Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: GFUBKcj9M92UFgIweLOA6+T2lGcZ6eexsnmbnGD/cV4=
Subject key identifier: D8:6F:92:E6:7B:B6:5F:FD:FA:79:70:73:48:DA:68:0A:AA:98:5B:AB
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 01A0D0B68AD7B4D5156C4D8051F5D069999E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 1A3C
Signing time: Thu 24 Sep 2026 00:00:18 +0000
Manifest this update: Thu 24 Sep 2026 00:00:18 +0000
Manifest next update: Fri 25 Sep 2026 00:00:18 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: CrprUgm1FCB/+b7pvmGfAMmELY4qakf6abSK5J35MLI=)
2: _xye3zL4cDBrsfPa3oaNO5DUWKk.roa (hash: f5gE3FGAqbRKSe0OsknEgvTr1MnW4+hSm41yjpSqF/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:8a:d7:b4:d5:15:6c:4d:80:51:f5:d0:69:99:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Sep 24 00:00:18 2026 GMT
Not After : Sep 25 00:00:18 2026 GMT
Subject: CN=d86f92e67bb65ffdfa79707348da680aaa985bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:3e:4a:eb:7b:f9:96:0a:a5:03:0c:b5:3f:
98:aa:12:28:51:c8:80:9c:5a:fa:b8:08:92:f3:da:
d0:49:f2:64:4e:2a:a6:08:75:d9:cf:05:de:fb:01:
ec:a9:66:83:60:f1:be:32:43:ed:70:47:7f:3b:2e:
7c:2d:01:c1:be:43:a1:f0:f3:59:ad:98:07:4d:00:
d2:ab:e8:09:56:eb:7a:07:28:ab:47:23:ca:3a:8d:
0a:0c:93:b8:41:f9:31:c4:97:79:48:48:b4:8d:14:
86:1f:3a:ec:0b:c1:71:fe:fe:8e:e7:19:d8:d9:64:
0e:7a:78:37:79:42:87:9d:83:13:bc:35:b3:47:18:
80:6f:8c:19:ac:e3:e3:72:be:c6:38:75:b5:c6:b1:
46:05:7d:4d:d4:5d:a1:8a:f6:5a:80:93:bf:dc:14:
30:92:58:89:e3:8d:4f:ae:b1:8a:a3:db:2e:a2:aa:
27:c5:90:1d:59:fc:23:d4:0b:58:b1:c2:39:fe:37:
fa:99:37:27:65:e1:bc:38:87:e6:3c:78:ba:fe:41:
b2:7b:ab:ff:96:b0:bd:da:3b:87:05:12:32:55:34:
94:d0:30:3b:44:3d:e5:ac:01:ee:31:14:8d:9d:60:
2e:03:cc:88:ba:40:cb:a4:e7:eb:8a:18:6d:bd:8c:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6F:92:E6:7B:B6:5F:FD:FA:79:70:73:48:DA:68:0A:AA:98:5B:AB
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6a:be:02:21:bb:00:20:85:08:1d:06:b7:b5:c4:5b:0d:ff:
a2:a0:a9:62:8e:dd:aa:83:9f:ec:55:d7:e3:0a:3b:ff:95:06:
ca:cb:98:ca:27:4e:22:06:f9:61:b9:32:20:9c:85:d6:56:62:
fa:a1:31:f8:e6:01:72:2b:de:2e:dc:1d:e6:2a:bb:0b:f9:d0:
f5:3e:c9:05:05:3b:4e:e2:0b:e4:1b:fc:ce:0c:d9:35:26:04:
6a:c1:15:de:eb:4a:04:dc:92:2c:4e:d9:d2:43:49:af:f2:86:
08:f0:9d:59:ea:34:48:11:4f:c2:a4:ac:53:f6:e0:de:a2:82:
f3:ff:85:22:e1:7f:70:d4:e1:ba:a5:b8:5a:27:64:62:6d:2e:
3c:5f:24:06:6d:a8:bd:de:46:a1:01:48:1e:46:75:a0:1f:02:
39:4a:51:2e:e2:1e:1b:1d:57:d8:01:52:dd:0e:5f:18:56:cd:
0b:35:c7:72:c9:b0:66:54:4d:37:97:c7:a7:71:0a:67:50:d2:
d6:4e:31:5f:10:5a:5c:85:49:69:30:80:6a:fa:71:ea:ad:86:
81:52:68:c7:61:61:ca:21:6b:6b:9e:ba:6a:5a:0b:2f:b7:28:
ce:f5:ee:f8:c4:5a:e2:9c:55:cc:dd:86:f5:ff:1a:9c:1b:1d:
4c:ef:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:17:26 2026 by rpki-client