Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: MlNOJ8CNL4KItxTDhl/bq7j3hLWusEAMSgnyNRAXGB8=
Subject key identifier: 16:B1:46:EF:F1:1D:7F:82:95:57:7E:48:76:68:F9:9C:E3:18:06:9E
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 019FA9E26B6248BEE6BF387B30C4C2E95090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 18:00:15 +0000
Manifest this update: Tue 28 Jul 2026 18:00:15 +0000
Manifest next update: Wed 29 Jul 2026 18:00:15 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: 72ODYM7mn877ppnpI8hmlSi5YZMrb3WB9oe7RBg5LZU=)
2: 8NwGeto6KwDcPV-xbJgaTF5hoxI.roa (hash: z42NiQAsunKciHLg6LEfRWeU/t7uDzBK+QA0eF+tv9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:6b:62:48:be:e6:bf:38:7b:30:c4:c2:e9:50:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Jul 28 18:00:15 2026 GMT
Not After : Jul 29 18:00:15 2026 GMT
Subject: CN=16b146eff11d7f8295577e487668f99ce318069e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:e9:4f:c7:d4:0f:bb:63:6f:ad:3d:e5:9e:
74:3e:cb:52:50:e3:42:d4:23:ec:49:66:84:15:74:
e2:e5:47:41:f1:c2:17:72:4e:83:b8:11:e9:b1:38:
97:6f:73:e4:12:ea:5b:e8:91:bb:c0:a0:77:a3:cb:
9b:47:88:03:e4:69:7f:92:55:5d:96:0f:c5:82:fe:
6f:93:5a:f4:1c:6d:7d:4e:05:5c:f7:02:cc:50:6a:
cd:d3:9d:cd:0d:21:07:23:9a:f8:dc:db:19:23:c4:
b6:e6:bd:cb:b2:05:58:8f:b3:62:4a:38:e3:f9:da:
64:f9:66:d2:19:35:80:7e:77:d3:2e:86:81:7b:9e:
7a:f9:14:9d:39:c0:79:98:0f:f1:eb:46:2b:38:70:
d6:3c:c5:36:d2:58:2e:9a:c3:84:c0:f1:a5:ad:d6:
d6:43:0c:11:8d:86:bf:0b:eb:1e:aa:e0:5f:dc:05:
e6:78:db:2a:3a:cb:7e:c6:a5:39:d7:fb:1e:64:0a:
e7:34:ce:4c:6c:14:0e:9e:44:20:8c:90:33:00:61:
12:53:a8:c4:e2:3e:d7:af:e5:1e:70:e2:89:3d:62:
aa:00:e9:10:fa:62:d4:58:9d:f8:fd:e1:27:da:3f:
90:d3:f2:64:b2:43:3b:9e:93:ab:12:bd:ac:bd:a4:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B1:46:EF:F1:1D:7F:82:95:57:7E:48:76:68:F9:9C:E3:18:06:9E
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a7:cc:a4:10:6c:bc:ed:b8:35:24:d8:d5:f6:5e:45:d6:fe:
f3:c7:1c:7f:22:ca:da:77:5f:99:26:3c:fc:d6:0a:bf:a7:a6:
8e:ee:16:14:32:22:f5:46:94:48:03:65:9b:58:6e:2f:5b:9a:
a8:6f:f2:c6:f0:d4:6f:20:99:f3:61:61:97:bb:4f:3a:d7:3f:
88:20:4e:67:14:e3:c9:ca:16:9f:c4:36:6c:65:bb:7e:4d:e1:
f0:eb:ff:c6:cc:b1:7a:01:79:94:4d:b5:86:82:27:44:5f:75:
93:2a:ff:62:20:72:af:20:be:00:44:a5:48:49:54:03:9b:65:
2d:35:c4:5c:2e:3a:51:b0:fd:b4:79:ad:56:aa:9d:4b:7c:80:
35:bb:94:f2:b8:5f:79:c1:72:c1:c4:89:c9:31:a9:cb:ef:17:
fd:11:87:31:bf:6f:1d:c4:63:bb:77:4e:71:d0:b1:4a:b2:33:
34:97:4b:94:6f:be:71:e6:02:47:08:17:17:1e:16:8d:25:a9:
41:31:23:07:3d:40:b9:2c:f0:06:2d:08:0e:5c:da:ef:70:d9:
f4:48:4d:b9:b3:71:ab:7f:ed:c1:f5:e1:da:04:c1:57:d5:22:
ce:87:be:8a:c6:52:b4:bc:22:7b:b8:86:4e:84:51:17:7d:9e:
43:51:f0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:13:05 2026 by rpki-client