Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: lqvM+q/luWAFsOwYYrL5Lw78Eh9ETIpCoMJ9mrJ53CU=
Subject key identifier: 20:E9:D0:49:95:D4:7A:0C:65:24:8A:72:AB:9C:12:07:A6:49:09:54
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 019D382E30A6475C1DA41574598529093790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:00:44 +0000
Manifest this update: Sun 29 Mar 2026 06:00:44 +0000
Manifest next update: Mon 30 Mar 2026 06:00:44 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: rdg2apMVa7vNnEX7XRsGPnwPTf2Yt31cmov991ST5/c=)
2: 8NwGeto6KwDcPV-xbJgaTF5hoxI.roa (hash: z42NiQAsunKciHLg6LEfRWeU/t7uDzBK+QA0eF+tv9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:30:a6:47:5c:1d:a4:15:74:59:85:29:09:37:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Mar 29 06:00:44 2026 GMT
Not After : Mar 30 06:00:44 2026 GMT
Subject: CN=20e9d04995d47a0c65248a72ab9c1207a6490954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:96:b7:9a:af:0f:01:a0:78:a4:48:8b:30:
3f:9d:c0:df:e5:37:37:71:38:10:ed:c6:2f:25:64:
12:61:33:0b:6e:e3:d4:58:5e:72:1f:7a:4f:75:99:
23:39:71:89:2c:d5:d0:37:4c:21:40:eb:7e:92:da:
eb:13:66:b0:e1:38:40:57:eb:44:13:d1:03:e0:4e:
03:d4:e2:b9:2b:85:1f:99:06:6c:8e:ef:89:ad:66:
80:ac:ac:4f:fe:01:d7:87:4e:99:ab:f8:90:d5:de:
6b:0c:5e:c8:67:14:ff:d7:2f:8e:11:9b:65:cf:53:
37:96:19:e3:84:73:80:a0:73:9a:08:6b:66:9c:63:
49:fd:e4:07:82:8b:1f:c4:2f:97:8e:71:48:91:c8:
f6:32:e9:de:e0:5b:a0:d8:a8:82:3b:82:56:47:5c:
30:3d:7d:36:00:f7:c1:83:82:e5:bc:9c:f8:45:30:
76:41:ae:b7:f9:77:d8:2f:55:5c:44:35:ee:3d:30:
ce:e4:f8:dd:f3:9c:d9:60:9b:c1:91:f4:8f:02:29:
ce:27:a8:2a:e9:52:f8:ca:c7:f8:3f:60:93:6e:e8:
5a:f1:8b:37:8b:c4:2d:b8:27:e0:b8:89:5c:71:38:
bd:d8:61:d5:7b:55:99:40:5d:bd:70:f0:fb:da:4e:
cd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E9:D0:49:95:D4:7A:0C:65:24:8A:72:AB:9C:12:07:A6:49:09:54
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:68:3a:d2:55:27:3e:fe:4e:eb:c3:7d:19:5e:a1:6e:90:60:
0b:38:03:78:db:09:bd:90:5e:91:bf:27:cd:8b:4b:8e:32:31:
6e:19:83:43:42:13:99:7d:35:fc:19:10:13:f8:f1:d5:b1:ee:
58:b2:60:c4:c0:f8:8b:4b:ce:ad:4a:56:1f:2d:a8:eb:5b:74:
e4:8e:84:a6:34:f1:1c:f2:37:f0:54:07:16:85:a0:61:ee:f5:
e9:95:7e:71:58:09:6f:19:fc:50:6d:89:45:66:bf:57:ee:3d:
b3:3a:ef:8d:f5:4d:b1:3d:41:f2:5b:fb:f8:34:a6:20:8d:7c:
ec:55:6e:24:65:1e:cb:12:c1:8f:65:10:b9:4c:dd:41:03:ae:
4f:47:47:ca:9d:ef:7a:49:96:51:4d:f4:06:ba:f0:08:42:96:
45:0f:75:2b:d4:2f:56:19:90:01:3b:e9:5d:0c:67:33:2f:b9:
a9:60:3b:88:22:33:f4:2e:c8:1b:8e:d1:5b:c5:61:b1:f0:d2:
c3:cd:f4:a9:19:1c:bf:f9:26:27:a5:61:da:41:44:79:a2:e9:
3e:cc:e1:72:fd:a1:59:27:32:7a:6f:1b:bf:29:d6:32:31:57:
65:f0:a0:09:04:49:cd:06:db:9b:a7:d3:90:75:e6:88:6b:73:
0f:21:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:38 2026 by rpki-client