Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: kTIp4vfJCDdmVcfFuhehQq9ll5kgZt3rYIxN5YaAftI=
Subject key identifier: 16:79:D0:BB:4E:C2:BE:AF:78:58:CB:9B:CB:5E:5E:7E:9B:19:F2:10
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 019DCF07841A254C9A108E41FB5AD031D08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 16B8
Signing time: Mon 27 Apr 2026 13:01:09 +0000
Manifest this update: Mon 27 Apr 2026 13:01:09 +0000
Manifest next update: Tue 28 Apr 2026 13:01:09 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: S9AGXNjzYLuHSTECvEYk4bMPe+cGkAO/jG4u8N4a2IQ=)
2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:84:1a:25:4c:9a:10:8e:41:fb:5a:d0:31:d0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Apr 27 13:01:09 2026 GMT
Not After : Apr 28 13:01:09 2026 GMT
Subject: CN=1679d0bb4ec2beaf7858cb9bcb5e5e7e9b19f210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:4e:1d:b3:3b:40:d3:1e:38:e2:60:46:41:
37:ad:dd:de:8e:eb:59:ac:8a:a1:4f:a8:f2:92:0c:
c0:12:b9:11:b0:d1:60:a2:f4:6e:67:c6:91:6a:17:
30:f9:35:14:98:12:a1:92:f5:4f:9c:99:85:13:c0:
8e:41:7e:97:9c:a2:36:9e:d6:4b:84:b3:a5:9d:fd:
6c:e2:41:45:ab:f5:71:52:45:ad:77:90:3b:a4:30:
41:d0:c0:7a:46:b9:47:38:73:7c:30:9b:57:f9:47:
fa:5f:b5:61:a1:fb:3e:31:69:e8:ef:b6:92:c3:21:
a5:e8:91:8a:76:4f:f1:5f:b3:f6:04:7a:b3:dc:31:
2d:69:2e:ea:1f:87:3f:bb:10:e8:ff:bb:0f:83:1c:
2d:31:c1:be:db:71:8c:d9:d2:4e:74:1d:26:ae:62:
20:db:71:3d:20:4e:b8:28:f4:f1:81:23:f5:a5:01:
46:6a:43:9d:2b:26:f2:cc:0d:e0:7b:ba:a2:1f:03:
57:ee:34:e0:84:6c:0e:fe:50:fd:81:6b:70:2a:32:
dd:26:a8:68:e4:1d:f9:4b:b4:d6:5e:c8:1c:3b:f5:
6b:6b:b0:20:bc:bd:e8:69:27:b2:2b:91:c2:3e:13:
9d:6b:c6:f1:9c:7e:63:77:37:b6:7b:11:72:c9:2b:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:79:D0:BB:4E:C2:BE:AF:78:58:CB:9B:CB:5E:5E:7E:9B:19:F2:10
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a9:33:40:9a:cd:e5:4a:1a:03:4f:3d:50:10:90:24:b5:81:
01:22:76:65:bb:db:e4:63:eb:82:77:57:15:ba:9d:ad:03:33:
c0:04:e3:48:21:2b:5b:c8:64:73:2f:83:7d:e1:47:71:af:67:
1a:64:70:1e:ec:b5:fa:fd:f1:ce:60:97:5b:e1:ea:1c:79:39:
6e:5a:af:a0:12:d4:e1:e6:b6:3d:02:b1:95:23:85:64:3b:79:
75:05:66:e8:c4:a7:33:94:e5:fe:d0:7a:d1:28:26:de:b3:39:
19:3d:a9:1c:e0:84:fb:65:b3:11:c2:00:c9:97:63:39:c6:c5:
05:b8:04:94:c1:dd:84:3f:be:6b:c4:72:8f:d2:e7:e5:3e:c8:
d3:20:57:11:e4:c8:0d:a3:3b:d5:e5:21:92:0c:a9:0e:d2:dc:
e9:77:72:f8:df:0a:33:50:9c:ad:09:61:31:f7:3f:9d:e3:a4:
40:37:3f:1c:cc:93:7a:b7:3a:b5:d6:21:b8:94:59:e1:75:74:
32:d1:2c:3a:00:5a:0a:9d:01:69:57:4f:6b:9a:43:d1:1b:7a:
a9:da:77:eb:a5:00:11:02:16:fd:be:79:18:0a:e7:0b:ad:14:
32:84:01:42:83:16:f6:0e:fe:7c:c6:89:1f:28:b2:15:e6:00:
d2:2c:43:9a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ3PB4QaJUyaEI5B+1rQMdCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTdiNWEyYjkwNzA5MTNkMzQ5MzI4MTVmZWI0N2UzNjMx
ZmRmNWYwHhcNMjYwNDI3MTMwMTA5WhcNMjYwNDI4MTMwMTA5WjAzMTEwLwYDVQQD
EygxNjc5ZDBiYjRlYzJiZWFmNzg1OGNiOWJjYjVlNWU3ZTliMTlmMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ1OHbM7QNMeOOJgRkE3rd3ejutZ
rIqhT6jykgzAErkRsNFgovRuZ8aRahcw+TUUmBKhkvVPnJmFE8COQX6XnKI2ntZL
hLOlnf1s4kFFq/VxUkWtd5A7pDBB0MB6RrlHOHN8MJtX+Uf6X7Vhofs+MWno77aS
wyGl6JGKdk/xX7P2BHqz3DEtaS7qH4c/uxDo/7sPgxwtMcG+23GM2dJOdB0mrmIg
23E9IE64KPTxgSP1pQFGakOdKybyzA3ge7qiHwNX7jTghGwO/lD9gWtwKjLdJqho
5B35S7TWXsgcO/Vra7AgvL3oaSeyK5HCPhOda8bxnH5jdze2exFyyStCnQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBZ50LtOwr6veFjLm8teXn6bGfIQMB8GA1UdIwQY
MBaAFPqntaK5BwkT00kygV/rR+NjH99fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xZTFvcmtIQ1JQVFNUS0JYLXRINDJNZjMxOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNTFhZDU0LWRkMzAtNGYzNS05MDZj
LTgxMWRjYjdjNDRmYy8xLzEtcWUxb3JrSENSUFRTVEtCWC10SDQyTWYzMTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VkLzUxYWQ1NC1kZDMwLTRmMzUtOTA2Yy04MTFkY2I3YzQ0
ZmMvMS8xLXFlMW9ya0hDUlBUU1RLQlgtdEg0Mk1mMzE4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqkz
QJrN5UoaA089UBCQJLWBASJ2Zbvb5GPrgndXFbqdrQMzwATjSCErW8hkcy+DfeFH
ca9nGmRwHuy1+v3xzmCXW+HqHHk5blqvoBLU4ea2PQKxlSOFZDt5dQVm6MSnM5Tl
/tB60Sgm3rM5GT2pHOCE+2WzEcIAyZdjOcbFBbgElMHdhD++a8Ryj9Ln5T7I0yBX
EeTIDaM71eUhkgypDtLc6Xdy+N8KM1CcrQlhMfc/neOkQDc/HMyTerc6tdYhuJRZ
4XV0MtEsOgBaCp0BaVdPa5pD0Rt6qdp366UAEQIW/b55GArnC60UMoQBQoMW9g7+
fMaJHyiyFeYA0ixDmg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:04:23 2026 by rpki-client