Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: dwHgqS6BarnXvHsFncjxXxjBsxggbNjjvgVgV3+7Eqs=
Subject key identifier: 3D:E2:CB:1F:D9:AB:00:DC:BD:74:72:03:E6:E4:10:4A:E3:57:72:0F
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 019FAC3F247A7088710B7C03CB651C3C4172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 05:00:46 +0000
Manifest this update: Wed 29 Jul 2026 05:00:46 +0000
Manifest next update: Thu 30 Jul 2026 05:00:46 +0000
Files and hashes: 1: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: XKX5SohxtjJ9FWXewxfmBQlmQWFvFn6GZVj/BFyIb4Q=)
2: _t0gFIj5BgFonZtzomrZyea3ZPw.roa (hash: HmSLSBv3oCJovrKNS3yrN69BOPD/C8zOtRKW9Yrh7+c=)
3: xdTvkArkvMPtOPYVfJFRKOiOrYI.roa (hash: DMD2+t1XVRg17ZkAFHHjiqUFCxjHGtePe3W1Tj+/DB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:24:7a:70:88:71:0b:7c:03:cb:65:1c:3c:41:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Jul 29 05:00:46 2026 GMT
Not After : Jul 30 05:00:46 2026 GMT
Subject: CN=3de2cb1fd9ab00dcbd747203e6e4104ae357720f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:d4:f3:6e:1f:cf:8f:4f:2e:82:77:71:7f:
32:e1:ea:82:bc:10:e9:d6:da:d6:01:d6:7b:2d:60:
86:22:dd:35:f6:82:98:54:a9:65:7d:74:05:4b:41:
af:b1:e8:d8:24:d4:44:12:39:5f:ae:d0:eb:29:15:
1b:12:ce:24:a3:41:d8:9c:28:2f:48:cd:91:e9:fd:
7d:3a:30:89:f7:58:22:1f:34:5f:1f:76:58:8d:fd:
56:c8:85:fe:98:74:03:7b:15:10:0e:85:a9:0b:4c:
51:d0:cb:ed:5b:dd:2d:20:78:88:4b:db:67:11:5f:
3e:51:34:82:af:fa:a5:99:f0:a9:5c:c0:e7:ab:2d:
ee:8b:00:75:59:70:b6:c5:a8:4d:a0:0c:f6:16:ee:
e0:7e:3d:94:b7:e9:56:7f:60:f4:6c:f2:69:b9:09:
90:c6:8a:04:d2:2f:b3:dd:32:66:cd:60:8b:51:c9:
36:0c:d7:94:50:98:07:f9:30:11:d2:39:d6:03:f3:
8d:0f:e1:39:07:5a:30:4f:0a:cd:d2:33:d5:d6:d9:
5c:e5:2b:16:16:c6:df:07:06:92:4c:04:db:ea:ba:
d9:69:88:82:b5:51:44:e6:b4:3d:fa:6c:c6:28:5a:
a6:cf:3d:83:ae:38:85:19:30:52:61:d3:91:87:a5:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:CB:1F:D9:AB:00:DC:BD:74:72:03:E6:E4:10:4A:E3:57:72:0F
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:10:ec:3e:12:69:bd:04:12:14:81:a2:15:cb:00:4a:df:8f:
3f:2b:8b:3a:05:6f:4e:ef:28:94:27:a9:be:99:a4:6f:e1:1e:
63:b7:c9:51:13:c7:4d:5a:a0:d5:c8:e7:03:c9:82:bf:66:be:
08:96:3b:1e:d8:89:5c:00:43:4b:4c:2a:ee:24:b9:1a:59:39:
e5:30:8d:84:34:f5:92:cb:6b:ff:85:0c:b1:fc:44:e2:64:2c:
59:39:1a:21:1b:13:2f:e2:78:bc:79:c9:62:06:54:7c:75:e5:
13:73:99:64:c2:fa:2e:13:48:4e:ab:68:4a:a9:00:63:fb:55:
44:ef:5c:e3:6a:6f:63:1f:7e:ef:3b:56:db:ba:51:34:0d:b2:
10:c7:81:80:cd:ef:0c:92:52:30:1f:e5:a9:26:0b:0e:d5:d5:
6e:52:4b:22:f1:be:d3:ca:91:aa:6e:11:f3:97:ee:85:13:a5:
6c:45:d8:1c:c6:d6:78:6b:3e:46:89:45:1f:dc:dd:e6:52:df:
53:03:da:62:73:48:a1:09:8f:83:28:15:98:f8:2b:f1:7d:e6:
1c:18:40:f8:fc:bb:e8:8c:97:2f:10:54:fa:8e:96:43:b7:24:
e5:fe:9a:95:11:b4:1c:f9:01:e2:8c:93:1d:4b:b3:b0:06:44:
c1:cb:e8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:39:19 2026 by rpki-client