Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: iDw8hiNhlsuXHh576NnXRyzFnGLSfiyWMOVYI76Osho=
Subject key identifier: 01:B0:1B:52:7B:6C:08:9E:80:1C:1E:6B:48:61:4A:30:7D:18:74:B8
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 019FAA199B3109EF172C6895953BDF42BFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 17AE
Signing time: Tue 28 Jul 2026 19:00:32 +0000
Manifest this update: Tue 28 Jul 2026 19:00:32 +0000
Manifest next update: Wed 29 Jul 2026 19:00:32 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: PQL/Pann1Zfvb3z/+ckqf2bkr2pAn1DXzPX9hEeatUE=)
2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:9b:31:09:ef:17:2c:68:95:95:3b:df:42:bf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Jul 28 19:00:32 2026 GMT
Not After : Jul 29 19:00:32 2026 GMT
Subject: CN=01b01b527b6c089e801c1e6b48614a307d1874b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:86:a9:ba:01:db:b1:ec:fd:d7:f8:39:8d:
cf:70:83:f1:82:bd:82:c0:13:6d:d9:0b:83:24:8d:
1e:d3:e4:b1:97:1d:50:8e:2d:74:df:73:be:92:dd:
43:20:9e:86:93:35:17:e7:c4:39:23:09:e5:86:93:
c3:25:4a:cf:1b:a2:2d:62:22:ac:df:4b:bb:e7:59:
d3:a0:e2:75:52:1d:d1:cc:72:6d:7a:a7:fa:92:08:
90:31:db:83:38:54:9e:26:7b:d5:d6:2d:8f:a8:6e:
e1:dd:42:a6:ff:d4:d2:6e:da:43:ef:8d:99:6b:25:
ff:c5:c1:63:58:29:12:f3:f4:92:46:50:f0:2d:dd:
d5:85:07:4c:4a:a5:49:bf:d7:83:96:a8:a0:12:b1:
79:54:1e:ef:ac:d0:9e:31:f6:73:8e:a1:09:52:50:
6b:bd:f8:a5:2a:b7:89:a1:2a:ad:80:8b:3c:5f:a2:
6c:39:95:b3:9c:01:da:5c:f5:df:6e:bb:1d:b6:96:
e2:a0:43:e1:19:53:a7:77:1f:78:50:21:1b:a8:83:
d8:54:b0:de:59:3a:d6:bf:9c:5c:fa:d9:2f:8a:6e:
c1:c3:7d:56:1d:e3:55:5d:18:c5:3d:97:81:91:24:
35:48:7c:05:a2:27:d1:6b:8c:df:d6:7c:7f:5c:cf:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:1B:52:7B:6C:08:9E:80:1C:1E:6B:48:61:4A:30:7D:18:74:B8
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:da:19:f4:80:42:6a:8e:4e:3e:d9:05:e1:86:66:4c:29:90:
0c:8b:66:8b:9d:1b:ce:39:80:7a:97:79:0f:bb:23:6f:34:7f:
34:88:89:8d:95:bc:43:d8:92:3f:cb:4d:c0:34:24:de:3d:94:
74:39:7d:c4:0c:9e:d9:dc:3c:5a:0f:0f:aa:9c:9b:18:63:f6:
3b:9a:ab:17:08:51:4e:fe:2e:fa:57:e0:e8:11:95:91:25:8d:
54:f4:22:87:0c:99:39:e0:08:d6:55:89:3f:8d:0c:aa:02:5d:
43:b9:2d:fe:51:11:af:56:1b:7f:b5:4f:a6:16:27:8a:70:9d:
1e:15:f8:5f:ee:b6:f8:d7:f2:32:4e:9a:4a:01:ec:2a:db:d8:
31:e6:6d:90:06:6a:ad:c8:7a:e3:a9:9f:a2:5b:ed:f5:96:c9:
4f:ae:91:e5:bc:b6:47:72:cc:43:05:57:3d:87:83:b1:1a:be:
51:ec:3a:2c:81:95:5e:7c:9c:f1:0c:28:4b:e5:cf:10:02:5b:
8a:a2:25:e6:7f:c5:44:37:6e:6a:ca:00:31:f6:d1:9d:bf:10:
42:9f:bc:c9:a3:d4:aa:e9:00:d4:5a:87:10:5d:12:4b:e8:05:
11:c8:e3:74:e4:b0:19:a9:92:f5:da:f2:88:0d:f1:2e:a7:8f:
89:84:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:36:54 2026 by rpki-client