Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: VHQ/gz/BSSgol3RfLWIglf6nKD9Ofij5kQuj7JL+HXQ=
Subject key identifier: E3:C7:11:F3:5D:2A:EE:F6:D8:BB:F0:10:F6:7C:A5:2A:A6:51:26:E5
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 019D9A3DE6D1DC2628D55F0BC179E95B9A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 07:00:41 +0000
Manifest this update: Fri 17 Apr 2026 07:00:41 +0000
Manifest next update: Sat 18 Apr 2026 07:00:41 +0000
Files and hashes: 1: 0lcvkJY4EGS5Mg_RRguRIVx_LFM.roa (hash: 2aLaPpHNjg1TOQAEQNSWmBYlO5P1laIf48JKkUR1mU8=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: 06mMNe5rA08OHbujg8bEJwrupEh7im77ta7J0fH3brs=)
3: _t0gFIj5BgFonZtzomrZyea3ZPw.roa (hash: HmSLSBv3oCJovrKNS3yrN69BOPD/C8zOtRKW9Yrh7+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e6:d1:dc:26:28:d5:5f:0b:c1:79:e9:5b:9a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Apr 17 07:00:41 2026 GMT
Not After : Apr 18 07:00:41 2026 GMT
Subject: CN=e3c711f35d2aeef6d8bbf010f67ca52aa65126e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:88:14:ed:65:d5:87:26:5f:19:73:80:22:
78:5c:bd:02:44:42:8d:f5:22:e8:8d:ba:a3:ce:64:
49:3e:cb:a0:e8:00:7b:60:ba:e1:b2:75:4e:dc:00:
97:6c:44:46:b5:01:6e:e6:72:9c:8c:1b:f2:e3:92:
32:f3:73:9d:10:e9:bf:95:40:07:f8:85:5c:d9:06:
b2:ff:4e:72:3e:7e:80:53:a8:0d:24:bc:af:f6:a6:
ba:3a:e7:9b:cd:cb:72:d8:4e:2b:e1:70:32:f0:74:
8c:a5:ab:e5:d1:72:a4:fa:53:08:b1:13:8f:37:5b:
06:21:de:ad:e8:81:ef:02:d9:54:7d:97:08:54:35:
d9:62:c4:b5:38:91:fc:6c:bf:bf:bd:56:a1:f1:20:
c4:12:f7:f4:8b:5d:5d:cb:09:ef:66:89:4c:61:6b:
42:b3:54:ee:23:51:93:80:39:64:8a:0d:3e:e2:ac:
e6:00:ac:49:2f:04:2f:a4:df:87:d2:2e:51:fd:0b:
2f:92:9b:f1:09:e2:96:c0:b5:31:32:ec:b4:34:a4:
55:8d:66:78:62:81:40:ea:e4:5b:5c:e9:96:f0:f0:
6b:d8:c1:ec:52:41:00:09:51:52:8c:d1:05:3d:4d:
65:67:df:05:b9:98:36:b0:85:bc:13:aa:5f:5e:64:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C7:11:F3:5D:2A:EE:F6:D8:BB:F0:10:F6:7C:A5:2A:A6:51:26:E5
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c6:5c:5d:02:d8:6c:11:69:de:0d:2d:da:cb:fd:b9:02:bf:
a9:01:88:0f:8e:69:bb:cb:47:4d:0a:12:fd:4c:e7:f1:55:01:
0e:48:b4:79:75:d9:9e:cc:74:d8:f8:21:c6:00:8e:32:9a:1b:
36:0b:3c:47:df:d9:ed:79:3e:c2:90:17:59:8d:95:43:b0:e0:
62:55:80:29:47:52:a0:58:96:43:66:f1:3e:86:4c:79:d3:4c:
4c:f2:f3:f5:fa:64:7a:36:90:f6:35:95:d2:ed:f7:3c:5e:05:
40:0e:b7:99:85:2d:50:59:3a:47:54:21:3d:1b:cb:82:92:fe:
1a:b8:13:f1:4a:29:48:70:d0:2e:32:3b:6c:5b:8a:16:a3:7c:
97:a1:07:bd:ce:65:fd:56:e9:60:35:e9:c3:ac:65:fd:f1:03:
9e:1d:77:01:31:f3:75:a5:f5:1a:96:d0:a9:85:08:22:5b:2d:
e5:ca:96:47:e4:ce:57:f8:2a:de:ad:a7:f8:d4:ff:97:3d:42:
b9:a0:fb:f1:50:76:ee:41:de:41:57:e5:26:03:e1:c8:85:b9:
2a:2f:45:06:2e:07:5a:b6:24:b1:e5:8c:d5:3e:e0:83:2c:c8:
6f:f3:16:46:84:f8:4f:2c:30:7f:5a:23:cf:3e:58:60:09:99:
40:4e:c1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:02 2026 by rpki-client