Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: KKswetZkXO6Qe4mYFYtPB47E3wwXwbgKUVuqRzaauIw=
Subject key identifier: DE:EE:15:F3:07:F6:34:E9:B3:1A:E4:DB:94:4C:69:39:D0:BE:EE:71
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 019FA37279D9EDB2E5A38CB1AB880D179755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 19A0
Signing time: Mon 27 Jul 2026 12:00:16 +0000
Manifest this update: Mon 27 Jul 2026 12:00:16 +0000
Manifest next update: Tue 28 Jul 2026 12:00:16 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: UobhgIUhjO4lbkL2gB8g/H3ZOlJqBzYYeJfOg+uNfWs=)
2: _xye3zL4cDBrsfPa3oaNO5DUWKk.roa (hash: f5gE3FGAqbRKSe0OsknEgvTr1MnW4+hSm41yjpSqF/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:79:d9:ed:b2:e5:a3:8c:b1:ab:88:0d:17:97:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Jul 27 12:00:16 2026 GMT
Not After : Jul 28 12:00:16 2026 GMT
Subject: CN=deee15f307f634e9b31ae4db944c6939d0beee71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:37:c9:2d:3b:e6:0c:08:1e:55:fc:4a:0e:
79:de:4b:16:57:fd:7c:c7:63:ab:e9:d3:10:e2:14:
f5:c4:bd:28:eb:70:b1:16:ca:ec:d1:15:e6:ec:35:
a7:88:25:24:d3:41:50:4b:4f:65:09:48:83:d6:b2:
c5:2a:f7:48:f3:ca:27:e7:6c:af:71:f9:0a:fd:9f:
86:e0:8c:b3:27:65:9a:51:b2:a8:b8:e6:1b:31:6c:
b8:ee:16:e6:5b:7c:b1:bb:44:5a:94:69:16:73:a9:
13:72:8a:e5:e3:e8:c0:98:e8:7a:15:15:b1:e6:39:
c6:6b:dd:22:56:5b:7d:dc:74:33:29:5f:2f:90:fd:
82:84:52:7e:73:91:d9:5c:ff:d3:2f:ba:cc:9e:3f:
72:47:1f:6e:85:83:0d:d8:71:11:a7:7f:98:99:90:
4b:5f:d8:a5:5f:8a:cf:60:56:36:d5:f4:eb:64:85:
f1:28:5d:19:ec:90:50:8b:64:f2:1f:5a:a0:1c:b1:
0c:c7:71:33:4b:b0:6c:7c:3e:19:24:f4:a5:03:17:
f9:01:87:f9:60:e2:54:a4:03:66:6c:4e:68:4e:58:
e7:88:4e:55:ba:47:d6:d8:6c:8e:8b:a0:99:63:cf:
7a:5d:8e:74:fe:8f:47:d9:3e:0b:27:4a:2c:44:77:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EE:15:F3:07:F6:34:E9:B3:1A:E4:DB:94:4C:69:39:D0:BE:EE:71
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3f:04:fe:78:98:e6:6d:0d:4d:80:6a:88:97:c6:b9:08:33:
12:a6:b3:d7:fc:dd:32:d7:35:18:48:6a:79:ff:12:c3:e5:71:
3d:8e:75:ef:aa:a9:ec:cc:7e:2e:ac:f0:78:ad:17:80:ef:8e:
a4:d2:f8:9e:f6:3e:c4:04:c5:1d:c0:16:e7:7f:2e:f4:ca:f8:
6f:4d:8e:55:05:53:30:ab:c7:54:85:78:63:0a:10:c6:43:82:
59:15:83:08:89:d6:52:df:cf:95:9d:dc:54:71:3d:fd:ca:b9:
35:74:50:70:de:b2:7e:e7:d7:e6:bc:0d:4a:af:8a:33:19:42:
d5:de:b2:8b:d6:bc:88:91:c0:c5:3b:0d:8f:d2:c2:3d:93:4b:
40:0f:d9:03:55:55:92:1d:10:68:c7:d2:e7:7b:02:ad:1f:f4:
de:88:24:06:64:80:c5:c1:00:bc:fd:47:b4:d2:03:5e:06:01:
0c:65:fe:10:7a:8c:a2:c2:e0:1c:29:67:96:b5:e8:e6:11:ea:
f0:e8:0f:df:00:e5:64:f3:30:aa:72:0e:b1:88:c6:a8:b9:c8:
2a:8b:e9:83:3d:69:7e:21:52:ff:cd:25:a0:8e:83:37:a4:29:
fc:89:56:0d:a2:1c:99:48:40:e5:36:86:48:19:ec:5b:05:8b:
e7:2b:1f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:09 2026 by rpki-client