Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: Epkz4cH0oGhZdEKGnueK3GvFQO9q6RXaxU5ByIihKls=
Subject key identifier: 28:42:2A:44:43:6F:9D:12:B0:40:4E:2D:09:04:5F:0F:76:7D:38:84
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 019DD019F564DFFFD26FC09A0B3F38711D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 18AE
Signing time: Mon 27 Apr 2026 18:00:55 +0000
Manifest this update: Mon 27 Apr 2026 18:00:55 +0000
Manifest next update: Tue 28 Apr 2026 18:00:55 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: qTGyUUY+n9UZxYMbVUn5ptmGMx9BmI3qc9anC5rNXLw=)
2: _xye3zL4cDBrsfPa3oaNO5DUWKk.roa (hash: f5gE3FGAqbRKSe0OsknEgvTr1MnW4+hSm41yjpSqF/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:f5:64:df:ff:d2:6f:c0:9a:0b:3f:38:71:1d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Apr 27 18:00:55 2026 GMT
Not After : Apr 28 18:00:55 2026 GMT
Subject: CN=28422a44436f9d12b0404e2d09045f0f767d3884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:3d:20:f3:6e:65:e4:64:cd:73:fe:1d:23:
20:3f:fc:1b:98:da:a3:1d:c2:d3:c0:35:f4:2f:ee:
be:17:38:44:b2:18:e9:dd:02:45:ac:75:58:d7:05:
fa:71:81:e5:6b:6c:60:0b:38:e2:4a:6b:13:95:1b:
6f:5d:bf:63:65:9c:86:75:50:dd:2b:b1:d5:73:6e:
b6:01:da:cb:b6:de:12:85:e9:4f:c4:dc:4d:56:8c:
de:a0:b0:1d:da:c6:6d:a4:72:18:8a:c1:6f:8f:74:
93:fe:ec:44:d0:34:c9:73:32:6c:22:5e:96:14:87:
01:2a:ba:b4:d4:30:8c:9b:05:e3:98:14:a3:05:1e:
b4:64:2e:d2:7c:ce:eb:a4:70:0e:91:47:5d:06:47:
d2:e1:87:b8:27:b3:ee:1a:cb:8b:31:bd:9f:fa:a6:
b4:03:db:3c:a3:40:97:46:82:2e:4b:de:f3:18:a9:
d5:ed:95:92:9f:72:d3:a7:16:17:ed:bf:46:a2:89:
df:9d:56:37:13:aa:32:0e:ee:97:fd:89:0a:32:bb:
b0:9d:92:95:b2:f5:bd:74:eb:08:80:c4:4b:80:fa:
05:6c:97:c5:1d:1f:6b:5c:85:bb:d5:08:e3:ba:c5:
14:9d:c6:ff:cb:72:8a:9d:31:3b:be:f6:6d:a2:cd:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:42:2A:44:43:6F:9D:12:B0:40:4E:2D:09:04:5F:0F:76:7D:38:84
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:69:b6:f3:ba:56:64:1b:a6:3d:f0:ce:52:8d:db:ef:f0:5c:
16:cf:e5:71:6a:4b:5e:17:63:80:84:07:80:cf:98:b8:df:f0:
88:5e:5d:0d:e4:a2:44:07:b5:69:ad:2f:6d:7b:5f:8b:70:79:
05:d5:ce:09:4b:3a:db:ef:f9:e2:5e:37:c4:c7:c8:31:6d:f1:
f9:89:ee:10:50:38:3a:c9:cf:ea:3d:aa:c9:03:04:a1:26:7a:
cf:cf:4b:13:47:ba:c3:bf:80:3e:6e:ef:ab:85:4d:fa:04:e1:
08:bb:d1:c7:0a:2f:c5:c1:84:0b:4d:56:83:a6:a8:d8:5e:5d:
4a:d6:6e:51:c3:ee:bf:30:5e:18:97:84:4b:d7:86:67:ea:de:
05:4b:89:8e:fb:f3:40:c3:70:d6:c1:31:4e:b5:8a:3b:be:ee:
65:eb:6d:0a:10:58:82:5f:9c:00:de:af:aa:f3:d8:31:47:0e:
80:f3:2e:9b:cb:84:3f:64:a6:df:19:d6:71:fc:0d:52:6d:b2:
f5:3b:ba:e4:ba:9d:4e:d1:6c:ff:17:26:66:61:d1:11:34:6f:
03:93:95:aa:b4:af:72:73:90:07:0f:3f:ad:d7:c4:a3:18:c8:
19:d7:01:21:ac:ac:3a:20:1f:ea:70:6d:4e:6a:7a:a3:c6:fc:
66:28:cb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:48:07 2026 by rpki-client