Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
File: YepnO-KLST26RBhw-1Dlmg0cF8U.mft (raw, json)
Hash identifier: NjoX4BNeiEQ5aqSmD6X3VBhFrlBXXg4/6hzReHgKcD0=
Subject key identifier: 14:85:7A:9B:E6:E4:68:39:95:17:9B:DB:EB:47:51:9C:9E:99:26:1A
Authority key identifier: 61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
Certificate issuer: /CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Certificate serial: 019D270443E6FB69FA449F91D14C96DD987F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:24 +0000
Manifest this update: Wed 25 Mar 2026 22:01:24 +0000
Manifest next update: Thu 26 Mar 2026 22:01:24 +0000
Files and hashes: 1: YepnO-KLST26RBhw-1Dlmg0cF8U.crl (hash: CN36ZV5UnPT8gnuj+jgnUqzx6a9yQxlD0rcawtf5DRI=)
2: gIm5Ttt-kadA-HHnl7K2QS3zq4w.roa (hash: k0VLghPFfRvkCor9JH91D2V2IGF1FkPmkcYrg5K87ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:43:e6:fb:69:fa:44:9f:91:d1:4c:96:dd:98:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Validity
Not Before: Mar 25 22:01:24 2026 GMT
Not After : Mar 26 22:01:24 2026 GMT
Subject: CN=14857a9be6e4683995179bdbeb47519c9e99261a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:ea:03:83:7f:09:5e:87:9c:36:64:cd:3e:
9d:82:9f:bb:f6:c6:8b:05:d2:85:aa:79:54:82:11:
37:e6:60:db:f2:37:8e:84:c9:a1:12:55:bf:9b:c1:
f0:17:dc:1b:77:c0:e2:a7:45:4a:74:c4:11:f4:c1:
45:ab:dd:b0:26:b7:80:a7:cd:e1:d5:67:e1:09:0b:
ab:ec:13:e0:5f:4f:72:dc:3f:69:d5:82:92:16:6d:
4b:19:0a:d0:bb:ce:67:e7:a0:ee:d8:a7:dc:ab:6c:
ce:5b:fa:dd:6c:a7:9b:2b:f0:b2:38:91:ea:25:92:
5c:4d:93:e6:04:d6:e1:a9:f5:ab:2f:33:23:8d:d4:
62:1d:5b:dc:5c:29:a7:9c:ab:6f:69:e7:1f:c0:12:
a2:92:d2:2d:47:c2:af:81:50:be:b4:ba:4e:a9:db:
68:12:ea:aa:42:17:09:12:99:eb:fc:0e:b8:91:8e:
60:1a:ff:31:38:87:62:6e:35:7b:18:42:a5:a9:4a:
0e:8c:3a:d8:0e:4a:81:d5:d7:a2:e5:69:68:86:b2:
a8:c0:a2:5e:f1:cd:8b:35:28:7f:ce:b6:56:11:cd:
4e:45:9d:d2:97:95:d5:b9:71:c7:b5:13:fc:1b:48:
92:21:46:d4:1a:39:d8:ef:7f:02:ae:9d:9e:1a:e8:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:85:7A:9B:E6:E4:68:39:95:17:9B:DB:EB:47:51:9C:9E:99:26:1A
X509v3 Authority Key Identifier:
keyid:61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a6:b6:90:96:ca:0f:c7:24:60:b7:10:08:a8:da:f1:34:cb:
19:91:70:63:7b:03:76:aa:70:63:fb:3f:b9:29:0e:21:80:26:
8a:7b:85:6f:f9:b5:26:ec:73:e1:ad:0b:7d:45:a6:4f:dc:44:
4a:5a:06:bb:8c:14:69:e1:9c:2a:1a:b6:33:e2:ff:3e:53:a0:
f4:92:9c:0f:bd:e8:a2:50:1d:15:9d:d4:76:e5:10:f6:ae:1c:
2b:cb:6d:52:e8:93:e4:88:f5:7e:eb:2d:d6:d5:1a:80:be:f2:
fb:92:36:29:db:d3:a3:82:cd:37:98:0d:92:84:11:85:1d:4a:
cf:de:ab:61:ad:32:1e:40:03:91:b0:a3:dc:13:69:eb:77:4a:
02:89:43:26:56:bc:3a:1b:38:2d:25:98:11:2e:aa:d8:7d:34:
c4:76:1b:9f:33:05:e8:67:0b:30:7a:1f:8c:4a:ab:da:8a:5b:
23:03:9b:bb:fa:16:fc:85:47:2c:bc:7f:d9:ea:28:e2:9f:59:
ad:c7:02:2e:a7:88:33:a0:59:7f:85:db:14:1f:69:07:33:3b:
21:f1:c4:df:75:3c:af:77:9c:f9:21:98:b8:16:43:2a:aa:ed:
00:c9:f7:a0:0f:5e:af:41:c2:09:d8:c9:53:7a:af:1c:e4:75:
ec:69:6c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:45 2026 by rpki-client