Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: FWQVCmtefLjEWWJxpEeRouFgFERvIdWEfNdru6nxOA0=
Subject key identifier: 19:FE:DF:69:5F:4C:3E:3A:07:3D:39:B9:C9:D8:85:13:42:3D:C0:31
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 019D2AA9855DDD1300928B8B38572DA4C89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 15:00:45 +0000
Manifest this update: Thu 26 Mar 2026 15:00:45 +0000
Manifest next update: Fri 27 Mar 2026 15:00:45 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: md0bd72qQpcAQybvbnstOFU//MuY9J0qmmhZqeHbaeM=)
2: 8NwGeto6KwDcPV-xbJgaTF5hoxI.roa (hash: z42NiQAsunKciHLg6LEfRWeU/t7uDzBK+QA0eF+tv9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:85:5d:dd:13:00:92:8b:8b:38:57:2d:a4:c8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Mar 26 15:00:45 2026 GMT
Not After : Mar 27 15:00:45 2026 GMT
Subject: CN=19fedf695f4c3e3a073d39b9c9d88513423dc031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:21:c1:93:69:6f:bc:0d:e0:1b:d2:23:bc:
6a:77:a6:e8:9b:5b:8e:6c:33:28:94:7c:76:ed:64:
22:f5:f8:65:cc:c7:58:3b:be:36:de:bc:fc:c4:45:
e5:ce:51:1e:92:18:ba:ee:b9:fe:35:f3:c7:f3:c2:
ab:fc:4c:1a:16:77:98:78:ac:35:a8:3a:8a:67:74:
14:08:b1:8a:12:14:9d:2d:b0:be:46:eb:67:92:b1:
59:8e:01:cf:14:59:50:29:9f:b9:29:40:fd:59:3a:
d8:0d:1e:7c:c6:80:ac:b5:85:4c:d4:d0:e9:32:bc:
6a:25:5d:f6:09:ae:b3:0b:f5:d7:75:61:34:e3:eb:
57:ff:73:28:54:81:d3:16:e3:31:0a:da:c1:d3:3f:
90:3a:f3:ba:db:2c:c3:d6:56:f9:ce:b4:87:75:2f:
61:1e:e7:92:06:de:95:0b:cf:b7:16:15:0f:21:c1:
71:05:63:6e:db:0b:9b:69:cf:46:23:f2:55:e7:25:
8d:ed:af:a5:ad:96:94:f1:a4:ef:ed:2d:84:0a:f0:
6d:a6:65:10:af:d5:db:5a:e6:cc:e3:af:88:fa:4e:
51:b1:d1:4f:66:e0:8d:47:3c:4f:ec:4a:e5:fb:68:
5f:70:98:44:43:cb:6b:7d:94:99:7e:b0:fd:d2:37:
38:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:DF:69:5F:4C:3E:3A:07:3D:39:B9:C9:D8:85:13:42:3D:C0:31
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5d:d3:17:2f:b5:a3:12:8d:4f:66:3d:3d:17:ed:22:c5:39:
9d:ec:99:42:74:88:a1:be:de:d6:18:b7:bd:dd:b0:9c:e9:ce:
71:85:98:1d:8b:7e:c9:20:b4:38:9e:cf:5e:1a:4b:31:72:5f:
cd:b0:81:63:f5:35:89:8b:d2:6a:56:5b:d7:6f:e4:b9:66:cc:
01:08:e6:77:b7:3b:96:c8:58:cd:1b:98:7d:95:12:1b:d3:72:
20:45:59:fc:74:4b:f4:84:f3:85:08:dd:c9:27:b6:f2:ff:b5:
70:1b:41:73:b2:94:40:d0:31:9f:43:49:ca:4b:62:75:7e:19:
fa:0a:e4:11:42:74:a1:19:45:8e:17:d8:31:4f:f2:ae:08:cb:
40:df:d4:a3:c3:34:80:d7:52:07:44:26:95:fd:6c:1a:c0:c9:
8f:fd:82:8e:5f:bf:39:f6:80:57:27:10:2c:47:47:07:8e:5d:
89:ad:a2:0f:2c:52:f5:d1:78:e7:a0:0a:ea:3c:95:74:0c:e4:
71:e9:3c:7c:14:58:62:ff:27:f3:40:01:57:c5:e8:01:b8:7e:
db:86:0f:f5:02:e1:60:70:65:4a:dd:63:dc:5d:33:41:28:63:
fc:21:e3:13:24:86:68:8f:c2:39:ca:33:63:9a:84:c3:6c:81:
31:4c:17:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqYVd3RMAkouLOFctpMieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODhkYjE3NjY2ZmE5NTE1YWYzMWRiYTA5NWQwZjI1MGY4
NGJkZjcwHhcNMjYwMzI2MTUwMDQ1WhcNMjYwMzI3MTUwMDQ1WjAzMTEwLwYDVQQD
EygxOWZlZGY2OTVmNGMzZTNhMDczZDM5YjljOWQ4ODUxMzQyM2RjMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsIhwZNpb7wN4BvSI7xqd6bom1uO
bDMolHx27WQi9fhlzMdYO7423rz8xEXlzlEekhi67rn+NfPH88Kr/EwaFneYeKw1
qDqKZ3QUCLGKEhSdLbC+RutnkrFZjgHPFFlQKZ+5KUD9WTrYDR58xoCstYVM1NDp
MrxqJV32Ca6zC/XXdWE04+tX/3MoVIHTFuMxCtrB0z+QOvO62yzD1lb5zrSHdS9h
HueSBt6VC8+3FhUPIcFxBWNu2wubac9GI/JV5yWN7a+lrZaU8aTv7S2ECvBtpmUQ
r9XbWubM46+I+k5RsdFPZuCNRzxP7Erl+2hfcJhEQ8trfZSZfrD90jc4HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBn+32lfTD46Bz05ucnYhRNCPcAxMB8GA1UdIwQY
MBaAFNWI2xdmb6lRWvMdugldDyUPhL33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODIt
MzE4OGU5ZDFmNWEwLzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODItMzE4OGU5ZDFmNWEw
LzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnV3TFy+1
oxKNT2Y9PRftIsU5neyZQnSIob7e1hi3vd2wnOnOcYWYHYt+ySC0OJ7PXhpLMXJf
zbCBY/U1iYvSalZb12/kuWbMAQjmd7c7lshYzRuYfZUSG9NyIEVZ/HRL9ITzhQjd
ySe28v+1cBtBc7KUQNAxn0NJyktidX4Z+grkEUJ0oRlFjhfYMU/yrgjLQN/Uo8M0
gNdSB0Qmlf1sGsDJj/2Cjl+/OfaAVycQLEdHB45dia2iDyxS9dF456AK6jyVdAzk
cek8fBRYYv8n80ABV8XoAbh+24YP9QLhYHBlSt1j3F0zQShj/CHjEySGaI/COcoz
Y5qEw2yBMUwXvA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:26 2026 by rpki-client