Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: X91ryMI/DUQx91WHa/bFzc4XrSqOAxJynEJ8IoSKJqI=
Subject key identifier: 73:71:9A:C4:3A:92:C2:E7:91:C2:45:34:CA:1E:98:29:37:22:A4:9D
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 019D9AABE1747B25CA2B87DA7CBDC565CDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 09:00:48 +0000
Manifest this update: Fri 17 Apr 2026 09:00:48 +0000
Manifest next update: Sat 18 Apr 2026 09:00:48 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: mQYCsD84mbicwT6+V84kd1e1vzsLYqrAyrvVDwH4rzI=)
2: 8NwGeto6KwDcPV-xbJgaTF5hoxI.roa (hash: z42NiQAsunKciHLg6LEfRWeU/t7uDzBK+QA0eF+tv9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e1:74:7b:25:ca:2b:87:da:7c:bd:c5:65:cd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Apr 17 09:00:48 2026 GMT
Not After : Apr 18 09:00:48 2026 GMT
Subject: CN=73719ac43a92c2e791c24534ca1e98293722a49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:ce:32:52:da:e1:3d:d7:d8:ba:b2:b3:01:
70:06:18:81:d8:d0:8c:24:38:01:f3:68:42:38:59:
ec:1a:b6:9c:15:3a:02:9d:38:97:3c:c2:ab:fa:19:
27:6f:a7:49:cc:b5:ad:72:b9:e3:a7:43:8e:8b:15:
0e:c9:04:31:9d:8d:d2:19:11:14:f1:aa:e2:d3:6d:
03:16:ce:ad:22:0e:44:5b:8d:9f:36:e5:96:f9:9a:
89:a9:8e:bb:ba:60:44:49:e6:c1:3e:07:9d:84:2c:
97:74:90:c3:96:be:46:68:26:87:b0:55:ee:0b:2e:
6b:ae:44:f2:b2:09:fb:05:dd:bc:83:09:64:be:cb:
84:14:e7:4b:c7:ee:87:df:34:b7:8f:2a:7e:6f:8b:
a2:98:34:02:b6:7e:94:1f:cd:59:79:85:83:cc:80:
1e:c3:d8:7a:5b:b0:c3:9f:d3:67:c8:0e:30:99:00:
31:14:e2:4a:30:ba:18:ec:1e:77:0b:8f:cb:a0:e2:
85:62:f3:59:8a:99:af:21:82:0c:05:f1:a8:92:75:
b3:56:dd:8f:24:9e:24:bb:54:68:b6:f8:b8:2f:8a:
1c:b7:82:db:c8:2e:64:85:fb:08:cb:6e:5e:60:12:
54:bc:37:6f:77:c7:24:4c:43:1f:31:47:61:72:b1:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:71:9A:C4:3A:92:C2:E7:91:C2:45:34:CA:1E:98:29:37:22:A4:9D
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:af:7d:17:df:be:c7:1d:ae:e1:44:6a:a1:2b:37:19:54:46:
fb:98:77:e7:9f:c9:7e:8e:0e:10:7c:5a:bc:e4:d3:48:d6:83:
79:71:09:03:db:13:85:2c:8a:37:e7:4d:91:48:09:ae:ec:36:
35:84:aa:ac:1c:52:09:ad:fb:86:15:41:41:34:17:c2:f7:08:
d4:af:7a:44:42:84:7b:4b:cf:1b:55:2c:7c:12:14:e2:ed:43:
0f:f7:9b:07:76:dd:9e:80:1a:a7:2a:7b:52:96:5d:04:20:12:
72:1b:1d:70:e9:b3:b9:03:12:b8:5e:f3:b7:7a:b4:92:ea:8f:
94:3a:96:de:cb:7c:b6:ac:03:95:f5:29:21:9c:3c:e8:86:ed:
5c:fe:fc:b9:69:a0:e0:d6:c4:9c:a5:0f:f9:c0:0e:28:c3:e6:
d3:0d:54:7d:09:82:49:c0:d9:72:9e:4b:7f:04:49:f8:d3:17:
7d:fa:cd:60:b3:7e:47:e5:ce:39:be:d7:3f:7a:d3:8f:e3:fc:
eb:38:4f:95:e1:bb:11:f5:3d:94:51:11:95:5c:d3:1c:05:74:
47:5a:c1:c6:ff:42:c7:ca:2b:e7:dc:34:0d:82:ea:7a:7f:7a:
4d:a4:ea:d1:48:6a:48:32:0d:ce:1b:36:7b:01:17:1d:9a:66:
31:f6:db:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:46 2026 by rpki-client