
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: Nt18Y7cA7Kb8b027xmeDoV+6jAMwPXJn7NdYWL9EARg=
Subject key identifier: ED:A1:22:99:20:83:1F:01:62:B5:28:D5:6B:60:5C:E0:8C:2D:5D:9E
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 019A21E4621CCA6FB4FD1FA89ADD3351F897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 16C6
Signing time: Sun 26 Oct 2025 19:00:06 +0000
Manifest this update: Sun 26 Oct 2025 19:00:06 +0000
Manifest next update: Mon 27 Oct 2025 19:00:06 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: 0+7gHD0E55ZcKxT55jzrAr6SP0GL+VOQZn+IrNpiD+k=)
2: U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa (hash: lVZokALnBnr4+UddkLMCY202V6rmOp2F9LXdZYcTxX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:62:1c:ca:6f:b4:fd:1f:a8:9a:dd:33:51:f8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Oct 26 19:00:06 2025 GMT
Not After : Oct 27 19:00:06 2025 GMT
Subject: CN=eda1229920831f0162b528d56b605ce08c2d5d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:b1:32:36:d0:34:c0:fb:8e:1e:d4:55:bb:
57:8c:30:a4:40:49:8c:89:8d:60:04:9f:d7:a8:b1:
be:43:0d:4e:a3:ff:60:21:3f:07:66:2f:cd:20:50:
48:7c:01:b6:f4:d8:0c:85:d2:cd:98:63:ad:66:6a:
f6:58:96:0b:2d:4d:eb:52:af:b6:01:d1:53:a7:1a:
8e:95:62:b1:14:e6:74:f5:e2:42:62:10:56:92:78:
20:0f:62:ed:82:ef:69:0a:61:a8:72:49:19:25:4b:
ae:06:48:1f:43:a6:a3:76:ff:cf:10:e4:d9:b4:fa:
6a:d9:fa:d9:d9:14:90:5e:c2:7f:a1:7e:9c:c8:eb:
56:c1:a2:eb:41:e4:6c:6b:b7:32:72:1a:a9:26:eb:
8f:cd:0a:15:29:cd:08:dc:97:2f:d0:b8:37:c5:a9:
3a:79:49:13:92:65:a3:0e:cc:67:bf:86:59:6d:a4:
05:02:da:78:f4:86:3b:72:4a:f4:61:3a:04:5d:b5:
08:d1:fe:63:90:ef:63:30:ac:46:b9:64:ee:8c:77:
0a:44:8d:70:32:f0:69:4f:11:bd:e6:a7:0d:d7:69:
93:38:5a:11:f5:4c:90:55:ff:69:e7:b1:6a:86:75:
28:29:23:91:d8:f1:cf:ba:01:76:8d:56:51:83:a3:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A1:22:99:20:83:1F:01:62:B5:28:D5:6B:60:5C:E0:8C:2D:5D:9E
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bf:da:30:a9:8d:9c:94:e2:c3:16:84:57:da:c7:02:8e:eb:
72:6c:e4:28:1e:ea:af:23:80:2e:ed:03:5f:d4:86:8a:49:7b:
a4:aa:52:54:89:19:97:b1:3a:f5:90:41:a0:92:ff:6e:fe:c7:
6a:33:78:a0:ab:42:8c:d2:c3:26:d6:40:c4:35:31:50:58:c4:
9b:86:8f:b5:0b:5e:26:f4:e3:63:54:32:d9:75:3d:e6:db:2d:
b5:e2:fa:0f:cb:11:42:ac:df:dd:fa:96:61:be:19:ef:cc:03:
5f:25:5f:f7:a5:31:1e:e5:d3:42:b7:f5:46:4f:da:78:3e:d3:
4b:18:b8:cc:ef:95:72:f0:2a:90:32:8c:83:7d:72:8e:a1:f9:
a0:a7:31:76:53:a8:b7:0c:3e:73:9c:49:2a:2a:c5:2f:8f:a7:
83:33:ab:43:37:b3:a3:ff:03:be:91:cb:cc:8a:5a:06:3a:4f:
0f:25:31:7e:ad:cf:f6:2d:f2:1e:a1:03:de:1e:33:8a:6e:93:
83:9f:49:d2:de:0b:67:fb:e2:b8:6e:bd:c5:67:38:60:da:31:
cc:ad:7a:c7:01:64:c5:3b:2b:6d:40:14:26:19:d4:73:df:35:
5a:a2:8f:85:a9:65:b8:72:a2:b8:35:37:0e:8c:34:86:c3:04:
cb:cd:d6:1c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZoh5GIcym+0/R+omt0zUfiXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZmMzNTkwYmY0OWFmYjQyY2U0NGE4YzE3NGM0NDE2MWI4
ZmMyMDkwHhcNMjUxMDI2MTkwMDA2WhcNMjUxMDI3MTkwMDA2WjAzMTEwLwYDVQQD
EyhlZGExMjI5OTIwODMxZjAxNjJiNTI4ZDU2YjYwNWNlMDhjMmQ1ZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lCxMjbQNMD7jh7UVbtXjDCkQEmM
iY1gBJ/XqLG+Qw1Oo/9gIT8HZi/NIFBIfAG29NgMhdLNmGOtZmr2WJYLLU3rUq+2
AdFTpxqOlWKxFOZ09eJCYhBWknggD2Ltgu9pCmGockkZJUuuBkgfQ6ajdv/PEOTZ
tPpq2frZ2RSQXsJ/oX6cyOtWwaLrQeRsa7cychqpJuuPzQoVKc0I3Jcv0Lg3xak6
eUkTkmWjDsxnv4ZZbaQFAtp49IY7ckr0YToEXbUI0f5jkO9jMKxGuWTujHcKRI1w
MvBpTxG95qcN12mTOFoR9UyQVf9p57FqhnUoKSOR2PHPugF2jVZRg6MjNQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO2hIpkggx8BYrUo1WtgXOCMLV2eMB8GA1UdIwQY
MBaAFPj8NZC/Sa+0LORKjBdMRBYbj8IJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QdzFrTDlKcjdRczVFcU1GMHhFRmh1UHdnay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYTFlNmYyLWRkNWEtNDQ4My04ZmRi
LWZlZTI2YTFjNDNkOS8xLzEtUHcxa0w5SnI3UXM1RXFNRjB4RUZodVB3Z2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2ExZTZmMi1kZDVhLTQ0ODMtOGZkYi1mZWUyNmExYzQz
ZDkvMS8xLVB3MWtMOUpyN1FzNUVxTUYweEVGaHVQd2drLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAor/a
MKmNnJTiwxaEV9rHAo7rcmzkKB7qryOALu0DX9SGikl7pKpSVIkZl7E69ZBBoJL/
bv7HajN4oKtCjNLDJtZAxDUxUFjEm4aPtQteJvTjY1Qy2XU95tstteL6D8sRQqzf
3fqWYb4Z78wDXyVf96UxHuXTQrf1Rk/aeD7TSxi4zO+VcvAqkDKMg31yjqH5oKcx
dlOotww+c5xJKirFL4+ngzOrQzezo/8DvpHLzIpaBjpPDyUxfq3P9i3yHqED3h4z
im6Tg59J0t4LZ/viuG69xWc4YNoxzK16xwFkxTsrbUAUJhnUc981WqKPhalluHKi
uDU3Dow0hsMEy83WHA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:37:52 2025 by rpki-client