Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: qny5uF2ffRXUAvuII2O0s4eNPUwMK6SXh4u48gkdhek=
Subject key identifier: 70:C6:DD:D3:C2:CC:30:C8:23:60:2E:DB:44:50:4A:E1:53:DA:BC:B4
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 019F951272117513E48301C5C3169A0DE029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 17:00:41 +0000
Manifest this update: Fri 24 Jul 2026 17:00:41 +0000
Manifest next update: Sat 25 Jul 2026 17:00:41 +0000
Files and hashes: 1: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: InRu3j5Teocri/6udMe6VehXO/w+AqhjeZE3aG+P4a8=)
2: _t0gFIj5BgFonZtzomrZyea3ZPw.roa (hash: HmSLSBv3oCJovrKNS3yrN69BOPD/C8zOtRKW9Yrh7+c=)
3: xdTvkArkvMPtOPYVfJFRKOiOrYI.roa (hash: DMD2+t1XVRg17ZkAFHHjiqUFCxjHGtePe3W1Tj+/DB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:72:11:75:13:e4:83:01:c5:c3:16:9a:0d:e0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Jul 24 17:00:41 2026 GMT
Not After : Jul 25 17:00:41 2026 GMT
Subject: CN=70c6ddd3c2cc30c823602edb44504ae153dabcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:33:bb:c2:ef:87:3a:d9:22:f1:bd:f8:1a:
5b:80:c8:10:67:0c:30:af:c7:e3:76:a4:cb:30:d0:
3f:e3:67:95:f0:90:3c:c1:aa:59:d3:11:5d:85:0c:
5f:30:ff:ec:d5:98:9e:9a:36:64:fd:ae:6d:89:bd:
9c:6d:14:1a:d0:20:43:0d:f1:bd:15:a0:e6:ab:c2:
72:02:0b:c0:f1:d8:ac:79:17:51:9c:df:56:8d:f0:
2c:03:05:3c:7c:12:ee:ec:13:d3:5d:d4:72:fa:06:
5f:17:14:7c:54:e9:15:52:78:6f:00:90:ea:eb:25:
f0:32:51:3b:b2:d8:59:1d:5d:5f:2f:08:26:c8:44:
1a:89:c5:4b:32:05:ab:e3:f1:3a:a0:b9:68:91:a2:
8f:35:70:fe:4b:ef:a3:8c:89:47:46:93:ab:21:e6:
94:a5:3c:6f:cf:7a:b5:fa:88:18:17:b5:44:1f:bc:
77:cd:29:b0:0e:65:3b:b8:7f:cf:2f:da:ff:d9:38:
fe:ff:54:4e:14:d7:de:5e:7f:e4:22:3c:46:fa:9a:
f1:93:ea:82:dd:08:2a:dc:2c:18:89:70:1d:99:a1:
4f:85:ae:b3:ae:59:2d:74:5e:93:34:42:f8:10:3f:
ca:af:c0:76:0c:52:f2:e0:73:5a:ea:33:00:dc:65:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C6:DD:D3:C2:CC:30:C8:23:60:2E:DB:44:50:4A:E1:53:DA:BC:B4
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:52:4f:cd:53:c7:7e:18:ff:95:07:cd:58:55:98:0a:04:0f:
b6:57:89:df:2a:6b:25:d5:4e:70:96:c0:44:dc:df:c1:a6:8d:
e0:0c:5b:1c:27:0c:2c:05:fd:31:a3:6a:e5:e4:c5:a1:ec:5a:
dd:bb:ba:23:9b:a7:68:d7:97:3d:9f:41:27:74:b5:67:f8:2b:
5f:f1:ff:21:57:88:ee:8e:c4:23:f1:15:1f:c6:da:e2:58:ac:
25:46:9c:59:8d:8c:e2:2c:e3:95:38:53:0b:7e:d0:d2:30:50:
fb:dd:33:fb:71:ff:35:bb:ff:9d:45:d0:d8:64:dd:d9:19:f6:
af:96:0c:2f:7c:f0:47:48:f3:9a:f6:fb:ad:cd:5b:b2:c5:72:
6e:16:4d:e0:b7:64:92:7b:ab:f6:14:0c:e6:31:23:a5:1f:df:
fd:9d:8a:e3:33:db:fd:bc:9b:98:6b:9a:49:a8:e1:e7:01:54:
01:b8:12:18:cf:89:a1:9d:60:b3:57:8c:f9:d4:66:84:d0:1d:
78:e8:e0:f4:7b:fb:ef:15:7a:cf:a2:c2:b0:fd:91:77:e1:da:
48:dd:31:83:22:3c:40:68:3a:6e:3a:8d:88:ea:84:af:c0:9a:
eb:d3:56:34:ea:d0:62:5a:68:87:e5:24:42:cb:3a:09:57:e2:
65:ff:bd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:42 2026 by rpki-client