Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: Yxg14NC5ymQyKH7H2+FaQkaMZuNyBAahXVLvPo/7xzM=
Subject key identifier: 5F:0A:33:2B:CF:4E:E8:7E:4D:00:26:F4:1D:25:A6:54:01:ED:B0:56
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 01A0C40E2127B0CD830F1FCCF4147BDC2A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 1840
Signing time: Mon 21 Sep 2026 13:00:55 +0000
Manifest this update: Mon 21 Sep 2026 13:00:55 +0000
Manifest next update: Tue 22 Sep 2026 13:00:55 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: /TQwXR3Ld4QeO7mv1tjGrN0wHduWaYc+GtH7H9LBBZQ=)
2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:21:27:b0:cd:83:0f:1f:cc:f4:14:7b:dc:2a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Sep 21 13:00:55 2026 GMT
Not After : Sep 22 13:00:55 2026 GMT
Subject: CN=5f0a332bcf4ee87e4d0026f41d25a65401edb056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:77:42:9b:62:96:ee:30:ee:e6:73:21:33:
b6:61:db:38:55:75:8e:d9:41:75:d5:ff:5f:b4:a3:
a7:0f:5d:ba:be:4d:ab:56:7d:6c:4e:e6:98:f6:b2:
2e:b4:b2:3a:d3:f3:3a:7e:1a:a2:da:d3:89:b2:53:
15:77:f9:3b:3a:4c:14:0d:80:75:e3:9a:58:85:aa:
e9:78:e6:c3:79:1f:d3:52:34:76:2d:55:3b:29:af:
f7:28:8f:7d:da:32:00:d4:6f:83:88:a3:f7:bd:a2:
9f:68:be:a7:9e:38:ee:79:eb:7d:66:11:69:ff:4a:
02:57:e0:7d:1d:a6:d2:49:fd:82:a3:98:57:5b:ff:
c6:59:b2:82:80:14:53:51:e1:6e:28:97:fe:1e:51:
92:96:40:79:cb:ff:ea:cf:8a:a1:bb:8b:fc:ea:38:
94:80:12:07:4e:36:d4:65:2e:d3:e5:66:51:18:a2:
f4:56:20:2b:a1:4f:33:5d:cc:e1:64:29:dc:10:eb:
d8:e3:a6:13:44:7a:13:f1:bf:27:18:ab:c7:b2:37:
fb:13:f9:ba:5e:2f:04:ae:ea:c2:3c:ad:69:13:cb:
42:b5:f4:e0:44:fa:84:31:cf:de:50:bf:19:5d:23:
13:20:65:7d:55:be:82:50:28:22:5e:4f:a7:f6:07:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0A:33:2B:CF:4E:E8:7E:4D:00:26:F4:1D:25:A6:54:01:ED:B0:56
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:93:0c:db:b7:fa:41:9d:79:15:1b:56:2d:ef:9a:b7:14:7f:
a7:e2:88:fa:39:7f:b5:ee:a9:8a:f8:a8:52:7b:9f:19:05:69:
e0:c4:4a:75:57:cd:fc:85:84:d7:5e:4e:dc:6d:c7:7f:b1:da:
ce:10:7d:2f:c5:b3:ee:2d:f8:b9:35:97:06:4d:5a:98:66:78:
c8:4a:18:fd:c5:24:e4:df:a2:05:53:c5:20:5d:fa:1c:aa:68:
a9:7d:53:27:80:97:34:8a:25:64:8e:aa:6b:47:3e:1e:bd:e2:
31:1f:be:69:54:99:e9:5f:e4:95:39:79:25:e2:68:92:45:aa:
0d:f0:66:03:ed:9a:fc:2f:a7:3c:5a:c0:76:2d:23:23:83:14:
3c:5d:9a:bf:05:39:b0:73:6b:55:0d:f5:1d:47:e7:a7:bd:a3:
2f:92:8f:f4:78:84:67:9b:78:b9:a6:73:79:f7:8b:8e:14:09:
1d:1b:32:ca:52:01:49:0f:b9:22:3a:cc:03:d5:e8:36:8c:21:
73:07:40:b2:a7:af:e0:65:2d:4e:11:7c:50:6b:ca:5a:8e:df:
3a:a7:02:19:c9:6a:dd:88:60:14:88:dc:8f:7b:c1:7e:46:25:
b9:c2:60:fb:a0:96:69:93:23:1f:8b:3e:f4:89:24:4f:3f:71:
cf:51:1e:41
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDEDiEnsM2DDx/M9BR73CoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTdiNWEyYjkwNzA5MTNkMzQ5MzI4MTVmZWI0N2UzNjMx
ZmRmNWYwHhcNMjYwOTIxMTMwMDU1WhcNMjYwOTIyMTMwMDU1WjAzMTEwLwYDVQQD
Eyg1ZjBhMzMyYmNmNGVlODdlNGQwMDI2ZjQxZDI1YTY1NDAxZWRiMDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZF3Qptilu4w7uZzITO2Yds4VXWO
2UF11f9ftKOnD126vk2rVn1sTuaY9rIutLI60/M6fhqi2tOJslMVd/k7OkwUDYB1
45pYharpeObDeR/TUjR2LVU7Ka/3KI992jIA1G+DiKP3vaKfaL6nnjjueet9ZhFp
/0oCV+B9HabSSf2Co5hXW//GWbKCgBRTUeFuKJf+HlGSlkB5y//qz4qhu4v86jiU
gBIHTjbUZS7T5WZRGKL0ViAroU8zXczhZCncEOvY46YTRHoT8b8nGKvHsjf7E/m6
Xi8ErurCPK1pE8tCtfTgRPqEMc/eUL8ZXSMTIGV9Vb6CUCgiXk+n9geFiQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFF8KMyvPTuh+TQAm9B0lplQB7bBWMB8GA1UdIwQY
MBaAFPqntaK5BwkT00kygV/rR+NjH99fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xZTFvcmtIQ1JQVFNUS0JYLXRINDJNZjMxOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNTFhZDU0LWRkMzAtNGYzNS05MDZj
LTgxMWRjYjdjNDRmYy8xLzEtcWUxb3JrSENSUFRTVEtCWC10SDQyTWYzMTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VkLzUxYWQ1NC1kZDMwLTRmMzUtOTA2Yy04MTFkY2I3YzQ0
ZmMvMS8xLXFlMW9ya0hDUlBUU1RLQlgtdEg0Mk1mMzE4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspMM
27f6QZ15FRtWLe+atxR/p+KI+jl/te6pivioUnufGQVp4MRKdVfN/IWE115O3G3H
f7HazhB9L8Wz7i34uTWXBk1amGZ4yEoY/cUk5N+iBVPFIF36HKpoqX1TJ4CXNIol
ZI6qa0c+Hr3iMR++aVSZ6V/klTl5JeJokkWqDfBmA+2a/C+nPFrAdi0jI4MUPF2a
vwU5sHNrVQ31HUfnp72jL5KP9HiEZ5t4uaZzefeLjhQJHRsyylIBSQ+5IjrMA9Xo
NowhcwdAsqev4GUtThF8UGvKWo7fOqcCGclq3YhgFIjcj3vBfkYlucJg+6CWaZMj
H4s+9IkkTz9xz1EeQQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:43 2026 by rpki-client