Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: 70FsNN3GFAYS1DMHgIJCZANGyFzGyb074z0YDr9i6o0=
Subject key identifier: 2A:41:52:7A:CF:A5:D5:71:F8:35:96:FB:51:B2:52:A1:EA:AD:31:A9
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 019F90C812B63A2EEEEB179BF35AB67E1FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 21:00:58 +0000
Manifest this update: Thu 23 Jul 2026 21:00:58 +0000
Manifest next update: Fri 24 Jul 2026 21:00:58 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: maFVJLKk7dbOWNX5Y30UIcjK6tHNAa/C2jARMyjfU1Q=)
2: 8NwGeto6KwDcPV-xbJgaTF5hoxI.roa (hash: z42NiQAsunKciHLg6LEfRWeU/t7uDzBK+QA0eF+tv9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:12:b6:3a:2e:ee:eb:17:9b:f3:5a:b6:7e:1f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Jul 23 21:00:58 2026 GMT
Not After : Jul 24 21:00:58 2026 GMT
Subject: CN=2a41527acfa5d571f83596fb51b252a1eaad31a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:41:0f:dc:74:65:2c:1a:1b:b8:e5:94:4c:
9a:38:7e:c6:0e:a5:0e:55:b0:7a:53:9c:27:5f:43:
6d:65:36:fa:3b:8d:ee:50:78:6e:71:6e:d8:66:c5:
79:44:d7:8f:3d:3c:a4:67:11:d5:95:c2:64:51:e6:
42:52:c3:b3:e0:4f:c1:75:79:cb:df:7a:21:5b:f4:
e4:f0:44:7c:5c:ea:43:9c:9e:af:ec:ad:4f:9a:14:
60:a5:30:3b:6c:e4:6b:70:e7:c9:99:4b:f1:67:8f:
65:c9:03:d6:e7:39:ff:25:c8:cc:60:e6:2f:a0:47:
f4:04:45:1b:b4:43:70:df:23:dc:a3:af:24:91:cd:
af:d8:2d:7e:dc:9f:c7:e4:72:18:a9:d6:a7:a5:ff:
47:71:f9:e9:e8:57:ce:fe:f3:76:cd:4b:62:a2:a7:
05:ce:4b:3d:01:8b:8c:32:c8:26:02:2d:54:f0:3e:
d1:88:3b:57:4a:8c:76:19:50:58:fe:b4:91:b4:d5:
e1:89:ca:b9:5f:93:cd:4d:ab:ef:2d:9f:9a:6e:33:
08:5c:9c:7a:53:8b:d8:18:6d:57:f8:5c:57:00:92:
27:96:a8:cc:8a:7e:49:38:22:42:d9:66:b8:b1:33:
a3:37:e7:54:46:99:75:4f:e1:c5:6f:40:08:fa:eb:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:41:52:7A:CF:A5:D5:71:F8:35:96:FB:51:B2:52:A1:EA:AD:31:A9
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c3:ff:ca:c7:18:ce:ce:77:b7:cc:a6:05:87:c8:e7:1c:1f:
7f:82:bc:fb:d1:79:29:88:b1:b7:82:ac:94:b0:20:5c:15:70:
bb:81:fd:24:f0:71:16:1d:36:e1:7a:ae:bd:ab:79:3d:5f:b5:
8b:1c:64:f0:0c:ea:32:97:f3:6f:f2:0f:6b:13:14:51:19:64:
85:a9:ae:e3:ea:24:14:9a:53:79:47:8e:05:7e:92:ed:27:75:
50:06:66:31:e3:7d:d9:be:99:41:9f:89:d3:de:f5:ec:b6:80:
6f:60:f6:0f:b9:25:cb:a3:e7:0c:7b:92:08:8b:4a:88:c8:87:
24:c1:2e:7e:87:42:22:84:2a:02:ae:72:e3:e3:f0:e2:b2:1b:
5c:81:10:e1:0b:98:57:9a:15:ec:9b:0f:df:be:e1:5a:66:c2:
1b:72:66:ed:ad:3b:3d:8c:c6:f2:8b:c9:8d:88:3d:4d:ab:38:
ed:ef:6b:aa:b3:76:2a:5b:8d:b9:c2:26:75:0f:92:10:46:66:
87:f8:61:a1:f9:83:f7:8e:ff:d4:5a:fb:c3:e9:3e:99:fa:e2:
af:8c:46:1a:81:fa:f8:6f:5b:46:45:3c:31:84:d5:09:ce:01:
c2:cf:9f:d0:72:18:da:94:92:de:8c:78:96:18:3b:7d:d7:d5:
61:c1:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:41:13 2026 by rpki-client