Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: VYiH40QY06dWr0Je5dKOC56s7n2nKgSxyenNh1ZhraA=
Subject key identifier: BC:90:A6:D2:F5:29:E4:DD:EF:B2:D1:16:F1:BD:50:7D:DE:62:94:9A
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 019CAB342D71BAAAED7CEBF1520F1493C314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 21:00:49 +0000
Manifest this update: Sun 01 Mar 2026 21:00:49 +0000
Manifest next update: Mon 02 Mar 2026 21:00:49 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: p/B13qbsB/zrIAlP6N8rAvuyJUZHAzgT5fFAz4A0m1Q=)
2: 8NwGeto6KwDcPV-xbJgaTF5hoxI.roa (hash: z42NiQAsunKciHLg6LEfRWeU/t7uDzBK+QA0eF+tv9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2d:71:ba:aa:ed:7c:eb:f1:52:0f:14:93:c3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Mar 1 21:00:49 2026 GMT
Not After : Mar 2 21:00:49 2026 GMT
Subject: CN=bc90a6d2f529e4ddefb2d116f1bd507dde62949a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:60:de:0d:1c:46:c2:51:b5:91:52:45:37:
f6:0c:ee:38:73:58:53:c2:7a:cb:a0:ed:3f:33:f4:
78:0f:29:56:f7:ff:c4:48:31:a7:88:1c:28:0f:6c:
44:93:3c:fc:e6:14:f7:71:28:b6:d7:20:d9:58:9b:
13:e9:8c:a0:25:5d:f1:9e:54:25:3d:93:e0:26:fa:
dc:e9:8e:58:2c:03:a3:77:91:d2:5e:6c:0b:8f:68:
18:e1:65:76:1d:0e:e2:86:f4:30:9b:99:5d:fa:da:
bc:30:a7:05:f1:e9:15:23:78:5f:23:36:8f:75:a4:
a3:1f:83:03:a0:a0:45:3f:8e:50:2f:f8:5a:30:46:
b8:83:0e:18:86:ae:79:51:78:4c:7b:f9:d8:0f:e1:
f6:6a:95:81:bd:0a:fe:6a:d6:2b:1a:4e:42:13:b1:
59:af:3a:c3:6a:2f:4f:65:fa:90:fb:a9:d0:c2:84:
a2:59:cd:39:44:f3:b3:33:e2:8b:c7:ce:b1:33:2b:
69:5b:46:fa:92:8f:84:79:1a:8a:c5:95:d4:66:eb:
a6:de:43:76:6f:69:92:6b:ac:10:a1:03:bb:5b:53:
21:2c:e5:2a:fe:2c:13:0e:f5:00:d2:b7:fc:58:fb:
52:cc:bc:94:5f:1b:e9:4c:14:f1:36:20:59:d7:35:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:90:A6:D2:F5:29:E4:DD:EF:B2:D1:16:F1:BD:50:7D:DE:62:94:9A
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:38:7d:a2:dc:8a:72:70:94:85:cf:c9:c9:10:9f:7f:85:e5:
05:8f:17:4d:50:35:af:9b:0c:32:6e:ad:88:27:99:72:8a:29:
7e:c8:5c:6e:71:43:a9:c9:df:19:cb:76:b7:e1:c3:70:b2:a0:
42:4d:18:33:62:be:2f:67:ea:94:62:34:7a:ce:07:b9:26:8b:
16:f7:23:d9:49:fb:06:04:50:5b:79:e8:4a:b9:bf:fa:11:4b:
60:66:d4:aa:f5:a3:b7:bf:90:18:69:60:23:b2:55:13:60:3e:
02:68:1e:4d:6e:21:9e:a9:aa:0c:a3:a8:21:e6:3f:9e:71:55:
23:e8:b7:f0:45:66:4d:06:56:60:60:81:f1:47:38:28:dd:89:
29:06:a1:18:01:c4:0e:f0:3e:4c:c0:00:31:cc:84:01:b9:a2:
45:44:07:6c:21:1d:41:1b:85:be:19:66:38:68:12:d3:d3:cd:
c1:c5:f4:23:0b:48:d3:ac:c6:e3:47:cf:5f:13:97:0e:76:0f:
cc:44:ca:e4:39:ca:9a:55:42:2a:3d:e0:a6:8d:a7:9d:2f:2e:
9e:44:d3:95:1c:6a:b5:17:3c:69:1a:d5:32:d7:71:9f:2c:35:
ee:d0:b3:95:21:09:d8:0e:ec:98:cf:bb:31:a9:cf:d9:16:2b:
ac:ae:e1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:21 2026 by rpki-client