Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: R8JQ8EW8OdfD1gBK4N8iPHbXz5AM0OI1u86Zvi8dDp8=
Subject key identifier: 36:30:EB:36:A1:AF:78:1B:4D:CC:9F:CF:AB:1C:32:C6:4F:41:23:D8
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 019CE47EEAA113AA79A35F8D87FE568BBB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 1834
Signing time: Fri 13 Mar 2026 00:00:48 +0000
Manifest this update: Fri 13 Mar 2026 00:00:48 +0000
Manifest next update: Sat 14 Mar 2026 00:00:48 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: Qh/6ZIh/6wQdzWSriTYIB2qpP+crH+geHYuSqxglxuU=)
2: _xye3zL4cDBrsfPa3oaNO5DUWKk.roa (hash: f5gE3FGAqbRKSe0OsknEgvTr1MnW4+hSm41yjpSqF/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:ea:a1:13:aa:79:a3:5f:8d:87:fe:56:8b:bb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Mar 13 00:00:48 2026 GMT
Not After : Mar 14 00:00:48 2026 GMT
Subject: CN=3630eb36a1af781b4dcc9fcfab1c32c64f4123d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:12:6f:04:37:9e:9b:21:d4:e8:fc:d6:bd:
41:5e:be:55:73:03:cd:23:c5:8e:59:d5:e2:09:7c:
c9:f3:ee:c9:df:2f:f2:db:40:30:19:84:7c:50:6c:
35:c1:0c:61:7c:58:68:92:0e:d0:cc:6a:4e:fb:29:
6a:0d:e3:23:8c:a5:45:de:29:6c:ac:3d:f5:1e:27:
c6:3c:29:f5:ff:30:5c:a8:2a:6c:c6:3a:10:11:92:
8b:70:44:63:39:5b:cf:5c:ad:d0:59:73:2a:58:13:
67:7e:17:ef:e2:7a:dc:fc:c5:42:f3:31:6b:48:87:
ae:5f:d6:d6:7d:36:ad:01:55:73:7f:42:e8:e4:80:
b8:86:3e:78:ba:ff:ef:a1:f0:27:af:d3:c8:c3:8d:
1c:49:20:ea:f6:eb:f2:0c:cd:b2:44:c1:76:a3:7a:
0e:4a:1c:0e:f4:7b:0b:2c:f7:bd:68:c3:c8:55:ff:
62:ad:e4:03:7b:e6:3a:d9:f8:aa:04:39:10:7a:d8:
c9:79:92:c0:d2:bd:f2:67:77:9c:64:77:99:d7:c3:
23:40:9e:9f:69:fb:02:0f:11:27:5b:20:e7:06:a9:
ec:ec:2b:bd:f0:7d:10:91:dd:71:8f:57:88:1d:2f:
f6:e0:bb:3f:11:8e:0d:83:d7:4e:a9:99:e2:21:61:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:30:EB:36:A1:AF:78:1B:4D:CC:9F:CF:AB:1C:32:C6:4F:41:23:D8
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:49:7f:ad:66:af:12:48:75:0e:7f:eb:d0:5d:fb:85:aa:b9:
35:c8:11:65:62:f9:94:06:bb:19:91:4a:2d:d5:29:83:7d:7a:
a6:9b:a3:e7:1f:06:95:8f:e1:b0:a2:d4:82:e7:cf:a1:fa:98:
50:72:79:4f:c3:e4:59:a3:64:d0:e1:15:36:72:01:60:d8:b5:
64:5c:0d:75:57:1d:72:af:70:71:00:c7:6a:1c:6d:fd:fe:b9:
0e:ea:cf:6d:19:f3:e1:73:7d:c7:a9:ea:76:b7:f4:85:1b:2f:
4f:d5:7a:b8:c5:c4:c5:77:af:8e:92:6c:7e:6a:f5:94:90:08:
e8:de:93:56:15:10:84:0d:99:7f:01:31:a9:4f:63:0d:a2:d4:
1a:34:67:e9:88:c9:fe:43:69:be:b0:0e:6c:1d:04:f3:9e:e0:
f0:90:8d:75:c3:57:99:2d:c6:aa:c5:c3:ea:d9:9a:d5:0e:48:
b8:d7:5d:bd:1e:84:8e:9f:af:86:8f:85:2a:50:26:0b:3b:b6:
1a:85:78:ba:62:eb:57:00:83:06:df:a2:13:f0:68:08:71:6d:
19:2e:11:18:5c:23:0d:5e:7f:9c:21:2a:ac:8a:66:11:da:00:
c6:3f:5d:8b:64:ec:9c:0c:d8:cd:c5:90:33:25:44:18:fe:b6:
8d:c3:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:33 2026 by rpki-client