Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
File: QcDxLXt-PST_2s2mIykIit-CLGU.mft (raw, json)
Hash identifier: 3VNgkHfswOiy1LS7LhgPQ2dI54K7v84ideNwuliIuE4=
Subject key identifier: 9B:5D:58:BC:D5:14:32:6A:FF:16:BA:5D:4B:AE:9D:6C:93:7D:7E:1B
Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Certificate serial: 01A0D3EF4076A8B4FCFC2052430E439A60E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
Manifest number: 02B5
Signing time: Thu 24 Sep 2026 15:01:07 +0000
Manifest this update: Thu 24 Sep 2026 15:01:07 +0000
Manifest next update: Fri 25 Sep 2026 15:01:07 +0000
Files and hashes: 1: QcDxLXt-PST_2s2mIykIit-CLGU.crl (hash: HihM0Pns3E2hKGTRj9rOhgsud7Y0VNQQ6AQkwCQpcsI=)
2: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (hash: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:40:76:a8:b4:fc:fc:20:52:43:0e:43:9a:60:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Validity
Not Before: Sep 24 15:01:07 2026 GMT
Not After : Sep 25 15:01:07 2026 GMT
Subject: CN=9b5d58bcd514326aff16ba5d4bae9d6c937d7e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:37:cb:e4:53:b5:ca:24:d3:0a:51:a0:ab:
d0:d6:07:c0:a9:a7:90:a6:a5:16:9a:72:af:7a:68:
dc:ce:30:1b:11:18:7e:f3:ef:e3:ad:65:64:f0:87:
bd:0b:34:df:1e:d5:84:7f:e6:2d:cf:77:ae:78:38:
13:7a:63:69:53:ae:f3:7a:0e:0b:b5:7d:6d:54:68:
08:92:1e:41:30:cb:07:d1:42:e2:ec:c0:ab:4e:dd:
8a:7e:71:ed:e4:20:2f:eb:6f:2b:04:7e:dd:f2:ac:
47:c1:17:fa:e8:cb:20:e7:62:c7:f3:24:c0:d0:d0:
cd:32:cc:df:87:62:dc:c5:0f:e7:f9:11:a6:f1:66:
02:d0:23:40:e1:61:41:92:18:83:8a:79:df:f2:d9:
b7:55:93:69:11:e9:14:55:91:ae:14:e8:8e:f0:d2:
08:74:e2:ef:94:e3:16:57:da:dd:74:de:6e:3b:6e:
8a:55:c4:a6:9d:1c:8e:8f:41:7f:d5:71:c2:6d:13:
c6:b6:7b:b3:be:f5:0f:b4:fd:ad:f4:e2:b7:89:a6:
c3:e6:04:58:dc:f0:d5:6c:2e:36:59:31:f2:18:25:
e8:86:4d:93:14:15:b1:62:e8:bd:69:4d:df:5d:db:
f4:80:b2:d1:e7:3f:11:a4:7d:7b:39:f8:80:84:3f:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5D:58:BC:D5:14:32:6A:FF:16:BA:5D:4B:AE:9D:6C:93:7D:7E:1B
X509v3 Authority Key Identifier:
keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f7:fd:d9:6a:c9:85:97:7e:20:f0:51:4e:83:d8:65:2e:d2:
14:e4:96:8f:db:ca:d2:91:7d:f6:81:7a:ee:a5:19:f8:46:ca:
f3:2d:e8:40:58:00:cb:38:05:7d:97:4e:70:a1:90:e6:08:11:
b5:6b:6c:f6:61:6f:e7:17:ef:62:5e:a7:8c:46:f6:c0:c5:96:
58:53:47:a6:74:fe:89:c2:20:1b:d7:b3:52:d2:81:ae:81:09:
56:21:29:25:10:63:70:a9:3d:76:b7:ed:fc:b9:49:8c:09:6c:
1f:8e:c8:e9:b9:cc:e4:7b:31:c3:16:de:b6:64:cd:8c:dd:bd:
c5:40:c1:9d:a3:3a:7c:dd:27:cc:77:d3:36:d1:e8:7f:04:3e:
dd:c7:1f:ca:84:ec:76:de:bb:3f:0f:9d:3e:e1:8f:21:0b:38:
96:cd:1d:0c:de:3a:a0:10:6d:10:17:b1:ef:96:70:ce:e6:de:
2d:70:2f:ac:bb:ed:37:73:20:2e:c5:bb:9e:ff:3a:a4:27:6a:
d1:2e:1a:b1:0c:62:fa:61:0a:f4:5e:4b:e4:04:1c:e9:80:c8:
2b:66:78:2b:ee:d7:eb:a7:f5:ac:35:90:83:ef:1b:f1:73:8a:
57:21:34:d0:05:94:37:cb:c0:2e:d6:f8:a5:54:27:bc:5e:41:
b4:e1:5b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:46:21 2026 by rpki-client