Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: 91v4Tg4rzuRtpWz2CLYJvnLB2VOsJ2JJc5B5YIqgHLs=
Subject key identifier: 2F:68:1A:8C:56:2C:F0:D7:08:C0:08:40:F5:DE:F8:D8:F9:2B:B2:76
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 01A18A1BD238E868B37C10ED788071AE7A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 1A9C
Signing time: Fri 30 Oct 2026 00:00:41 +0000
Manifest this update: Fri 30 Oct 2026 00:00:41 +0000
Manifest next update: Sat 31 Oct 2026 00:00:41 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: waHjCs2wng0vv7OvrbkkVRxuFDLLItrBUGbEdzEKfSw=)
2: _xye3zL4cDBrsfPa3oaNO5DUWKk.roa (hash: f5gE3FGAqbRKSe0OsknEgvTr1MnW4+hSm41yjpSqF/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:1b:d2:38:e8:68:b3:7c:10:ed:78:80:71:ae:7a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Oct 30 00:00:41 2026 GMT
Not After : Oct 31 00:00:41 2026 GMT
Subject: CN=2f681a8c562cf0d708c00840f5def8d8f92bb276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ec:f3:0c:f4:47:cb:5f:fc:b4:42:cd:87:65:
8a:c2:7a:c6:f2:a9:22:07:4e:d0:70:41:73:dd:5e:
db:7a:b7:4e:34:e4:67:4a:42:28:83:94:11:ef:f8:
67:87:95:ca:ee:6e:26:21:b7:95:f2:32:fd:c1:c5:
d5:92:14:d8:6e:61:da:45:08:b6:5a:ee:8b:e9:1a:
c3:2f:41:d8:e6:10:48:03:16:2d:3a:d4:c6:74:dc:
e4:0b:b0:78:aa:e0:69:2b:d6:3f:6d:a3:2e:96:80:
3d:e0:5f:d0:df:0c:2b:8a:7b:0a:ab:d1:8c:72:9d:
15:65:bb:fa:5a:4d:71:04:c6:4b:ab:e5:70:be:f6:
fc:9f:d0:d5:c9:f4:7a:79:e8:7c:05:f7:43:6a:38:
09:f5:62:75:1d:b3:66:f4:5c:92:28:a4:3c:98:97:
11:bc:01:cf:3c:9e:fb:f4:97:d1:36:25:a5:7f:75:
c1:f2:2e:c0:61:bb:71:61:e2:ea:01:29:09:29:78:
41:66:fc:9e:71:87:39:28:d8:b8:0e:93:08:f2:9b:
2c:e4:19:c2:07:c2:4a:0f:c9:fe:9c:9c:26:f6:b5:
14:11:d5:32:ee:8f:a5:cf:e1:56:d4:93:5e:a8:ea:
ee:e9:ac:b8:4f:44:7c:87:b5:1e:b5:f4:70:f2:a9:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:68:1A:8C:56:2C:F0:D7:08:C0:08:40:F5:DE:F8:D8:F9:2B:B2:76
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cb:0e:5b:62:85:c5:52:c4:0f:fc:60:01:d9:f2:8c:72:a6:
c5:bc:92:06:dd:22:cf:18:d2:e5:85:61:fd:33:21:70:f5:8e:
4d:7a:e5:ff:c2:73:bf:5b:f4:12:b4:d3:7b:73:a7:02:b9:00:
5e:85:ec:69:a8:2f:24:0e:31:84:39:b3:70:a4:80:9b:ff:e5:
1a:1d:96:86:9f:ae:10:85:e1:66:4f:2b:2a:68:dd:84:cb:c8:
4c:b0:6b:5b:6c:db:7d:ae:10:13:ec:94:6c:d6:77:b1:3a:42:
b2:09:eb:fd:1b:2f:33:0a:de:85:72:c8:2e:34:cf:42:cf:c3:
8b:93:92:e3:96:91:89:4d:97:46:60:e3:9a:85:12:c3:51:3f:
61:8b:15:1d:ae:57:34:e4:5c:72:aa:f1:64:fc:45:23:94:cf:
4d:f0:5c:34:2b:12:25:88:fb:48:6b:20:f5:be:91:cd:1d:58:
9d:78:e4:a2:1f:5c:9f:5d:33:81:9e:69:4b:26:03:f5:46:2a:
26:41:65:f1:80:1d:5b:55:43:79:8a:9d:2c:bf:db:ee:c6:ec:
37:b8:c3:7d:54:14:30:5c:f2:64:36:00:42:3a:37:de:16:d9:
7a:72:6e:44:f7:9b:4e:9b:40:73:94:7d:09:2f:bc:16:b5:d6:
5f:16:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:53:20 2026 by rpki-client