Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: HZQM4HtgTX32AR8oEtc5+CYTMO0vyvh7RC/i8MEEs04=
Subject key identifier: 1B:C2:A7:3E:D9:7B:8A:3F:D4:FA:35:E3:F1:24:24:A6:44:93:01:73
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 01A0D538BA656D1EBF9630CC788D58C3D914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 21:00:59 +0000
Manifest this update: Thu 24 Sep 2026 21:00:59 +0000
Manifest next update: Fri 25 Sep 2026 21:00:59 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: gTbpHoflfhLKJQRY78rKORne8NXTAtzI7fe15CLEKq8=)
2: 8NwGeto6KwDcPV-xbJgaTF5hoxI.roa (hash: z42NiQAsunKciHLg6LEfRWeU/t7uDzBK+QA0eF+tv9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:ba:65:6d:1e:bf:96:30:cc:78:8d:58:c3:d9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Sep 24 21:00:59 2026 GMT
Not After : Sep 25 21:00:59 2026 GMT
Subject: CN=1bc2a73ed97b8a3fd4fa35e3f12424a644930173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:34:64:eb:2e:de:0b:bb:f8:35:eb:74:67:
51:04:11:bf:ce:c6:92:a0:a8:19:fd:1c:d8:bf:b2:
f1:d1:5b:01:ed:fe:36:ad:a8:9b:ce:a3:fb:54:a0:
be:27:81:33:5b:95:07:8b:03:4d:f6:ee:ee:7f:54:
43:a4:2b:31:65:cc:5c:a5:b3:8f:ed:4e:ee:16:47:
ef:ff:3e:90:d7:3a:aa:fb:a2:a4:d4:95:dc:c9:72:
d6:d3:53:75:b8:df:12:69:bf:31:a8:2c:81:c6:65:
ad:7c:6a:0e:42:bb:ee:d6:60:7b:3b:10:fb:2f:75:
44:b1:84:7e:10:cb:99:1b:6f:bf:d1:bf:5b:d7:0a:
10:f5:42:d1:7e:99:70:ba:4d:3f:e4:2e:a2:8c:b0:
0b:29:50:81:ad:ab:f5:b8:80:db:49:c8:dc:75:28:
18:b1:d5:97:a4:f8:13:db:a1:85:5a:5f:2e:1a:cb:
be:5f:32:56:db:af:1e:4f:a5:32:2b:a1:41:46:5b:
00:a8:aa:fe:50:b3:46:14:17:42:3e:ca:37:50:ab:
1b:e6:d7:92:c3:bb:dd:00:01:30:d5:fc:67:6f:86:
56:28:00:23:0d:0a:9a:72:7b:ed:36:b1:98:27:c9:
2d:8b:24:82:70:4d:84:d6:6a:70:05:94:a0:7d:01:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:A7:3E:D9:7B:8A:3F:D4:FA:35:E3:F1:24:24:A6:44:93:01:73
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4d:3b:f7:27:44:1b:ae:0e:8c:9b:7a:13:43:e6:2f:3f:79:
ae:70:67:14:f4:87:55:32:a7:57:5a:2d:24:c1:de:9e:53:64:
61:50:3e:8c:8e:34:39:6c:ff:cf:a2:19:2a:81:24:0b:83:0d:
de:ce:54:83:c6:67:8f:45:12:53:8e:f0:60:f8:e9:6c:03:d3:
19:59:7b:1a:01:d1:f3:3d:cc:b9:de:fd:6a:fe:4d:47:a3:4b:
33:d3:02:61:f5:e9:99:99:43:03:a3:cd:40:78:61:1b:fa:9e:
b0:ed:85:bb:b7:d8:ae:e1:5b:37:96:2e:0d:66:78:86:18:70:
9f:e7:b7:a8:8f:16:33:39:c1:fa:87:d9:25:1b:44:3f:c1:38:
e4:d7:a3:a1:e8:ca:80:71:aa:de:02:c2:a4:e4:04:68:9c:70:
dc:ee:a1:65:e6:04:59:c7:34:22:46:40:a4:c0:b8:6e:86:62:
2d:df:4d:ec:46:24:86:8e:df:9e:ce:94:f4:8d:db:f0:33:ec:
af:a2:3b:53:e8:40:b9:9e:00:39:9d:d9:5d:75:9b:cd:cd:eb:
e9:c1:ba:87:0a:98:0f:09:ce:3e:bb:61:38:cf:ca:1b:62:5b:
57:58:cc:7e:88:1d:cc:0f:21:54:80:ed:79:db:cf:e0:dc:d7:
2d:b1:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:52:18 2026 by rpki-client