Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: Up4U/VIprVqbvuQVwotcu+KKsPZCxu+EEmHJcNMNGlY=
Subject key identifier: 5C:18:A9:44:1E:F2:4D:8F:11:76:ED:16:3E:3F:16:CB:12:4C:55:A9
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 01A1DFF1126D92C0BA263189AFCAE4176F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 18D3
Signing time: Sun 15 Nov 2026 16:01:20 +0000
Manifest this update: Sun 15 Nov 2026 16:01:20 +0000
Manifest next update: Mon 16 Nov 2026 16:01:20 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: abQ9aDs8H8QoYcYTGg6D9fDnRTPr1/xZQ40w7iZQRcY=)
2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:12:6d:92:c0:ba:26:31:89:af:ca:e4:17:6f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Nov 15 16:01:20 2026 GMT
Not After : Nov 16 16:01:20 2026 GMT
Subject: CN=5c18a9441ef24d8f1176ed163e3f16cb124c55a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:af:91:30:44:53:25:49:e7:ed:8e:9e:26:61:
7b:63:a6:91:ae:2e:c9:42:77:05:92:a3:bf:8d:99:
41:29:82:9b:b0:fd:1d:5e:9c:a6:08:81:48:b0:c7:
dd:1e:82:e7:a4:d6:4e:ce:cf:ff:11:58:00:9f:ff:
6d:bf:9e:df:58:11:db:02:d5:72:68:9c:31:89:da:
0e:7f:93:60:49:5a:92:ff:a7:83:72:bd:85:e1:54:
db:bf:49:c0:f8:87:2f:03:a9:b2:d8:ac:b3:23:16:
7b:7c:06:8d:53:dd:58:15:3f:48:a1:c4:36:99:0f:
29:b7:19:bc:42:37:4c:c6:f8:aa:b3:28:63:f1:11:
65:fc:d7:88:cd:7a:8f:4b:6f:ac:d0:f5:17:e3:c9:
32:89:26:15:6b:70:e8:f8:94:29:78:8a:29:aa:50:
02:bc:ca:b7:5a:49:ac:96:44:9c:39:92:d9:43:4f:
6a:7c:84:d1:8a:72:b4:38:14:42:49:81:9c:0e:ee:
c0:b2:96:49:28:d0:ad:75:cc:3f:5e:03:4a:6f:b1:
92:de:cb:04:8e:57:d7:47:04:a1:f5:48:f9:63:1e:
da:2c:84:91:a2:ae:45:30:66:94:e9:58:8c:de:c7:
e0:e5:31:7f:82:5a:7d:cb:63:a0:b5:3c:aa:c9:39:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:18:A9:44:1E:F2:4D:8F:11:76:ED:16:3E:3F:16:CB:12:4C:55:A9
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1b:f2:1d:16:5c:b4:68:cf:1f:b4:a9:78:0c:46:a0:4b:8a:
df:be:09:7d:4f:0b:fe:f5:b1:6e:28:04:5e:6b:40:39:82:b8:
69:fa:fd:78:52:fe:a8:30:a8:1c:28:e1:49:97:14:0d:8c:50:
3a:54:12:d4:ad:91:05:40:c2:6a:9c:0a:2c:22:1d:c3:53:a4:
9b:d3:ee:d6:5e:f6:92:e6:45:b0:e6:78:83:72:3a:c8:b9:b1:
1e:41:75:34:2e:8e:75:a0:c4:9a:16:0e:d1:51:97:9a:95:d5:
d5:5a:7f:f3:63:4e:86:7d:e4:4e:24:a2:6b:be:42:29:84:01:
53:70:db:b9:96:c4:be:77:0b:af:51:34:dc:2b:bc:b2:cf:18:
7f:d6:c1:df:f8:2d:61:b5:24:b1:bc:7c:c0:b5:69:4c:0b:d0:
d1:e7:d3:37:24:d6:af:3f:6e:d1:6d:64:7d:df:58:2d:8b:1b:
81:3d:d6:0f:f7:7d:49:46:4e:81:dc:f3:73:50:16:e3:22:18:
a3:04:16:ea:a5:0c:7e:b2:17:ab:48:61:2a:6b:74:dc:e6:ab:
08:46:99:22:74:02:71:86:a1:b3:c6:e6:dd:ac:7e:09:96:6d:
0c:ee:02:92:50:bb:c7:23:f2:de:89:b6:b6:70:9b:c6:33:27:
e7:13:61:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:56:34 2026 by rpki-client