Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: syKQxrKMvFNMHl2pc8sjxfKh/fXn1ipY/evqUa9Mrz0=
Subject key identifier: 92:18:BD:45:D5:6D:CE:5F:33:FC:88:CA:A3:4B:5E:C4:E1:27:20:7B
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 01A10023184A3FC015F5C129D934E00A5C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 1A88
Signing time: Sat 03 Oct 2026 05:01:02 +0000
Manifest this update: Sat 03 Oct 2026 05:01:02 +0000
Manifest next update: Sun 04 Oct 2026 05:01:02 +0000
Files and hashes: 1: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: Icy6vpvbCwkvvZXQkw+/4Id51nk7BXsxCEhmvAe+otk=)
2: _t0gFIj5BgFonZtzomrZyea3ZPw.roa (hash: HmSLSBv3oCJovrKNS3yrN69BOPD/C8zOtRKW9Yrh7+c=)
3: xdTvkArkvMPtOPYVfJFRKOiOrYI.roa (hash: DMD2+t1XVRg17ZkAFHHjiqUFCxjHGtePe3W1Tj+/DB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:23:18:4a:3f:c0:15:f5:c1:29:d9:34:e0:0a:5c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Oct 3 05:01:02 2026 GMT
Not After : Oct 4 05:01:02 2026 GMT
Subject: CN=9218bd45d56dce5f33fc88caa34b5ec4e127207b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:a5:f4:4e:d6:0c:7f:48:30:c4:64:ac:da:
66:b1:37:ba:dd:64:3b:2a:9a:b9:62:99:eb:6e:a9:
9e:1d:e3:e1:c3:e2:73:6d:4a:ad:b0:f3:7d:13:0d:
6a:aa:a5:5c:d8:f0:4c:62:8c:f2:d4:bf:55:a4:93:
3b:b2:74:a4:05:6c:ef:1c:40:55:44:2b:07:e5:eb:
2f:15:0c:d3:7b:5f:72:7e:90:40:46:cd:6a:fb:ae:
e7:ae:95:a0:0e:c5:bb:2d:39:7d:e0:c8:2c:c1:d4:
fa:da:a8:05:39:c8:64:85:fe:b6:0b:8a:33:c0:f3:
8d:2b:89:23:d7:b8:f4:79:ac:e5:0c:12:09:0f:dd:
da:65:99:7e:d9:41:14:fa:e5:a0:7a:ec:23:8f:60:
f6:65:d3:fd:7d:17:b7:cc:28:b7:71:ec:b4:a2:cf:
cb:d2:90:73:b2:ef:d1:7c:3a:73:1d:9f:fc:3d:d6:
41:9a:a6:54:25:00:96:99:a9:b5:00:59:45:59:c7:
b3:cc:e7:e0:cb:ad:a3:0a:79:c7:ff:9d:38:99:34:
9b:46:85:33:ba:36:3c:f0:fd:97:8b:0c:9c:ad:5b:
7e:78:bc:21:f6:74:cf:c2:4b:de:d1:01:14:f6:62:
0c:33:04:bb:fa:aa:a8:35:6f:46:50:5a:33:b4:ed:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:18:BD:45:D5:6D:CE:5F:33:FC:88:CA:A3:4B:5E:C4:E1:27:20:7B
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8d:b5:4d:d5:4d:4d:9f:bb:69:09:99:4b:e0:25:53:96:68:
92:dd:96:7c:fd:1f:f1:31:5d:0d:b7:1d:d9:13:db:e9:c7:87:
9a:47:6a:4f:87:66:10:71:ca:84:5d:5e:6e:a6:c8:ad:a3:aa:
04:31:22:d3:e6:41:b9:1e:e0:18:e2:dd:ad:44:1f:c1:8f:79:
b5:3d:cd:ba:30:02:66:14:c4:d1:48:30:dc:72:37:a2:ce:75:
86:af:4d:f0:ed:75:1b:a9:9b:ee:fb:1b:54:3f:74:c3:36:2b:
ee:90:c5:72:65:d7:07:c6:0a:42:f6:f0:df:72:0b:9a:bf:c1:
27:1e:07:f9:e9:c0:0e:74:44:c3:82:bb:3a:1d:4c:a9:e1:ba:
90:5e:b3:85:4b:a5:e1:a1:bd:87:68:72:de:4a:87:00:db:3e:
2e:5a:c1:e6:8a:8c:7c:b5:34:fb:c1:3a:c3:76:9d:8a:28:ac:
5a:8e:12:07:39:cb:fa:eb:2c:52:a4:28:31:27:c8:ff:c0:fa:
3b:80:85:74:d6:d3:60:0d:ff:94:e4:e8:6e:cd:4a:63:ea:42:
8e:61:e6:51:b7:14:36:7e:76:9e:c2:be:1b:f9:16:f4:77:71:
7d:12:d9:69:90:cb:48:ef:94:54:d5:9c:03:cd:27:48:75:69:
39:f5:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:09:26 2026 by rpki-client