Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: RhigSXNDwl771yTVwbMNZu3n90qk+3NoR1c5aQNfeZ4=
Subject key identifier: 7E:9B:42:7C:54:27:3D:22:69:3C:7B:A6:61:D7:5F:C3:D9:74:C9:65
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 019D28166281DAA9BC99A3EB0F5F41DD9540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 1857
Signing time: Thu 26 Mar 2026 03:00:48 +0000
Manifest this update: Thu 26 Mar 2026 03:00:48 +0000
Manifest next update: Fri 27 Mar 2026 03:00:48 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: cVTaynZ8BDjov09514h8ikbdEPajfnzPuGPTweMkUBg=)
2: _xye3zL4cDBrsfPa3oaNO5DUWKk.roa (hash: f5gE3FGAqbRKSe0OsknEgvTr1MnW4+hSm41yjpSqF/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:62:81:da:a9:bc:99:a3:eb:0f:5f:41:dd:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Mar 26 03:00:48 2026 GMT
Not After : Mar 27 03:00:48 2026 GMT
Subject: CN=7e9b427c54273d22693c7ba661d75fc3d974c965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:6f:1f:ab:4a:0c:30:c6:3e:be:72:bb:38:
22:3b:83:e3:62:99:d8:04:47:9e:b6:95:86:b2:00:
0a:56:56:ad:93:4d:b0:19:78:e0:a8:ed:56:a1:d7:
cd:bc:c7:95:b3:5c:c6:86:e0:cd:22:ad:62:a1:5e:
a9:91:d7:0a:3d:8e:50:5b:29:a9:38:64:a6:86:3c:
4a:4e:8f:59:e3:91:f2:51:f5:e0:38:5d:d8:23:be:
6a:a0:25:10:f9:3f:8c:4c:4e:91:65:0c:a3:46:41:
be:c4:fb:20:76:0b:7c:7c:8f:2b:33:5d:45:0a:2c:
fb:b5:0b:38:aa:55:44:e5:11:44:b6:60:df:c8:b3:
e0:0f:8c:8f:18:57:5f:47:22:4d:2d:2d:f1:d2:bf:
41:9e:25:1b:5b:01:76:8c:38:98:02:99:ea:3c:cd:
aa:62:fc:78:70:0b:6e:2e:44:05:39:a5:22:16:49:
e6:4d:17:de:a3:07:ca:71:fb:ce:6a:d3:34:a2:59:
d3:8b:0b:0f:54:b0:48:09:39:a5:1a:67:a7:e9:79:
ce:3d:72:28:5b:72:91:a5:38:26:e5:59:f4:84:fc:
0d:3a:f2:77:cc:e0:0e:6d:5f:2f:96:67:f5:12:0c:
86:ab:e7:68:56:e3:38:60:df:24:92:54:99:ae:49:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9B:42:7C:54:27:3D:22:69:3C:7B:A6:61:D7:5F:C3:D9:74:C9:65
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0f:17:6f:b0:04:7b:09:65:5e:00:cd:b0:cf:ff:4b:c7:a7:
b7:a4:7a:61:d7:3f:cc:a2:66:b7:5b:2a:e5:c9:8f:06:59:ed:
1e:f6:70:83:59:79:d2:24:4d:65:53:94:e4:a0:ae:b4:2a:d8:
83:77:05:d9:a6:c6:88:4e:fe:37:28:c5:e2:fc:87:b2:ca:52:
df:c0:00:8e:4d:73:1a:c7:32:15:2e:4f:81:80:73:da:5a:0f:
90:76:d6:da:6e:f9:48:a7:c2:41:ba:eb:8c:ef:42:7a:b5:75:
0b:bd:82:6c:fa:eb:18:52:f2:77:4e:19:64:7a:2f:29:9c:2e:
46:18:9e:91:38:be:f6:62:21:9b:57:27:67:f5:7a:1d:99:39:
e6:20:f5:98:a8:d1:ad:e1:b1:c3:57:b2:b3:ad:ce:c6:98:a9:
b9:29:34:aa:72:f4:fc:0e:01:a5:45:54:f6:f2:57:3a:f7:5a:
19:2a:1f:00:e4:22:42:f8:97:91:fb:53:95:3e:9d:fd:5b:71:
71:40:43:fd:3a:69:f6:17:f0:ee:9e:f6:e9:aa:b4:08:76:27:
9b:f4:a2:5c:0f:40:d1:e1:f0:32:87:96:6a:b9:f4:23:2b:27:
ca:38:0f:fb:d5:cf:3d:83:1a:7b:6b:17:c2:84:bb:ae:51:58:
9b:ea:6a:a1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0oFmKB2qm8maPrD19B3ZVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZmMzNTkwYmY0OWFmYjQyY2U0NGE4YzE3NGM0NDE2MWI4
ZmMyMDkwHhcNMjYwMzI2MDMwMDQ4WhcNMjYwMzI3MDMwMDQ4WjAzMTEwLwYDVQQD
Eyg3ZTliNDI3YzU0MjczZDIyNjkzYzdiYTY2MWQ3NWZjM2Q5NzRjOTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4NvH6tKDDDGPr5yuzgiO4PjYpnY
BEeetpWGsgAKVlatk02wGXjgqO1WodfNvMeVs1zGhuDNIq1ioV6pkdcKPY5QWymp
OGSmhjxKTo9Z45HyUfXgOF3YI75qoCUQ+T+MTE6RZQyjRkG+xPsgdgt8fI8rM11F
Ciz7tQs4qlVE5RFEtmDfyLPgD4yPGFdfRyJNLS3x0r9BniUbWwF2jDiYApnqPM2q
Yvx4cAtuLkQFOaUiFknmTRfeowfKcfvOatM0olnTiwsPVLBICTmlGmen6XnOPXIo
W3KRpTgm5Vn0hPwNOvJ3zOAObV8vlmf1EgyGq+doVuM4YN8kklSZrkkNMwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFH6bQnxUJz0iaTx7pmHXX8PZdMllMB8GA1UdIwQY
MBaAFPj8NZC/Sa+0LORKjBdMRBYbj8IJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QdzFrTDlKcjdRczVFcU1GMHhFRmh1UHdnay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYTFlNmYyLWRkNWEtNDQ4My04ZmRi
LWZlZTI2YTFjNDNkOS8xLzEtUHcxa0w5SnI3UXM1RXFNRjB4RUZodVB3Z2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2ExZTZmMi1kZDVhLTQ0ODMtOGZkYi1mZWUyNmExYzQz
ZDkvMS8xLVB3MWtMOUpyN1FzNUVxTUYweEVGaHVQd2drLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsw8X
b7AEewllXgDNsM//S8ent6R6Ydc/zKJmt1sq5cmPBlntHvZwg1l50iRNZVOU5KCu
tCrYg3cF2abGiE7+NyjF4vyHsspS38AAjk1zGscyFS5PgYBz2loPkHbW2m75SKfC
QbrrjO9CerV1C72CbPrrGFLyd04ZZHovKZwuRhiekTi+9mIhm1cnZ/V6HZk55iD1
mKjRreGxw1eys63OxpipuSk0qnL0/A4BpUVU9vJXOvdaGSofAOQiQviXkftTlT6d
/VtxcUBD/Tpp9hfw7p726aq0CHYnm/SiXA9A0eHwMoeWarn0IysnyjgP+9XPPYMa
e2sXwoS7rlFYm+pqoQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:36 2026 by rpki-client