Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: Hcmnawu4m9bfU3TuRNREla0JGANZDOi7COSW1nE6PRo=
Subject key identifier: 3B:D5:0E:D1:FB:3F:D3:9F:D4:55:A3:EC:51:A9:58:48:43:6B:53:F3
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 01A13D8182C425060F6BDA50FCB1796C4042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 03:01:00 +0000
Manifest this update: Thu 15 Oct 2026 03:01:00 +0000
Manifest next update: Fri 16 Oct 2026 03:01:00 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: vve9LsN+brZ+7IXle10iJNrWU3cwu7TpRz8LS2WK3w8=)
2: 8NwGeto6KwDcPV-xbJgaTF5hoxI.roa (hash: z42NiQAsunKciHLg6LEfRWeU/t7uDzBK+QA0eF+tv9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:82:c4:25:06:0f:6b:da:50:fc:b1:79:6c:40:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Oct 15 03:01:00 2026 GMT
Not After : Oct 16 03:01:00 2026 GMT
Subject: CN=3bd50ed1fb3fd39fd455a3ec51a95848436b53f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:89:14:f3:e3:dc:2d:60:63:57:ab:75:85:
f5:d7:15:1d:13:04:c5:ac:4a:fd:27:ae:5b:4c:1b:
9c:d9:c4:4d:a8:e0:d9:b2:89:20:7e:e1:9a:f6:6e:
d5:46:e8:61:01:d2:e9:9d:ec:c4:28:4b:f0:3e:a4:
18:e1:00:70:83:3a:d5:c3:aa:b5:37:49:58:48:31:
36:30:7f:d4:39:df:29:61:80:74:bb:f4:8d:be:f9:
46:87:88:ad:f1:6f:1c:e8:0f:50:49:2e:09:57:49:
58:87:13:94:f0:76:c6:86:ee:4b:8c:60:14:65:ca:
20:1d:7a:83:53:13:b6:07:0d:58:8e:1d:4c:90:06:
bc:72:60:3f:0e:a2:df:b3:c1:37:46:44:00:e0:ef:
8e:23:73:74:0c:e2:7c:49:85:0d:1e:c3:67:88:ce:
d3:e4:cc:4b:7f:b7:06:5a:13:84:cc:9c:df:57:20:
1e:cf:59:ce:b6:f9:dc:f0:0e:33:22:28:c4:c1:fe:
16:e6:f2:ef:dc:8d:9e:7f:a9:81:04:45:d0:50:78:
73:19:30:9e:3f:0b:8a:8f:35:2f:eb:87:7e:2d:c4:
98:b7:2a:fa:91:65:bb:10:0e:39:c6:38:88:d7:54:
80:6f:05:7b:01:7a:d7:9e:b6:83:cc:31:e9:90:08:
f3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D5:0E:D1:FB:3F:D3:9F:D4:55:A3:EC:51:A9:58:48:43:6B:53:F3
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ee:45:63:fd:32:b0:36:bf:63:4a:47:c1:77:13:26:9a:60:
14:56:90:29:08:ba:b4:53:70:2b:04:d9:54:0d:d3:26:27:11:
aa:6d:f8:87:68:e3:73:7e:2a:b2:55:92:b8:cb:c4:37:4d:3c:
bb:9a:42:36:e8:46:74:6b:05:22:41:fc:34:5d:33:8c:f5:f3:
8b:4c:12:54:4e:e9:a8:f2:01:3a:aa:e3:8f:34:e7:02:a5:dd:
3f:32:8d:d1:7b:71:5f:7d:34:39:af:d1:a5:73:81:0a:0b:1a:
d2:2e:1c:c8:ea:6e:92:a7:d5:e2:cd:c6:b9:74:54:62:bc:b0:
ce:70:c1:cf:0c:a4:bc:36:ef:f7:12:13:38:dc:4d:ab:0a:e3:
18:00:b7:8f:47:2d:f6:88:b5:04:2e:55:14:42:b5:be:46:73:
10:fd:29:9f:93:88:82:fa:86:59:a2:c9:c0:44:34:1e:24:c9:
7c:10:34:b3:db:68:4a:20:36:00:11:b0:3b:f0:aa:05:b4:0a:
63:e1:52:5c:2b:90:81:3c:9e:cf:3e:2d:97:12:02:37:ca:6a:
a4:26:0e:39:30:8d:66:a1:72:9c:3c:62:22:8b:80:35:75:15:
f1:cc:e5:99:f6:42:c6:2e:f8:77:31:83:d6:9d:99:03:84:04:
a8:c7:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:17:55 2026 by rpki-client