Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: pAq8yAsPf4LiHCTvYAbi6vyR5/bFYsU0xrUtD/zMK3I=
Subject key identifier: 23:EA:C0:38:15:53:7F:D6:3B:0E:B8:0E:C1:8A:FC:A0:52:1C:7E:15
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 019E1D59BF5478AD24B640A8CD04CCC9932B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 18D6
Signing time: Tue 12 May 2026 18:01:21 +0000
Manifest this update: Tue 12 May 2026 18:01:21 +0000
Manifest next update: Wed 13 May 2026 18:01:21 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: znqA5eOxw1Oq7nAR5e48On5M+SJwgxutrv8kuWhdlNQ=)
2: _xye3zL4cDBrsfPa3oaNO5DUWKk.roa (hash: f5gE3FGAqbRKSe0OsknEgvTr1MnW4+hSm41yjpSqF/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:bf:54:78:ad:24:b6:40:a8:cd:04:cc:c9:93:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: May 12 18:01:21 2026 GMT
Not After : May 13 18:01:21 2026 GMT
Subject: CN=23eac03815537fd63b0eb80ec18afca0521c7e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:7e:c2:ae:07:b5:4b:f9:76:70:26:ea:ff:
46:a6:79:f8:d8:94:b7:a1:32:e4:a6:8e:60:e7:43:
34:66:6f:72:f6:20:2f:01:03:01:d2:61:85:57:ad:
a8:97:8e:dc:e7:59:aa:3a:e8:6e:18:ed:cc:b3:71:
89:1f:1e:c5:4c:bb:8b:28:92:98:a5:52:02:10:02:
77:31:e8:4f:16:cb:7e:10:82:da:f2:22:0a:d6:6a:
95:5b:4a:53:ea:bd:8b:e4:e3:6f:f0:57:63:b5:f4:
72:d4:ba:ff:9d:48:ed:09:de:4c:f3:1d:01:2a:f8:
b0:03:e5:36:20:63:0e:4f:e7:48:f5:f9:b3:2f:c4:
70:44:ed:cc:58:a5:40:ee:c3:40:c4:05:4a:9f:5c:
24:60:12:33:32:67:2b:02:60:5c:f9:db:02:de:41:
18:b7:e1:07:f4:d6:4f:85:55:6c:75:7a:0b:97:65:
b9:cb:00:85:ea:eb:1b:98:13:59:c7:80:89:86:a7:
06:d5:09:35:6a:82:1c:28:98:d7:d8:82:34:09:1e:
25:6f:76:70:91:45:d5:e6:2c:bc:d1:08:4f:a7:f9:
e6:08:7c:be:26:0d:c3:b4:82:d1:d4:ff:f8:18:00:
77:c1:29:45:65:24:b7:2a:a3:c2:d0:08:92:5f:61:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EA:C0:38:15:53:7F:D6:3B:0E:B8:0E:C1:8A:FC:A0:52:1C:7E:15
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f2:ed:39:4d:71:f9:ff:74:42:03:ab:5f:77:d2:90:6d:38:
f5:a3:e1:6a:fe:34:8e:83:96:1b:0a:f0:9e:42:7d:d0:a8:33:
ee:e5:74:85:b3:5c:b4:28:f8:23:f4:24:62:0a:aa:eb:7b:da:
ab:98:39:34:4a:64:71:a3:e8:a1:03:1a:d5:52:5c:c7:bd:b2:
6f:c5:76:50:ef:fc:71:6f:da:c3:66:82:6a:47:76:d6:62:47:
be:99:ab:3c:97:b4:dc:45:70:d8:4e:2b:39:18:aa:78:30:bc:
7d:59:e6:c1:a8:72:ba:d5:dc:19:db:32:cb:61:5b:0c:b8:15:
e4:ed:ee:fd:c4:a2:f6:cb:2b:1f:28:f0:a5:a8:3a:9f:ed:ce:
d9:66:65:0f:21:c4:2f:73:2b:a4:11:4b:37:2c:e0:f5:97:7f:
86:b3:63:f2:46:41:11:c1:27:18:26:1a:00:fe:fb:bd:ef:7c:
89:85:18:07:ca:21:9a:29:2d:4b:b1:d7:cd:37:f4:76:e0:34:
e1:89:f7:c2:2c:1e:62:2c:e1:e7:a0:66:76:30:ea:dc:6b:1f:
8e:2b:11:5e:3e:89:5e:76:ab:b9:6c:0e:e8:af:5f:12:e8:2a:
2a:a5:8a:24:0a:35:9e:e9:fd:65:25:99:74:e0:6d:c3:fd:5f:
be:8d:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:37 2026 by rpki-client