Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: FgZYXdx25hALdIE6iup3mReEl0FNTzs+PJwVGIQPs6c=
Subject key identifier: 43:ED:90:16:98:19:DD:AD:67:60:24:AA:E9:31:AA:DF:5B:4A:DC:DF
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 019F90FE9991359E7E5C4743F11AB9B9D87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 17A1
Signing time: Thu 23 Jul 2026 22:00:32 +0000
Manifest this update: Thu 23 Jul 2026 22:00:32 +0000
Manifest next update: Fri 24 Jul 2026 22:00:32 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: YHv3m8hjacpPVKZB3iEsHcpX4f+c9R4uLxQ+EU/JH3E=)
2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:99:91:35:9e:7e:5c:47:43:f1:1a:b9:b9:d8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Jul 23 22:00:32 2026 GMT
Not After : Jul 24 22:00:32 2026 GMT
Subject: CN=43ed90169819ddad676024aae931aadf5b4adcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:34:0e:3f:59:92:b2:8a:fd:06:ba:d0:ef:
fe:51:77:08:69:58:9b:50:16:33:ef:1c:22:70:8d:
1d:21:88:9e:c9:27:59:a7:3e:0e:91:c5:47:44:4b:
42:5e:e3:12:01:ae:0c:46:41:83:52:13:11:99:91:
61:43:13:ae:46:82:28:a3:74:2e:12:d5:22:75:a3:
f0:3c:aa:da:1d:fb:c5:fa:10:42:49:6f:43:5e:9b:
0e:4f:a2:97:1c:c1:63:2f:86:87:19:a7:de:a2:36:
a6:0a:c2:87:81:b0:1f:ea:6d:a9:f7:4e:68:28:fe:
f9:13:b8:a1:76:da:ac:d2:2d:26:03:2f:4a:76:52:
af:50:e6:32:d7:68:f3:81:d3:07:88:7b:46:bf:38:
b6:86:57:e8:b7:88:7b:dd:24:a7:de:31:6f:a9:0c:
83:b3:a3:aa:5e:fd:21:d5:ff:a6:5f:0d:13:46:68:
cf:5b:61:54:68:57:1a:41:d7:34:86:3e:a6:f2:8a:
f4:eb:c2:9c:bc:da:62:1e:9e:4c:cc:e4:78:f8:c7:
bf:5d:78:3a:54:4b:b6:de:f4:4d:dc:24:3e:d7:54:
fd:f0:bf:9a:60:fd:d5:6f:e8:11:9d:b6:9e:77:c9:
73:0d:6d:7a:85:78:37:fc:2a:ae:ad:0d:f8:76:20:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:ED:90:16:98:19:DD:AD:67:60:24:AA:E9:31:AA:DF:5B:4A:DC:DF
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6e:98:14:b8:2c:36:69:cd:ec:ff:b2:63:88:a9:35:e8:c5:
dc:6f:f5:22:ff:7c:83:21:53:64:0a:45:4f:68:29:46:9e:d3:
b2:d6:0c:65:48:07:65:96:ac:3f:cf:0f:78:7b:bd:b8:2f:dc:
6a:2a:c6:f7:48:80:e2:0d:fd:47:2f:d8:22:e6:29:f1:d0:16:
c8:07:21:43:e6:20:9d:09:2d:02:00:98:4b:ab:94:f0:59:d7:
08:e5:cf:8b:08:d6:f3:a2:51:3d:a9:ec:40:dc:39:9d:be:b1:
00:e9:f8:0a:16:23:c3:8b:d2:2a:c1:d1:d2:7c:6f:7c:f3:7f:
27:92:da:dc:fb:f5:eb:2f:e9:21:03:90:04:92:e9:bd:75:7e:
94:39:7b:5b:54:90:d2:c0:0f:d2:64:c9:f0:25:7d:fd:0e:76:
4d:83:06:04:d1:db:9d:39:77:9b:89:c5:7a:26:70:b9:c1:e7:
b7:5a:38:26:4d:5f:7a:f9:e6:17:d2:72:89:18:8f:a0:ba:c7:
21:53:2c:34:cd:40:32:86:fe:59:a9:75:da:43:60:b3:4c:81:
e8:03:29:57:0b:b2:c9:d3:6d:9d:46:8f:5c:f6:f7:2d:eb:66:
1a:85:f7:d5:72:f8:ea:21:e3:be:13:38:22:48:0e:5f:ed:40:
6a:d2:eb:4a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+Q/pmRNZ5+XEdD8Rq5udh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTdiNWEyYjkwNzA5MTNkMzQ5MzI4MTVmZWI0N2UzNjMx
ZmRmNWYwHhcNMjYwNzIzMjIwMDMyWhcNMjYwNzI0MjIwMDMyWjAzMTEwLwYDVQQD
Eyg0M2VkOTAxNjk4MTlkZGFkNjc2MDI0YWFlOTMxYWFkZjViNGFkY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyes0Dj9ZkrKK/Qa60O/+UXcIaVib
UBYz7xwicI0dIYieySdZpz4OkcVHREtCXuMSAa4MRkGDUhMRmZFhQxOuRoIoo3Qu
EtUidaPwPKraHfvF+hBCSW9DXpsOT6KXHMFjL4aHGafeojamCsKHgbAf6m2p905o
KP75E7ihdtqs0i0mAy9KdlKvUOYy12jzgdMHiHtGvzi2hlfot4h73SSn3jFvqQyD
s6OqXv0h1f+mXw0TRmjPW2FUaFcaQdc0hj6m8or068KcvNpiHp5MzOR4+Me/XXg6
VEu23vRN3CQ+11T98L+aYP3Vb+gRnbaed8lzDW16hXg3/CqurQ34diAiaQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEPtkBaYGd2tZ2Akqukxqt9bStzfMB8GA1UdIwQY
MBaAFPqntaK5BwkT00kygV/rR+NjH99fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xZTFvcmtIQ1JQVFNUS0JYLXRINDJNZjMxOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNTFhZDU0LWRkMzAtNGYzNS05MDZj
LTgxMWRjYjdjNDRmYy8xLzEtcWUxb3JrSENSUFRTVEtCWC10SDQyTWYzMTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VkLzUxYWQ1NC1kZDMwLTRmMzUtOTA2Yy04MTFkY2I3YzQ0
ZmMvMS8xLXFlMW9ya0hDUlBUU1RLQlgtdEg0Mk1mMzE4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApm6Y
FLgsNmnN7P+yY4ipNejF3G/1Iv98gyFTZApFT2gpRp7TstYMZUgHZZasP88PeHu9
uC/cairG90iA4g39Ry/YIuYp8dAWyAchQ+YgnQktAgCYS6uU8FnXCOXPiwjW86JR
PansQNw5nb6xAOn4ChYjw4vSKsHR0nxvfPN/J5La3Pv16y/pIQOQBJLpvXV+lDl7
W1SQ0sAP0mTJ8CV9/Q52TYMGBNHbnTl3m4nFeiZwucHnt1o4Jk1fevnmF9JyiRiP
oLrHIVMsNM1AMob+Wal12kNgs0yB6AMpVwuyydNtnUaPXPb3LetmGoX31XL46iHj
vhM4IkgOX+1AatLrSg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:35 2026 by rpki-client