Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: ym1ZcLcsf6+BCnlesZHuAp87u1EaEUxn9GNOsJqVzr0=
Subject key identifier: 89:DB:E0:97:5D:31:E0:12:04:70:38:3E:11:1B:91:C4:E4:F3:DF:60
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 019D284D6491DFFDB9510F8A27A39E4DD5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 04:00:53 +0000
Manifest this update: Thu 26 Mar 2026 04:00:53 +0000
Manifest next update: Fri 27 Mar 2026 04:00:53 +0000
Files and hashes: 1: 0lcvkJY4EGS5Mg_RRguRIVx_LFM.roa (hash: 2aLaPpHNjg1TOQAEQNSWmBYlO5P1laIf48JKkUR1mU8=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: c4EkI40fVWkwClYIzJG1M7OMC2wNz6Zq2Nk0J/xhAC0=)
3: _t0gFIj5BgFonZtzomrZyea3ZPw.roa (hash: HmSLSBv3oCJovrKNS3yrN69BOPD/C8zOtRKW9Yrh7+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:64:91:df:fd:b9:51:0f:8a:27:a3:9e:4d:d5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Mar 26 04:00:53 2026 GMT
Not After : Mar 27 04:00:53 2026 GMT
Subject: CN=89dbe0975d31e0120470383e111b91c4e4f3df60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:da:c0:c0:b7:43:ac:3b:68:a7:d9:f5:c3:
5c:b6:85:39:f6:1f:19:bb:8a:26:1a:b7:02:74:ef:
f5:b5:4f:d3:5e:10:9a:38:71:6d:93:e8:3f:bf:69:
01:80:ec:08:cf:16:44:21:6c:bd:02:51:3e:a4:36:
8b:29:c1:4c:b4:0b:d2:f0:fa:3b:67:a5:45:42:c0:
de:cc:72:1e:92:bc:de:89:e3:bd:e5:dd:ae:b3:3e:
0b:e1:4e:c3:f0:9d:05:f5:7e:2e:cb:9a:ba:be:3f:
7b:e4:f7:00:11:94:98:9f:60:f5:c3:96:87:f8:03:
cb:bf:1f:0a:ab:33:74:1c:72:03:de:51:57:74:e4:
4a:bc:58:89:e3:23:28:93:d7:35:ed:87:62:3e:94:
9e:99:88:0d:d2:23:2a:db:e9:d7:c1:29:9d:a1:28:
5a:86:ba:c9:8f:0f:85:51:6c:5b:08:d8:d1:ea:be:
a0:a4:5a:a8:0b:e3:8c:ac:45:00:2f:8b:ce:0e:4a:
ef:f8:67:04:60:40:32:90:f2:b0:43:5a:36:29:66:
8b:be:31:c2:27:d5:9a:14:82:ea:f5:5a:ac:c2:9a:
5e:f8:90:df:45:8f:a7:e6:0f:5d:c5:73:9b:80:d7:
0d:90:53:56:bc:ab:a1:3f:39:9d:ba:e7:09:f8:bb:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DB:E0:97:5D:31:E0:12:04:70:38:3E:11:1B:91:C4:E4:F3:DF:60
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:22:54:02:f3:ca:64:07:0f:95:18:f6:97:ea:ae:73:d7:74:
9c:fb:d5:7a:fc:2c:47:58:e6:e8:b1:52:e1:a5:4c:7f:e9:17:
3d:69:34:da:ca:fe:92:69:da:89:5e:ed:73:dd:d8:cc:32:a5:
14:a3:7e:b3:09:26:b6:53:8e:57:28:21:98:23:f0:39:0e:03:
e1:a9:5c:83:7c:a6:7f:71:74:5d:b6:5c:b7:c0:3b:c6:a4:30:
59:41:e0:4f:1d:9d:e7:1d:79:9b:ca:d0:5a:23:55:d8:fa:d8:
0c:60:c9:2d:fd:e5:45:c4:9a:52:94:e8:ea:b1:04:59:de:29:
5e:d1:40:5f:23:2d:bd:2a:ed:28:bf:3c:84:63:90:a5:b2:2f:
6d:63:44:6d:f5:d9:f1:06:b5:da:71:7a:15:a7:47:6c:60:c1:
ab:0c:6a:9c:8b:e5:94:1b:9c:63:89:cf:5e:2d:dc:7a:a4:37:
fa:72:a9:49:5b:f9:f2:67:2e:85:d6:8e:df:df:91:3c:2d:ab:
fe:dc:b3:d6:43:ea:58:bb:fa:ad:a6:b7:9e:4a:87:e5:56:08:
d9:1d:3a:a0:55:05:b8:44:4e:19:cc:be:2f:45:2c:c0:fd:ee:
07:05:d4:3c:77:4d:27:ab:a7:a1:93:90:00:52:18:d9:fd:a5:
5b:d3:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:24 2026 by rpki-client