
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: KX4eT9z40Qbgi5OMyMP/VWdJXGfjzavmvxz0sBHASRE=
Subject key identifier: 7B:C0:86:B5:BF:E9:E1:AA:53:E1:A6:5F:FD:5E:1F:25:39:EA:24:E7
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 019D98190E56E4E0D7BB8973533BCF87AFB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 1891
Signing time: Thu 16 Apr 2026 21:01:11 +0000
Manifest this update: Thu 16 Apr 2026 21:01:11 +0000
Manifest next update: Fri 17 Apr 2026 21:01:11 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: 5veNJ02tjYGjjRCfRzXgeFB5qbTex2Tvg7zeyEXvlrA=)
2: _xye3zL4cDBrsfPa3oaNO5DUWKk.roa (hash: f5gE3FGAqbRKSe0OsknEgvTr1MnW4+hSm41yjpSqF/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:19:0e:56:e4:e0:d7:bb:89:73:53:3b:cf:87:af:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Apr 16 21:01:11 2026 GMT
Not After : Apr 17 21:01:11 2026 GMT
Subject: CN=7bc086b5bfe9e1aa53e1a65ffd5e1f2539ea24e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a1:b3:23:70:6d:28:0a:79:83:86:31:e4:8a:
a6:7a:97:8a:c9:d7:1f:5f:ec:00:1f:97:c5:d2:04:
0b:e9:3c:9c:0a:e7:43:ac:8c:26:5f:af:c3:91:f4:
23:c4:ea:41:f2:1a:72:14:ce:2b:95:e9:9a:74:74:
cb:8f:78:3e:8d:49:ce:ac:74:87:f6:34:96:f5:a6:
e0:47:a8:6f:cf:72:58:61:a7:16:1f:03:3d:d9:02:
8e:f7:3f:5a:46:24:b4:ff:bb:46:da:87:93:61:fa:
67:98:43:12:b7:01:d3:e0:da:7e:24:c6:e2:d9:7e:
6f:20:99:fa:06:66:17:b9:89:bc:c9:d2:c1:2e:fa:
b2:c6:a3:f9:97:63:0e:60:cf:ca:99:24:42:c3:7d:
b2:7f:ab:8a:49:09:42:e8:e5:7e:e3:5d:cd:1e:2e:
84:2b:8e:b8:62:0a:24:1d:ba:a1:47:14:ba:c4:16:
a2:80:35:7b:3e:d3:05:a4:39:cc:86:62:ba:9f:30:
34:59:a6:b2:07:73:9b:ae:2c:2b:76:9b:5f:d4:83:
ca:ce:2e:49:3a:f7:9a:02:46:d0:f5:c3:b4:28:b6:
db:6b:5f:f9:d1:f9:50:f3:c0:31:78:0f:af:54:29:
3a:3f:b2:2a:1c:8f:fc:16:90:0c:ca:13:44:4e:fb:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C0:86:B5:BF:E9:E1:AA:53:E1:A6:5F:FD:5E:1F:25:39:EA:24:E7
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5b:b4:48:fb:1f:e6:cc:89:88:aa:dc:48:61:be:c2:4b:74:
0a:d7:a4:eb:05:8c:5b:09:c8:39:59:7d:8d:e5:25:a9:65:96:
f6:44:d8:ec:63:84:ab:cd:0c:e0:5a:8a:c0:b0:30:70:cd:02:
9d:1f:c7:b7:1b:d5:63:77:3d:b0:40:0f:28:b3:2a:12:76:09:
d0:ee:35:87:87:c7:f0:63:5b:4e:d5:31:17:26:ec:bc:76:2d:
5a:be:7c:d5:9a:df:11:0f:41:a3:96:28:79:96:7c:7c:f8:9a:
9c:da:b8:13:7a:b0:d4:c3:93:b4:34:1d:b8:6b:91:93:36:70:
cc:bf:62:bc:34:d2:71:a6:ca:17:8b:f6:d1:18:a9:7e:6d:3a:
99:fc:92:a9:19:be:88:14:6e:4b:39:a0:25:43:22:16:9a:09:
a9:5f:a6:94:9f:85:15:82:f1:e3:a8:bb:38:de:61:46:09:78:
f5:84:9e:c1:c8:c8:05:b6:82:eb:7b:1e:32:14:00:86:1c:af:
cd:e2:e3:79:c7:de:a8:3a:bb:64:c0:5b:df:64:fa:33:16:04:
08:19:e3:0f:7f:87:09:15:dc:37:74:a4:58:2b:df:c0:b4:eb:
fd:67:5d:cb:54:75:83:2d:0a:08:93:72:ff:00:8d:90:e5:e0:
80:8d:d7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:05 2026 by rpki-client