtkQheg8tVLfT1z40kcn4A/mfg=
Subject key identifier: 0D:3A:03:D7:F9:15:FD:46:9E:5A:86:8F:A0:B2:66:F4:F3:71:7F:CE
Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Certificate serial: 019D2B4E8F7F58F0A50164E4CF2C7A512050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
Manifest number: D0
Signing time: Thu 26 Mar 2026 18:01:01 +0000
Manifest this update: Thu 26 Mar 2026 18:01:01 +0000
Manifest next update: Fri 27 Mar 2026 18:01:01 +0000
Files and hashes: 1: QcDxLXt-PST_2s2mIykIit-CLGU.crl (hash: RtSr1kEi5/VkGgLvyFozJRCcrqPpudfR2ZU3Ongw5VQ=)
2: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (hash: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:8f:7f:58:f0:a5:01:64:e4:cf:2c:7a:51:20:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Validity
Not Before: Mar 26 18:01:01 2026 GMT
Not After : Mar 27 18:01:01 2026 GMT
Subject: CN=0d3a03d7f915fd469e5a868fa0b266f4f3717fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:f5:ac:c0:0b:af:2e:45:97:a9:6b:4b:12:
cf:00:11:91:45:ed:73:ad:c8:19:01:ea:28:48:cf:
44:df:76:1c:00:6d:37:c5:44:e7:d9:04:56:d0:cc:
62:3e:09:2b:80:9f:ff:ae:e2:06:ca:83:f9:81:b2:
e2:75:4f:71:c8:e1:15:f0:0d:ef:e5:19:fd:a9:81:
2d:2d:e0:68:a3:2d:ed:cf:9d:2a:da:41:d9:d8:b7:
16:53:05:58:39:c3:3b:39:b2:27:cc:41:74:25:b9:
ba:7c:17:61:7b:8e:28:3b:be:3b:e5:a8:2a:a4:24:
8d:ba:4b:5c:59:e1:ac:d2:40:bd:95:c4:41:de:a5:
85:f4:92:c9:9c:12:75:b9:12:b0:b2:96:bb:c1:03:
6f:eb:1f:2e:9e:f0:53:5c:79:0f:6f:77:0b:fc:93:
46:44:fd:12:a8:e8:51:90:d4:f9:40:db:c8:a8:61:
30:15:6b:6f:a5:ea:e6:f4:16:7f:0e:8f:f5:dd:fe:
2c:21:67:75:57:3d:27:93:3e:ed:40:a4:b5:b6:20:
1a:39:c2:ee:63:ff:89:b6:2e:0e:ee:4e:5a:88:34:
ad:52:b4:ae:2f:77:f5:0e:46:fe:43:6c:c9:cf:d8:
ee:79:ce:b7:36:a4:2c:91:85:e4:91:fa:bc:b9:08:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3A:03:D7:F9:15:FD:46:9E:5A:86:8F:A0:B2:66:F4:F3:71:7F:CE
X509v3 Authority Key Identifier:
keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b7:d8:ed:6d:8c:42:71:4c:29:3b:8b:ae:ec:ed:71:55:91:
9f:5e:96:94:4c:b8:2a:ad:17:08:e3:43:2f:7c:20:ad:15:0b:
37:21:83:ea:3c:1a:e0:fa:98:1e:12:39:5c:d3:e2:5f:4c:0f:
36:05:cb:9f:1a:2d:5c:b7:b1:e7:92:66:a9:bc:5d:8e:0c:5a:
5d:ee:2e:f8:7c:03:e8:f4:4d:8d:cb:b7:7b:41:f6:b0:c0:04:
94:19:8b:fe:94:17:34:2f:ed:59:b7:49:a1:67:45:d5:19:30:
24:59:03:77:32:aa:54:9d:f4:91:e0:13:ab:09:cc:d4:ae:95:
ca:03:9d:bc:01:71:31:35:37:38:6a:19:8c:ff:b6:c3:82:8c:
43:f4:3e:c1:52:13:63:2e:78:fe:2d:ea:0e:9a:f1:8a:d0:b7:
68:98:c2:26:89:2e:e4:6b:eb:13:d5:17:77:34:00:9c:fc:7c:
96:31:8e:fd:d6:d7:ae:1c:7e:1c:89:66:e5:f9:dd:fa:d8:1b:
54:9c:47:96:89:32:0f:61:e6:c6:df:e3:12:24:a3:81:68:b7:
7b:aa:de:15:bd:79:4f:25:4f:d1:92:42:27:f6:15:c9:62:79:
7a:d9:98:01:2f:22:3d:76:72:f3:b0:9d:84:fb:5a:5e:30:81:
56:bc:16:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:33 2026 by rpki-client