Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: eoh1ngFbjOHDMR1fi49xHLPdHrjeRNEnfuMg6Re9X3I=
Subject key identifier: D9:45:43:EC:12:B5:7B:06:AD:F5:39:46:ED:E0:18:58:E4:71:D6:3D
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 01A0C7B353EAD0905D8BB3275F128895AFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 06:00:13 +0000
Manifest this update: Tue 22 Sep 2026 06:00:13 +0000
Manifest next update: Wed 23 Sep 2026 06:00:13 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: p8JPGlnkCxLwjkazgtZqResUPqqicLPAhZMOiQjSXTA=)
2: 8NwGeto6KwDcPV-xbJgaTF5hoxI.roa (hash: z42NiQAsunKciHLg6LEfRWeU/t7uDzBK+QA0eF+tv9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:53:ea:d0:90:5d:8b:b3:27:5f:12:88:95:af:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Sep 22 06:00:13 2026 GMT
Not After : Sep 23 06:00:13 2026 GMT
Subject: CN=d94543ec12b57b06adf53946ede01858e471d63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:90:5b:f1:a4:22:1c:c5:d7:17:8c:ac:18:
10:cf:1e:dc:19:d2:cf:f5:f9:c8:e3:c4:35:7f:6e:
5c:1b:a0:b5:cb:6f:f8:73:6a:e4:a2:1c:90:d8:4b:
d3:ff:f5:c5:3d:a6:a1:bc:d1:dd:23:5b:42:c0:23:
3f:73:75:33:d5:4b:90:95:11:3d:75:39:17:1d:15:
bc:2a:60:87:54:a7:41:25:ff:b2:e9:f7:84:c1:d0:
62:7e:30:be:a8:d2:8f:21:a3:51:11:38:f7:4d:66:
0c:c1:26:b9:6f:a4:08:26:1d:b7:4a:64:a1:b1:48:
4b:6b:fb:2d:99:ea:be:12:02:e3:5c:1e:d4:d1:bf:
2f:59:06:56:07:9f:7e:45:f9:23:88:b7:d4:85:ff:
85:ba:00:b2:1d:32:84:f9:93:47:70:d2:2c:fb:7e:
cb:99:35:73:a7:3b:8a:55:5d:11:55:ef:39:ad:80:
df:9c:40:04:d4:d1:a0:e2:2b:c0:48:5d:a7:54:d7:
98:37:79:dc:cf:8d:01:4c:1d:cd:fa:34:c2:ef:3d:
90:e3:50:ef:d1:27:87:84:9e:7b:77:45:1e:1f:ec:
6e:f4:99:00:26:ea:6e:bf:34:93:e7:57:33:a7:62:
a0:e3:57:9a:24:2c:38:94:9b:55:76:e1:29:7b:eb:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:45:43:EC:12:B5:7B:06:AD:F5:39:46:ED:E0:18:58:E4:71:D6:3D
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:42:4d:8c:ee:08:71:1f:6e:c8:bd:d1:d8:a4:8c:95:fa:4e:
de:83:b0:74:eb:d7:37:0f:a8:fd:0f:1f:4d:4b:8d:05:81:4e:
94:72:3c:75:53:d9:37:d2:b4:2a:bd:60:31:50:4d:4b:d1:0a:
5b:1d:4c:48:14:f4:d8:64:6c:cd:da:b5:bc:b0:29:d9:bb:33:
54:b8:be:78:ce:45:53:d5:97:b1:67:62:4d:63:bb:ad:af:50:
df:67:cc:34:9b:05:f0:48:4e:10:7c:ba:f5:9f:13:2e:ce:0c:
ae:c9:1d:d3:2e:31:23:a5:c8:7b:fb:ad:cb:37:45:ef:1e:bc:
79:7f:a5:fe:7b:2c:5b:cd:1e:df:48:3c:cb:f9:c0:d8:d6:5a:
ec:95:51:33:88:eb:e8:0e:77:09:2f:2c:58:65:fd:89:b5:cc:
b3:06:47:71:6a:98:4e:44:06:82:a9:b4:f1:4a:31:53:35:85:
32:48:c6:42:a4:cd:40:07:4d:6e:e5:28:8e:aa:d4:f2:40:0c:
1c:22:fa:b8:2f:bf:0d:00:d9:12:7b:1f:0f:8d:37:0e:88:95:
f0:d5:74:8f:75:d1:ab:22:a8:d7:6c:4c:13:ae:8b:8f:7c:da:
f8:28:5f:89:8b:86:1e:0a:3f:a6:db:d8:ba:fa:f9:90:1d:08:
02:91:c4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:48:00 2026 by rpki-client