Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: sXX0wsj14nKju3JUV5SRvAPoEIFPAUIpCrln9meVOuk=
Subject key identifier: 32:E5:80:E9:CD:B6:B3:5F:EC:65:D6:28:EB:1F:A9:08:77:81:E5:0A
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 019D37C0A21398C3503C4800FE637F36B094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:01:04 +0000
Manifest this update: Sun 29 Mar 2026 04:01:04 +0000
Manifest next update: Mon 30 Mar 2026 04:01:04 +0000
Files and hashes: 1: 0lcvkJY4EGS5Mg_RRguRIVx_LFM.roa (hash: 2aLaPpHNjg1TOQAEQNSWmBYlO5P1laIf48JKkUR1mU8=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: EqbbeE9nXbS9xoDvTRrdPRHzaFsz9kWJDDYDDoxRreg=)
3: _t0gFIj5BgFonZtzomrZyea3ZPw.roa (hash: HmSLSBv3oCJovrKNS3yrN69BOPD/C8zOtRKW9Yrh7+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a2:13:98:c3:50:3c:48:00:fe:63:7f:36:b0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Mar 29 04:01:04 2026 GMT
Not After : Mar 30 04:01:04 2026 GMT
Subject: CN=32e580e9cdb6b35fec65d628eb1fa9087781e50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:f1:ed:be:ab:48:90:a6:cb:7c:06:f0:d6:
38:8d:f8:22:0c:f6:00:d1:d0:9e:17:c6:67:f0:78:
36:22:76:0d:14:0f:41:de:d5:c2:78:d1:68:5d:49:
07:b8:6a:49:d7:e9:97:c5:df:cd:ef:78:52:cb:9d:
db:2b:a1:65:3e:2c:34:6a:54:a3:91:bf:e2:21:9d:
4c:ae:df:10:6c:0d:65:6b:4b:78:97:cc:d4:51:5b:
87:6a:00:33:b1:0a:27:dc:98:65:59:d9:7a:5e:b0:
60:23:95:43:50:b7:90:6c:35:cd:fc:99:54:4c:9c:
31:e5:f2:e0:c5:18:61:bc:48:5a:1e:a3:a3:9b:9f:
5c:56:5a:27:2c:fc:5a:0f:4f:4d:f1:cc:9d:7d:05:
b7:56:fe:e0:63:44:36:fc:fb:24:60:f9:d7:36:6b:
03:bb:e1:66:77:c0:14:63:0d:4b:99:82:d3:9a:6d:
f6:a7:20:88:17:2e:c3:aa:c6:d5:eb:3e:92:27:2e:
0e:72:1d:14:74:fd:99:61:ec:5d:1f:a6:6d:64:15:
55:84:41:a9:e4:41:52:05:a7:88:ec:21:21:d1:90:
dc:8c:a4:a5:3e:96:36:a6:dd:2e:0c:ac:c7:de:f4:
16:b5:e0:81:95:3b:71:25:d8:8d:86:ba:df:71:48:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E5:80:E9:CD:B6:B3:5F:EC:65:D6:28:EB:1F:A9:08:77:81:E5:0A
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:aa:83:0a:ec:57:e0:fd:76:f5:17:58:7d:12:63:bd:26:be:
49:a7:5b:69:bf:08:1d:e9:ae:dc:23:94:a2:9d:26:5a:23:e2:
93:47:ae:73:e5:a7:5e:4b:72:ae:9a:1a:8e:5f:00:e4:60:46:
b5:1c:e0:ca:29:cc:0f:31:ee:4e:37:8c:54:dc:e7:ea:8f:61:
91:ee:1b:08:ad:65:1e:c4:ed:de:fb:8d:d6:e8:b6:61:42:51:
2b:7b:4e:00:fd:68:24:02:08:10:c7:ad:69:73:20:49:2e:fa:
68:89:12:0e:de:6a:a2:98:43:c2:34:05:95:e5:78:aa:1f:77:
69:84:35:ad:b6:74:15:b7:7c:ba:96:ef:71:8a:a9:0e:ab:75:
74:2f:cb:40:43:1a:1d:56:72:22:1c:74:4b:ad:dd:36:b8:08:
55:ca:1c:23:02:66:dd:8b:8e:44:1c:9d:46:12:52:6d:3c:62:
9b:7b:0b:d4:17:ae:4f:e3:90:01:4f:40:37:69:cc:95:ba:6e:
03:79:38:62:ec:53:26:17:8e:d5:f6:cf:bf:e8:52:0c:2f:23:
a1:96:95:42:33:15:db:12:76:29:30:56:68:41:6e:78:1e:1b:
97:7a:86:69:c5:6e:08:99:e2:b9:ac:08:82:6e:56:5f:b6:42:
96:4b:b0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:21 2026 by rpki-client