
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: m26rsdPpk0cG4eYj4LmkpGLjXXWif54g1fP5qTpyM3M=
Subject key identifier: 02:EE:65:DA:B5:FE:6F:28:49:0E:42:13:E4:43:3B:02:87:D3:43:EA
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 019EB8B3EC8956E338063051F907B86691CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 1731
Signing time: Thu 11 Jun 2026 22:00:59 +0000
Manifest this update: Thu 11 Jun 2026 22:00:59 +0000
Manifest next update: Fri 12 Jun 2026 22:00:59 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: u/1sfoeVuCjOdYnAfeNl9lgIbsbkYfQQdIjC/3LjyBo=)
2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b3:ec:89:56:e3:38:06:30:51:f9:07:b8:66:91:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Jun 11 22:00:59 2026 GMT
Not After : Jun 12 22:00:59 2026 GMT
Subject: CN=02ee65dab5fe6f28490e4213e4433b0287d343ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:d8:aa:47:b0:30:b1:bd:e4:ab:c3:7a:c2:
a3:31:47:18:3f:29:8f:74:ae:00:c7:dd:f2:cb:4b:
fd:b8:f1:36:d6:73:d3:a0:a2:e5:52:94:8c:7d:8d:
09:d7:f1:4c:39:b9:19:86:63:93:ea:fa:dc:0a:17:
73:d4:76:f1:90:51:1b:a0:6c:e2:e9:63:b3:ae:1a:
d8:3d:23:c9:e3:32:6f:81:c6:07:d7:38:6c:9d:3f:
0c:97:47:fa:76:c8:3b:9e:0a:e9:bb:4f:82:2d:75:
dc:bd:7b:92:a2:33:eb:05:ea:03:03:2c:e1:af:09:
58:11:da:5c:3d:60:77:45:5e:48:c8:a0:2a:fe:d7:
8a:6c:30:2a:c9:e3:81:37:87:ea:2c:61:bc:86:18:
1d:3c:3d:d5:e5:bc:b2:ee:72:80:35:a4:bb:04:03:
bb:d0:f1:10:f7:e9:c9:76:c5:99:6d:c4:d9:f6:3c:
55:a0:52:4d:34:0c:a7:90:9e:6e:a1:5a:9d:31:47:
5e:c3:03:01:90:95:3e:68:80:f9:ab:64:08:f0:fe:
5c:58:e5:ae:df:a5:90:c5:ac:2d:6f:0a:bb:2e:db:
bf:98:f5:57:0e:21:2c:d0:02:12:72:fa:3d:bb:2d:
34:4b:7e:00:60:24:68:2c:3a:4f:7c:ff:f5:43:1e:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EE:65:DA:B5:FE:6F:28:49:0E:42:13:E4:43:3B:02:87:D3:43:EA
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:85:40:08:10:55:e6:89:fa:32:8e:9e:d2:1c:b7:82:1a:ca:
6b:f6:6d:76:b8:d6:44:83:3b:ac:72:1a:c8:ef:68:30:4f:62:
eb:ef:89:ed:0b:41:71:d5:9c:71:2c:b9:bb:ea:77:73:ed:3a:
55:c5:45:1d:dd:d0:85:01:1c:43:96:e4:0f:9f:2d:e6:e9:75:
91:79:82:27:d6:31:5d:b2:54:cf:87:03:02:46:09:f0:c9:e3:
64:10:86:21:51:eb:45:a3:af:94:83:b3:5f:d5:c7:92:ab:f6:
92:9f:48:09:ac:c4:e8:e3:77:51:cc:51:aa:88:bb:06:33:64:
a0:5b:85:fd:d0:f9:6b:98:36:30:89:ac:22:0e:b3:64:90:9e:
6c:a7:77:e6:f2:44:ff:7e:84:b5:1d:ed:a5:2f:7f:84:d3:cc:
43:e6:6a:56:3a:79:2e:56:c0:60:d9:c3:59:8a:99:98:ee:fb:
e2:ba:55:02:b4:42:18:66:fd:aa:fa:b5:6d:2d:b7:6f:13:e9:
ec:da:b2:f0:f6:a0:32:2e:02:62:a6:15:52:0a:9d:16:b6:05:
22:f5:b4:a4:e5:3e:95:ab:02:0c:1f:14:e2:e1:a1:c7:58:27:
ab:d1:44:86:7a:2a:13:51:5c:42:16:e4:a7:fb:27:28:ab:a7:
c7:95:1a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:12:38 2026 by rpki-client