
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: j0ePsFtJebE5nYFWMGh5XRQk2BethSB25458RVGvfwI=
Subject key identifier: 89:7B:7A:77:FA:99:E4:F0:85:8A:68:86:10:63:5B:4E:2E:E5:3D:34
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 01A17D73B0BCAE7902B9C69D6DCEBFCDB35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 18A0
Signing time: Tue 27 Oct 2026 13:01:36 +0000
Manifest this update: Tue 27 Oct 2026 13:01:36 +0000
Manifest next update: Wed 28 Oct 2026 13:01:36 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: Nmw10riToT1Dc9n40s3j6BWfq9Mes6UBsk85IfgatmI=)
2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:b0:bc:ae:79:02:b9:c6:9d:6d:ce:bf:cd:b3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Oct 27 13:01:36 2026 GMT
Not After : Oct 28 13:01:36 2026 GMT
Subject: CN=897b7a77fa99e4f0858a688610635b4e2ee53d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:6f:1a:42:92:de:d8:dd:ed:27:3d:42:20:
55:07:f0:af:4e:46:58:65:8d:33:96:d4:7b:96:b2:
a7:bc:55:38:3a:7b:8d:fc:66:41:67:e3:69:f8:bf:
c1:f3:1c:6e:e3:7f:a5:41:28:54:26:2d:3d:43:55:
b1:11:bd:6a:9d:b9:56:b6:c9:22:fa:ea:2d:56:5f:
df:c7:26:cc:ce:60:b0:c8:c3:2d:3a:3c:d9:98:52:
d5:70:a6:cf:ee:a5:d0:77:74:6a:b3:eb:08:52:89:
34:76:ea:5e:cb:1e:ad:27:c4:7d:75:83:46:4f:7d:
4e:56:92:1d:b4:05:22:7a:14:6a:c4:6f:42:34:38:
d1:77:03:ef:80:90:f8:5d:b0:f1:bc:02:f3:fe:32:
5e:57:f2:ca:24:73:e6:b0:c2:9c:dc:92:d9:09:32:
46:44:61:57:0f:26:c1:1f:f5:97:2e:2b:2d:cb:76:
41:95:a4:57:c8:25:17:21:3f:36:b5:4a:ee:de:97:
b8:36:15:41:a1:e9:c2:86:32:46:17:5c:21:31:6a:
a0:e0:9e:df:92:81:9c:c7:40:f7:ae:cc:51:5e:5b:
f5:f4:ae:4a:2a:b1:97:b9:cf:b4:07:a2:c7:a1:9f:
51:6a:4e:d8:a7:f6:d6:65:2b:14:32:22:2d:b5:75:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7B:7A:77:FA:99:E4:F0:85:8A:68:86:10:63:5B:4E:2E:E5:3D:34
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:62:a3:07:91:d5:18:ab:74:f5:30:41:66:ca:79:7c:e9:23:
fb:eb:29:c6:66:2b:a3:c6:c9:22:b4:13:17:83:c4:8f:c5:b3:
63:d4:b1:c8:d6:be:eb:dc:6e:78:bc:68:2c:f4:96:fc:c5:c3:
28:e0:9e:6f:8d:f2:15:49:17:b7:21:df:2e:5f:56:8b:42:40:
e0:75:94:d1:f9:43:6b:21:d3:16:1c:a7:f6:ff:d5:3a:f4:db:
18:44:86:e5:fd:a8:c7:7c:82:d7:eb:84:d2:f8:4a:d5:d0:93:
d0:3b:cd:49:d5:ed:a8:0b:51:8e:8f:55:11:28:8e:ef:04:2c:
92:6c:60:c8:35:22:a4:11:8f:2a:00:ee:a9:78:b3:4b:3b:90:
a3:49:c1:6d:37:fa:10:2e:5c:82:6b:7c:86:a6:f0:fc:63:8b:
26:ba:da:bf:84:06:8e:e0:48:55:98:41:4c:ad:a0:c3:2f:1f:
e1:4a:c4:e6:bd:ba:df:e5:22:44:c4:0f:76:f1:a2:c6:70:b5:
87:e2:b5:05:07:04:ae:85:7e:6f:8a:31:49:20:26:84:f6:11:
99:84:73:c7:19:f1:5b:b4:7c:c8:4f:4f:74:f3:9d:a9:2b:02:
bc:d0:3e:35:6b:24:fa:31:c2:81:ac:ea:bb:b2:a3:3c:8f:c1:
af:ca:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:11:31 2026 by rpki-client