Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: i2TCPvuE3SWKwwgqPIcbTaZwuDhYB3QC3Tttd0VGa5o=
Subject key identifier: 30:E0:76:B2:67:7F:BE:F3:D5:D3:7F:B9:E1:EA:B5:D5:00:BD:04:16
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 01A08B3193AA1EE1D93DFCC7BA1B21FC8086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 1A18
Signing time: Thu 10 Sep 2026 12:01:17 +0000
Manifest this update: Thu 10 Sep 2026 12:01:17 +0000
Manifest next update: Fri 11 Sep 2026 12:01:17 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: gLBWgpz/O3uVXbEl4A+R/6PnbE0EZdfO7oB60IpLYyA=)
2: _xye3zL4cDBrsfPa3oaNO5DUWKk.roa (hash: f5gE3FGAqbRKSe0OsknEgvTr1MnW4+hSm41yjpSqF/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:93:aa:1e:e1:d9:3d:fc:c7:ba:1b:21:fc:80:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Sep 10 12:01:17 2026 GMT
Not After : Sep 11 12:01:17 2026 GMT
Subject: CN=30e076b2677fbef3d5d37fb9e1eab5d500bd0416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:c3:63:76:b4:38:70:67:e3:63:20:00:50:
08:02:23:a0:71:23:c6:3a:22:9f:e1:95:75:8c:1b:
31:f6:3e:d3:a7:29:a5:25:6b:7b:5a:b6:de:20:2f:
92:6f:29:0b:c4:6f:38:02:18:50:64:e1:91:9f:ae:
6a:b2:d7:7b:e7:9a:d4:4b:55:76:73:27:82:cb:86:
a2:8c:4a:94:94:ce:cd:80:ce:b6:00:93:74:e4:8e:
e6:47:33:c7:5f:c7:0e:70:9a:98:f3:8f:74:ee:d5:
3f:10:3f:19:44:25:e8:d0:cf:9c:76:6b:bc:8d:00:
1e:12:b1:c1:43:0c:4f:38:c6:bc:63:a6:78:4e:08:
90:c2:44:4a:45:ae:8b:8c:a5:e5:e9:45:dd:34:dc:
64:fd:30:dc:96:44:97:3d:94:66:6d:c0:09:4a:23:
f8:59:fb:cf:90:4e:39:e3:13:94:ee:7a:f7:4f:0c:
e7:cc:af:6c:d1:44:08:5f:a8:62:7c:5a:71:76:a8:
a5:ac:a6:a5:57:02:11:a1:95:14:de:1b:d9:81:5d:
3e:80:80:76:a4:15:41:dc:f4:4f:fb:63:f3:59:e6:
b8:32:5c:6e:42:43:69:89:14:13:2f:41:4c:dc:77:
7e:4a:c6:82:5e:e8:43:e9:96:fb:18:35:0e:f9:ad:
76:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E0:76:B2:67:7F:BE:F3:D5:D3:7F:B9:E1:EA:B5:D5:00:BD:04:16
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6e:f0:1b:20:21:d2:f8:70:6b:a5:ca:f5:2a:07:6c:99:49:
94:5a:d6:70:9d:07:7c:b3:83:05:ef:cd:9b:e2:9d:75:1c:18:
3c:df:f8:1c:04:ad:66:ba:5e:5c:56:e2:e6:36:84:cb:af:9f:
26:1d:7a:5d:10:fa:2c:41:ea:d0:1d:ee:5b:d7:ba:25:b9:7c:
00:bf:41:94:00:47:67:6b:0c:5b:a1:1b:7a:6e:5e:a8:b4:65:
3f:19:a9:29:9b:56:77:3c:67:95:3e:1d:7a:bb:03:5a:25:82:
98:1d:03:f0:d8:94:59:41:1a:4c:9f:a0:80:07:8d:4d:46:ea:
42:14:5e:1c:f8:65:cc:e7:59:bc:bc:10:f1:7b:af:f3:37:c0:
00:b3:b7:f4:ab:9b:aa:99:84:f4:ce:ae:cd:e4:e6:fa:96:21:
8e:c2:83:3c:d8:3d:5c:fa:01:aa:65:46:97:88:ff:16:e6:3c:
b5:34:ee:73:b6:f1:fb:ef:70:15:5a:d9:28:f1:bf:0b:9b:02:
93:ee:7f:af:10:c9:de:d9:22:c9:6f:90:a0:ce:28:4d:b0:6a:
9f:44:d4:b9:91:0b:a5:76:1e:9a:51:50:08:b6:35:cd:7e:81:
24:92:2d:b7:1b:38:41:41:21:57:7b:30:e2:af:31:13:05:93:
ca:46:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:24:36 2026 by rpki-client