Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: VhiA2GAJpmBLT4opcHaeNq00sKg4sC0sqG8Fb6O1pwo=
Subject key identifier: BE:F3:7F:C4:92:B2:EB:92:34:C2:8A:C1:9F:46:45:44:A1:0B:30:09
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 019CAB6B3981363DA19A1579E53C76980A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 1621
Signing time: Sun 01 Mar 2026 22:00:56 +0000
Manifest this update: Sun 01 Mar 2026 22:00:56 +0000
Manifest next update: Mon 02 Mar 2026 22:00:56 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: Si0Cj5jQdHBp+eXgoM3+tu29VErkyyMPLs1iIUVaCAU=)
2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:39:81:36:3d:a1:9a:15:79:e5:3c:76:98:0a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Mar 1 22:00:56 2026 GMT
Not After : Mar 2 22:00:56 2026 GMT
Subject: CN=bef37fc492b2eb9234c28ac19f464544a10b3009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:e1:f8:1c:01:dd:5e:24:d1:f9:28:ff:1d:
72:fa:95:5b:25:f1:2a:2f:cd:26:91:14:3c:93:46:
80:14:a2:fa:5a:da:cd:fe:cb:9d:c0:b6:6a:16:8c:
d8:4f:06:10:94:3d:83:0d:69:a3:bf:66:2f:f7:aa:
07:98:d4:e1:06:24:94:58:15:1b:69:24:4a:28:32:
47:79:69:8c:4a:77:4f:0c:36:e1:3a:e4:9f:82:18:
50:47:c1:76:40:fd:45:af:c8:b6:b2:f3:0e:c1:22:
04:de:96:a8:c0:60:c2:22:ef:a5:54:cc:55:f6:d4:
d3:5e:55:ae:a8:12:18:48:be:e3:ef:71:b7:a7:55:
51:17:b9:83:ad:a9:f1:80:6d:b4:7f:28:20:bc:fa:
95:ba:6a:72:68:d4:99:0c:0e:43:e3:47:2d:aa:82:
32:cd:06:e5:3a:6e:33:e3:20:55:fb:d0:76:4c:e4:
be:e3:15:34:b3:4c:26:20:57:15:c9:1d:5e:cf:72:
ff:81:83:87:64:f3:6a:cc:9c:eb:be:e4:fc:6c:f4:
10:56:a7:93:66:3d:a3:f5:05:1f:f4:0c:a5:16:eb:
ba:9a:ca:77:fb:b5:5d:5c:c6:d5:e9:f6:53:94:19:
64:c5:53:fa:a5:e7:bb:18:81:d5:d5:2a:1c:87:39:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F3:7F:C4:92:B2:EB:92:34:C2:8A:C1:9F:46:45:44:A1:0B:30:09
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bc:98:11:2a:e7:bb:09:f0:9d:89:17:d8:10:ff:fe:96:97:
fc:d4:61:7f:1b:f1:ff:2d:5d:74:b6:16:b5:89:f0:be:e2:fb:
12:94:64:fc:9a:e9:ef:d9:f0:f7:5d:8f:91:aa:3c:0f:62:5d:
18:e1:80:f8:61:a6:f9:e6:3b:d9:f9:d9:1e:78:94:82:9d:0a:
ad:20:ce:f2:7d:25:79:09:f4:d1:e1:9e:8b:93:4b:50:a8:5f:
ff:94:4e:6a:85:e4:68:87:ad:a6:e8:98:7d:b8:5c:7a:6a:94:
3e:7c:bc:56:72:c0:24:b6:df:08:56:cc:44:f3:5a:ef:dc:11:
92:2c:c5:75:ff:b9:57:b5:43:65:66:0b:74:9b:c5:94:30:8d:
08:42:59:3c:c3:27:02:1e:f1:c3:be:51:45:ae:27:be:5f:39:
44:4b:50:9e:f1:f4:79:64:21:a0:36:46:ba:62:01:49:8d:82:
d8:2f:57:8a:71:9f:5d:2e:e7:ab:82:67:4a:1a:01:80:5c:5c:
b5:6f:39:a6:3f:f2:c1:61:f5:fe:fe:7b:9b:c1:ac:23:4d:52:
0d:72:18:fd:9b:9c:7d:89:a0:62:77:26:c7:2d:f7:0c:f7:33:
39:3f:cb:54:3a:e7:b2:f5:95:c6:cb:b6:a7:55:7b:e9:50:d2:
a5:11:4e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:21 2026 by rpki-client