Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: Jigv5Litw4VL8rTXbcjB2zHFHeyLwPL4A3t4Nys57VQ=
Subject key identifier: 75:17:F9:71:A6:E8:40:1E:3B:CF:AC:CF:66:DC:18:03:E7:88:61:E3
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 01A0CDB563247398B705A9D5F45CA147F3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 1845
Signing time: Wed 23 Sep 2026 10:00:11 +0000
Manifest this update: Wed 23 Sep 2026 10:00:11 +0000
Manifest next update: Thu 24 Sep 2026 10:00:11 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: XGw7ccBK9WTdwLg0e9Gkjtfh+ss4koRpUmMe4+X2GOo=)
2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:63:24:73:98:b7:05:a9:d5:f4:5c:a1:47:f3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Sep 23 10:00:11 2026 GMT
Not After : Sep 24 10:00:11 2026 GMT
Subject: CN=7517f971a6e8401e3bcfaccf66dc1803e78861e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:2c:33:76:8e:be:e1:54:e3:87:ee:91:e4:
9a:08:1c:66:f1:4b:24:43:06:13:88:85:24:e8:9f:
2b:eb:01:89:7d:a1:81:13:06:d9:b3:39:2a:66:72:
f3:27:32:30:0e:55:16:14:f0:30:34:02:52:27:26:
a5:04:29:83:fe:d6:79:de:d9:4e:2b:41:b8:8b:56:
96:e8:66:3c:a6:c0:9c:04:fc:f5:b2:2c:a6:86:1f:
e4:3c:c7:ac:8e:20:43:8f:e6:e4:d9:89:3d:17:48:
9b:58:ef:f7:19:97:29:a8:32:6e:8e:9f:6e:bb:ce:
fe:0e:f2:29:66:b9:03:40:9f:97:b4:cb:6d:c2:23:
0d:54:a4:bc:2b:c4:c7:b3:84:26:95:d2:0d:55:e6:
b2:26:c1:b0:00:7a:c2:7c:f0:6c:fd:42:a7:78:3d:
00:c7:d3:9e:08:b2:7d:6b:05:85:62:71:e4:c2:b9:
d1:98:a8:b4:48:fe:6b:1b:97:83:af:72:3e:21:28:
e8:a8:af:0f:50:44:63:85:a9:a8:89:ca:fa:6e:f2:
e8:68:96:24:02:6b:ab:20:94:0e:5b:65:16:e1:57:
04:cb:ce:7a:71:fe:db:df:51:4a:45:e2:f0:c4:6b:
19:19:e7:8d:83:20:63:27:77:c9:fc:8e:62:e3:ed:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:17:F9:71:A6:E8:40:1E:3B:CF:AC:CF:66:DC:18:03:E7:88:61:E3
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:01:07:b9:16:d0:ba:4f:5e:87:8e:5f:44:9b:43:be:a6:e2:
92:65:93:80:a8:36:0a:39:28:b7:52:75:de:6d:41:98:c2:5d:
6d:f5:52:ed:6a:40:d9:3f:a5:0e:92:48:1b:d2:91:72:b5:b5:
ad:5f:98:b2:1f:1a:e6:90:22:7b:b9:50:f2:c1:9f:1c:36:55:
e7:b1:44:f3:30:92:e1:64:bf:50:60:ef:81:0e:b4:9a:8f:69:
2e:e2:fb:8a:39:b8:87:76:1b:0a:95:11:69:92:62:92:84:f1:
9b:ba:68:3d:62:06:14:8d:6c:b9:33:d5:a8:2f:cf:0f:e8:8a:
2f:fd:e2:7d:d9:28:c1:36:ab:c6:83:7f:b3:1b:6e:06:35:ff:
f4:6c:ac:70:f5:11:39:56:60:63:d4:37:01:5d:db:c9:ec:8a:
c8:b0:37:8d:1d:73:2f:e4:05:cf:fa:af:bb:d7:dd:98:85:8f:
72:60:95:56:fd:f1:04:4f:db:79:2a:ca:db:f5:19:a5:0b:9d:
ad:2e:41:ef:92:25:41:cf:f2:d9:ba:55:cd:fa:a0:e4:7b:05:
5e:80:60:15:3e:0b:55:af:4b:6d:d7:b7:8b:d8:a7:af:17:42:
ae:48:5c:d3:f8:28:18:6c:fe:f6:bd:fe:3e:56:b0:90:ad:d0:
27:ff:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:10:07 2026 by rpki-client