Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: rYiu5zv3vE/x6M3qGmcCfZzIFa3NpJ6gaKwa0/3tgbI=
Subject key identifier: B4:BD:1D:D1:DB:DE:D0:D8:99:65:95:1D:CA:DC:CC:E2:F9:E8:72:09
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 01A1551C1AA8DEF1729B638FB0EBC35C66F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 1AB4
Signing time: Mon 19 Oct 2026 17:01:07 +0000
Manifest this update: Mon 19 Oct 2026 17:01:07 +0000
Manifest next update: Tue 20 Oct 2026 17:01:07 +0000
Files and hashes: 1: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: vYjMwfDxrzk6ZRUk0KRQpSBhqPgAERfcOdtPA3gUq2o=)
2: _t0gFIj5BgFonZtzomrZyea3ZPw.roa (hash: HmSLSBv3oCJovrKNS3yrN69BOPD/C8zOtRKW9Yrh7+c=)
3: xdTvkArkvMPtOPYVfJFRKOiOrYI.roa (hash: DMD2+t1XVRg17ZkAFHHjiqUFCxjHGtePe3W1Tj+/DB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:1c:1a:a8:de:f1:72:9b:63:8f:b0:eb:c3:5c:66:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Oct 19 17:01:07 2026 GMT
Not After : Oct 20 17:01:07 2026 GMT
Subject: CN=b4bd1dd1dbded0d89965951dcadccce2f9e87209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:79:69:c3:fa:e9:13:20:fa:21:0c:4b:12:
ab:e1:bf:ed:e2:f3:11:10:e8:2b:ca:22:fe:f4:e1:
cf:a9:6b:d5:5c:23:52:dd:57:c8:ff:fb:43:ef:51:
f1:e3:91:a2:ee:64:e3:78:be:fc:6c:8b:20:40:b4:
8f:e3:49:c0:15:e4:c7:dc:30:7b:68:04:42:fa:d9:
ba:9e:76:d4:33:3a:1e:c7:4e:54:b3:d5:99:d8:ed:
46:b3:46:09:28:fe:01:05:58:c8:cf:7d:7e:89:7a:
66:7f:0f:06:f2:1f:96:13:59:09:8d:ad:30:93:fd:
1a:97:2b:1a:53:a9:54:c6:5f:d8:62:d0:3a:d5:ca:
a3:b4:5b:ea:b7:16:8c:37:b3:59:fd:c5:d5:c0:f9:
0d:c0:db:df:25:eb:c0:f2:c2:25:3d:62:7b:a8:ff:
2b:c0:1a:9e:30:9c:9e:4a:eb:dd:40:3f:bb:e3:ac:
9c:6b:63:b9:3d:be:bb:8e:27:ab:89:98:b0:37:02:
e1:bb:1a:5b:64:7f:18:7d:39:56:7c:fe:c8:7e:94:
d0:28:cd:8e:ed:9d:b0:41:bc:ae:55:ae:04:86:6a:
3a:53:9f:33:47:fd:ab:83:20:0f:6e:80:c2:60:1b:
ee:dc:49:17:ac:9f:40:fb:62:80:4c:c8:99:19:ec:
20:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BD:1D:D1:DB:DE:D0:D8:99:65:95:1D:CA:DC:CC:E2:F9:E8:72:09
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7c:d8:ef:3f:c8:3e:42:1d:df:30:79:ab:d2:61:b1:05:98:
25:cb:85:69:c0:43:eb:8b:cf:c7:d3:d5:c0:05:6a:5d:dd:eb:
e3:f0:7d:ea:d7:4a:be:2d:a3:63:72:8d:2d:f4:c7:b4:51:03:
39:e4:29:ec:2d:3c:67:07:3b:fc:b9:0b:9b:5e:25:73:5f:b7:
bb:82:d3:d8:76:5c:4c:95:fc:c5:94:90:2e:47:6a:b9:79:97:
24:3c:ee:71:b2:7a:3d:bc:7d:bd:a8:2e:a3:4b:fc:33:0c:65:
3c:a0:7a:13:9a:36:97:79:ab:f0:44:41:f5:77:93:86:a5:0c:
63:02:26:3c:84:74:54:74:2a:29:cb:b1:39:64:4a:fb:1b:bc:
db:e7:5c:5a:83:7d:f6:dc:22:49:15:52:2d:58:c9:3a:06:ec:
5e:ed:48:75:d0:d1:f7:63:b6:17:6d:4c:43:2c:19:f8:b2:25:
19:7c:4d:be:ac:e9:fb:06:6b:ac:aa:2d:44:a6:2a:37:c9:91:
48:79:8b:ff:d3:5b:7e:df:46:7a:ae:82:02:4b:25:08:5a:b2:
3b:76:7f:c5:f6:a1:13:4d:0c:33:bc:e4:76:05:82:39:f3:5d:
30:08:0f:ad:27:a8:bc:35:f8:81:5b:72:d5:64:8a:e8:56:36:
b4:2d:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:50:59 2026 by rpki-client