Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: c5b3gbU28AE/ZfFVlnEGer38nR/w+X7TaxyUI/KspEU=
Subject key identifier: 97:4B:5C:CE:C8:2E:92:95:F3:DE:81:14:A1:E1:A0:AC:D4:FD:ED:F9
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 019DA29CF729531EB232BD37D7485C41D4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 16A1
Signing time: Sat 18 Apr 2026 22:01:29 +0000
Manifest this update: Sat 18 Apr 2026 22:01:29 +0000
Manifest next update: Sun 19 Apr 2026 22:01:29 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: ganDcYthKCL0eDcygFRMKN8OSxry5MclkPOuV3DTlfc=)
2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:f7:29:53:1e:b2:32:bd:37:d7:48:5c:41:d4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Apr 18 22:01:29 2026 GMT
Not After : Apr 19 22:01:29 2026 GMT
Subject: CN=974b5ccec82e9295f3de8114a1e1a0acd4fdedf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:ac:e4:d9:8a:89:74:d6:11:93:b4:11:a6:
84:97:65:1c:e2:81:ab:52:f0:ec:8d:a5:0d:81:30:
8c:46:0e:1e:23:71:0b:67:43:64:d9:ab:a5:1b:e9:
dc:02:b8:71:8f:d7:16:8f:13:bd:a7:ac:a6:21:1f:
eb:af:65:a1:30:d9:fd:62:48:0c:98:ef:63:11:1a:
8f:0e:7a:69:ce:54:5d:4a:a1:b4:d6:fe:eb:39:5d:
8b:53:d9:ac:35:c4:a5:e2:a0:81:db:1f:ea:fa:b0:
d0:f1:1c:3d:82:d9:d7:0e:13:f4:ee:24:26:35:b1:
c5:34:dc:70:1b:47:55:19:54:a4:ef:5b:8a:da:36:
42:ab:f0:e4:3c:22:14:17:2d:8c:b1:dc:5f:f9:1e:
10:54:39:ba:6c:00:5b:d9:90:e3:f6:dd:f9:6c:76:
56:ce:34:78:52:03:34:e8:ef:74:e0:ca:4a:52:1b:
6c:5f:5a:55:06:f0:a4:6c:b2:9e:f3:92:29:6a:66:
d2:74:32:c5:38:f8:70:89:a2:1f:16:9f:8f:61:99:
80:7d:6d:7b:d2:87:4f:32:ab:bd:49:19:67:f0:db:
58:be:24:3e:e5:68:9d:0d:5c:19:e4:e1:22:fd:3b:
2d:bd:2c:d5:86:ce:95:33:8a:92:e5:02:5d:1c:fc:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4B:5C:CE:C8:2E:92:95:F3:DE:81:14:A1:E1:A0:AC:D4:FD:ED:F9
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4b:6c:7c:95:f2:b1:48:54:88:24:27:09:36:47:c1:eb:63:
b4:86:2e:64:1e:46:a9:36:69:37:db:3e:02:a2:cc:19:8c:18:
c3:15:ea:1b:d4:ca:e7:ec:a3:cc:58:30:bb:67:b1:70:64:e0:
2f:a5:f9:f0:87:74:71:13:47:d0:da:a0:f1:54:c2:0d:d1:be:
0c:e8:f5:47:e0:e7:e4:ad:8b:da:2e:10:12:5d:22:18:a7:86:
84:fd:b7:75:b0:ae:61:5f:b5:60:a4:aa:10:53:bf:12:a9:5c:
62:b2:38:ba:71:3b:b2:5f:07:b7:9d:69:e8:47:c0:c0:df:8e:
34:f3:98:4b:20:97:ad:9b:38:29:c8:3f:11:28:79:f8:b2:4d:
45:81:fb:94:df:1b:ab:77:c7:b7:21:e2:d9:c0:e8:89:fe:d7:
08:75:0d:18:c5:96:51:e7:ec:4d:2f:7c:d4:ee:b7:e1:a9:ac:
4c:d3:d1:a5:a5:a5:21:a0:93:10:3f:11:71:ca:d1:da:ee:e4:
fd:86:92:c7:e0:a4:60:a5:d3:d5:54:c5:36:f1:5b:18:3a:7c:
22:04:aa:64:4c:a1:53:f4:35:21:57:ce:89:88:85:19:d6:dd:
9c:15:4a:fb:1b:77:de:0e:41:7c:43:1d:3c:0f:a8:65:7a:fc:
21:2a:08:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:36 2026 by rpki-client