Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: tbKkiWWEtZW4uZ4Th3oVo/7KCF3A4qJKj6OpnoHjeRY=
Subject key identifier: 85:33:D7:39:6A:32:42:96:24:E6:A1:4C:06:C3:85:52:1E:10:F0:64
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 019CE55B141DF9ECC81284F3E7268A7FC11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 163F
Signing time: Fri 13 Mar 2026 04:01:17 +0000
Manifest this update: Fri 13 Mar 2026 04:01:17 +0000
Manifest next update: Sat 14 Mar 2026 04:01:17 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: CzLhh1oXouCYSRYOcgZmiKKHNGxGnMr6b0wjw8o9lbc=)
2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:14:1d:f9:ec:c8:12:84:f3:e7:26:8a:7f:c1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Mar 13 04:01:17 2026 GMT
Not After : Mar 14 04:01:17 2026 GMT
Subject: CN=8533d7396a32429624e6a14c06c385521e10f064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ed:7c:a0:5f:4e:3a:d6:c2:fc:f1:0f:29:b5:
21:3c:d6:3a:aa:85:4a:1f:bd:f3:01:1f:49:69:9c:
ed:66:2e:30:4c:03:6d:d0:c0:3b:95:ee:ab:66:9d:
96:ec:b9:93:9d:5e:cb:6d:bb:95:b8:8f:11:5d:56:
29:d3:a4:a0:cf:66:f9:9f:04:52:a5:a1:94:be:09:
e4:1c:2c:bb:54:e0:a3:05:07:dd:2b:a1:ed:5a:43:
62:d5:e2:90:40:31:c9:40:80:8b:48:9d:d3:6d:3e:
be:32:e1:d0:79:60:a6:13:8e:57:0c:49:50:49:9d:
9e:4b:31:69:58:87:f9:2d:8b:06:39:9a:c4:7f:9b:
f7:b4:d2:b3:74:e6:c2:33:79:34:2f:b6:e1:66:3f:
35:2d:d3:61:74:f7:ee:91:df:e2:28:01:1b:8d:96:
d6:6e:f3:17:32:a3:24:d6:cd:ae:f7:d8:f5:a9:80:
a0:c6:5f:87:ce:5b:cc:57:01:de:85:6c:e4:f6:c4:
98:35:f4:e0:89:45:fb:c1:c3:90:c9:28:d8:72:59:
cc:e9:3c:12:47:29:06:b5:48:4b:af:e0:8f:37:8d:
25:1a:e2:50:f7:65:46:eb:a9:d8:09:dd:0c:b0:0b:
8a:fd:3c:9d:83:65:0f:69:76:b3:10:d0:d7:ee:94:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:33:D7:39:6A:32:42:96:24:E6:A1:4C:06:C3:85:52:1E:10:F0:64
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:98:f0:e1:19:37:3c:8c:36:b6:c7:af:87:77:9c:a7:00:97:
c5:3e:13:db:8a:ba:8b:0c:40:ec:ed:0f:8a:ad:ee:37:55:ab:
e6:f1:09:cb:b9:8e:7d:2f:52:bd:22:16:89:1d:b8:ed:05:7c:
87:16:da:e9:87:e0:c4:bc:31:89:0b:52:c2:7c:b4:68:5e:0f:
c1:59:a3:58:18:1e:70:5e:e7:99:77:a6:8f:00:e8:5f:6e:62:
bb:46:76:a0:24:00:af:b0:e2:54:ad:28:17:01:1c:8a:38:7d:
53:88:a5:17:c0:54:85:89:2a:7f:e3:3c:c0:7b:2c:cb:0c:3a:
50:f4:0e:96:1b:25:e5:8e:a5:e9:b5:e1:97:dd:ac:da:7e:49:
df:06:36:e9:db:c9:cc:53:30:9b:77:e6:bd:45:d6:39:6e:f9:
f3:61:c9:8b:08:89:38:ea:b5:8c:31:82:cc:07:cf:e7:3c:14:
75:70:44:8f:f5:b2:b2:a1:f7:f0:83:cb:29:82:34:8a:ee:2f:
1c:84:03:49:be:5f:e5:88:09:bd:2d:df:b9:12:93:9b:90:8f:
4c:7d:02:1e:15:f8:96:55:6e:fb:89:bf:91:8c:cf:8c:69:f1:
f4:fe:53:3a:fb:48:59:2a:23:d8:e4:6d:6a:fe:60:53:9a:6a:
f0:2c:07:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:56 2026 by rpki-client