Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: f1dC2GEUt3Tz2lF5IIEeFLWbfw+bOsfeQi9+qYciojg=
Subject key identifier: 08:D4:9B:C2:5B:66:9B:77:40:6A:22:E9:0A:B8:6F:67:CA:94:AC:DF
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 019CAE6C8BA4F31B41334889BAFA8BBBACFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 1818
Signing time: Mon 02 Mar 2026 12:01:14 +0000
Manifest this update: Mon 02 Mar 2026 12:01:14 +0000
Manifest next update: Tue 03 Mar 2026 12:01:14 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: 3vwm197Na3filbS4XC3bxLR1oh07F9bjJzTw0xkoNxE=)
2: _xye3zL4cDBrsfPa3oaNO5DUWKk.roa (hash: f5gE3FGAqbRKSe0OsknEgvTr1MnW4+hSm41yjpSqF/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:8b:a4:f3:1b:41:33:48:89:ba:fa:8b:bb:ac:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Mar 2 12:01:14 2026 GMT
Not After : Mar 3 12:01:14 2026 GMT
Subject: CN=08d49bc25b669b77406a22e90ab86f67ca94acdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c8:d6:e8:ac:f8:1b:19:11:03:0d:c0:c1:c8:
c8:3f:96:72:dc:23:48:5e:9c:2c:e3:6f:14:0d:07:
01:77:78:af:0d:41:d5:1e:27:aa:03:ee:77:97:d5:
bf:a3:07:fa:2e:42:9a:e3:70:9a:15:f9:96:70:37:
83:ac:7f:4e:05:69:f5:10:0b:ad:ba:a4:b1:f0:c6:
15:97:78:88:20:fc:01:34:9f:e7:76:67:94:41:72:
0f:9e:b4:a6:96:f7:13:16:85:39:86:18:45:fe:a1:
e2:9d:b1:94:7f:5e:0f:8e:ce:a7:02:34:3e:9e:9a:
43:3f:c3:b1:4e:41:ac:a5:c5:7f:09:33:57:70:23:
fe:c9:25:bb:7c:4d:4a:5e:a3:ad:9e:17:24:18:66:
d9:4b:2a:cd:8c:67:09:21:cf:30:78:db:b0:c8:60:
a5:16:5d:35:0e:73:1e:24:fc:e3:dd:1b:85:c3:ab:
91:2a:45:89:5b:57:06:ac:9e:cb:e3:95:54:d7:9c:
e7:b8:52:b2:d4:6e:66:50:55:bd:8e:98:21:26:2b:
5e:ff:47:38:59:82:ce:d5:df:7e:9c:25:8f:f9:1c:
85:84:03:03:68:1b:6a:11:28:df:fd:ac:5b:8b:7e:
59:84:92:8b:4c:b5:8c:1a:d3:9c:ef:ef:ff:db:b6:
06:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D4:9B:C2:5B:66:9B:77:40:6A:22:E9:0A:B8:6F:67:CA:94:AC:DF
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ad:9a:4f:1a:f7:3e:3d:a1:b4:ec:90:16:7b:7d:0a:22:a4:
62:5a:4b:b0:d8:6c:ad:a4:53:03:ce:07:76:ef:27:b0:d8:f2:
29:4c:54:7e:b7:bd:08:39:a8:22:ed:c6:26:06:50:5c:e8:91:
c8:e3:5c:05:79:60:c9:cc:70:a0:ca:06:51:e9:0a:f7:dc:0b:
9f:3c:b0:d3:1c:d2:3a:5a:c7:63:f3:ec:5b:42:15:fb:10:d5:
dd:95:54:58:d0:64:6e:a3:a7:e1:55:64:0d:0a:57:55:bf:9b:
d1:a1:f4:5b:99:6d:38:4d:45:12:fb:42:40:b4:9a:e9:ab:9e:
f9:46:d1:c7:9a:2a:1d:a5:c6:7c:44:40:3c:2f:6d:8c:21:00:
31:56:a7:b0:5e:a9:d3:7a:51:0e:0c:61:5b:94:5a:fb:38:59:
7d:b3:82:d5:e0:52:25:59:12:7d:97:f8:5f:fc:fe:61:5d:92:
d7:89:c8:aa:c5:9c:19:b5:d9:85:e4:8e:ae:4e:ab:05:36:42:
cf:8c:f8:29:3e:a9:ec:ab:a4:e1:9c:18:0e:5d:72:38:ae:c9:
b6:31:7c:ce:24:8a:25:51:c5:01:8a:f6:77:bd:b7:07:ed:ce:
78:21:8a:80:40:d2:92:0e:9d:97:0b:d5:be:cf:a6:17:68:79:
95:49:e5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:49 2026 by rpki-client