Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: +dfFEjwxgNSJ9STby2/sRK8ydqO1KFCmLbxOio3tMls=
Subject key identifier: 14:0F:B8:81:3A:1C:75:C8:D3:10:26:AA:B1:62:DF:04:84:57:4E:80
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 019FA26053847E13517E1D9E19E14018AB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 17AA
Signing time: Mon 27 Jul 2026 07:00:49 +0000
Manifest this update: Mon 27 Jul 2026 07:00:49 +0000
Manifest next update: Tue 28 Jul 2026 07:00:49 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: ljzmxx2QbBpzq2cCpeheVZJ2rkE90b18h5MBtgpkUKQ=)
2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:53:84:7e:13:51:7e:1d:9e:19:e1:40:18:ab:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Jul 27 07:00:49 2026 GMT
Not After : Jul 28 07:00:49 2026 GMT
Subject: CN=140fb8813a1c75c8d31026aab162df0484574e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:cb:2a:af:4f:87:c6:91:29:4f:5e:04:37:
98:6d:e7:78:f9:96:be:fb:5b:88:83:ef:03:e6:6f:
32:5d:df:87:ce:ed:90:f0:5a:3e:20:90:03:b7:6c:
1a:d6:df:6a:ca:6d:a6:fb:2f:f3:75:45:7d:f0:fd:
be:c2:f9:89:c9:ff:62:93:4d:4f:37:45:6c:ae:a9:
b1:19:94:fd:93:43:6a:9c:53:2e:33:4e:ba:6f:15:
14:61:27:75:69:60:bd:fe:ab:da:4d:56:b7:cc:48:
8a:91:12:43:92:76:c2:69:db:ab:78:25:08:e6:50:
36:b2:7e:43:cb:ac:19:bd:5e:be:f1:b4:85:8b:b5:
3f:00:be:ae:21:69:1b:dc:89:38:91:bc:a7:fb:f2:
c8:1d:64:10:40:79:73:1b:56:34:06:96:74:5d:03:
93:9f:72:1e:d0:da:48:0f:af:71:7e:a7:d8:3a:4d:
c0:81:b8:77:44:9a:c9:45:05:4e:bb:18:85:50:1b:
3e:7a:07:05:59:a2:0b:70:b8:85:29:9d:0e:16:62:
8d:1f:67:00:12:01:43:14:63:fa:40:43:da:f1:74:
03:9c:ac:05:ac:6a:92:1d:e7:bd:ad:c7:a2:c3:5a:
c8:a3:21:de:79:9d:ad:81:d4:30:59:61:72:44:55:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:B8:81:3A:1C:75:C8:D3:10:26:AA:B1:62:DF:04:84:57:4E:80
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a9:a8:1c:07:77:f2:01:68:91:85:8f:04:62:a5:86:b7:e8:
78:30:9f:e3:ea:c1:dc:2b:38:f7:0b:8b:7e:3b:ed:7a:e8:ee:
01:1b:ea:80:ae:76:83:b3:9b:19:6e:cb:bf:16:f4:23:de:c4:
56:04:46:77:a1:df:c4:71:a5:93:e1:4e:be:e9:98:25:f7:45:
74:6d:10:72:d3:d6:06:12:34:7f:53:94:fe:3d:9c:b1:89:9a:
7b:25:53:7e:ab:93:37:7d:ed:20:a1:ad:64:2b:7d:e5:e3:79:
26:0b:67:da:a2:da:01:95:39:f0:59:46:d1:4b:e1:6c:5f:db:
9c:07:f1:01:31:13:22:f9:6c:11:3d:5e:34:56:d6:cd:9f:1a:
e2:47:49:11:38:cc:85:76:3a:e3:53:80:09:a2:dd:01:4b:6c:
60:e2:84:22:be:53:12:98:c4:1d:76:72:6e:b0:a5:13:5c:f6:
11:e8:8c:ff:10:a5:04:9c:c7:46:ec:05:fc:67:64:4c:db:0b:
7a:2e:23:eb:68:b7:7c:a1:32:b6:31:ac:39:29:a0:31:7d:4f:
cd:15:34:12:7c:df:6a:8d:ad:67:ca:08:d0:3b:58:83:89:18:
6a:76:c4:d9:0e:53:fa:a0:64:89:2f:1c:06:90:e3:5b:30:f2:
dc:5f:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:29 2026 by rpki-client