Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: VY6pOKtViZdUlJUEnAEUGGeT1gFhCrujied2lPUKHfI=
Subject key identifier: 64:ED:08:5D:64:F6:DE:85:7C:12:D5:82:CB:10:3B:D9:7A:4F:3D:CC
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 019E1D902A630EAE709A0EA9EF401F98D7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 19:00:47 +0000
Manifest this update: Tue 12 May 2026 19:00:47 +0000
Manifest next update: Wed 13 May 2026 19:00:47 +0000
Files and hashes: 1: 0lcvkJY4EGS5Mg_RRguRIVx_LFM.roa (hash: 2aLaPpHNjg1TOQAEQNSWmBYlO5P1laIf48JKkUR1mU8=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: y97ly4vMqJKkdPBKL+IWFOj9KyGyVPjGFIC6wBLQNK8=)
3: _t0gFIj5BgFonZtzomrZyea3ZPw.roa (hash: HmSLSBv3oCJovrKNS3yrN69BOPD/C8zOtRKW9Yrh7+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:2a:63:0e:ae:70:9a:0e:a9:ef:40:1f:98:d7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: May 12 19:00:47 2026 GMT
Not After : May 13 19:00:47 2026 GMT
Subject: CN=64ed085d64f6de857c12d582cb103bd97a4f3dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:8b:64:25:d8:d7:4e:9e:2c:c2:ec:2c:25:
24:f0:c3:37:e9:5a:17:8f:48:d0:bb:37:60:5d:29:
04:8c:c1:d7:de:0b:ea:6c:6b:32:b3:76:b1:20:90:
83:20:4e:dc:ac:86:2a:c1:8e:61:45:5d:97:f2:dc:
6f:1a:6e:3d:79:47:67:bb:54:b8:db:93:0c:95:de:
c9:ef:67:a9:33:80:d6:59:7b:f7:6a:c1:2f:1e:e0:
a4:9c:c1:b3:7f:30:f7:00:ef:d5:b2:74:3e:55:56:
cf:e5:82:75:8d:9d:ab:ba:7c:01:40:8d:c2:3f:56:
6d:41:99:fd:39:5d:db:46:0f:db:96:33:fc:30:d6:
d1:ad:b9:63:9a:2d:10:fc:cf:b3:10:5e:cf:d3:30:
83:4c:68:2f:67:62:99:d5:a2:fc:bd:e5:4a:2d:ec:
5e:f5:dc:f4:ff:80:f9:ba:35:90:2b:74:52:4a:3d:
45:49:1c:af:62:21:14:1f:09:40:7c:f2:e5:88:23:
30:be:88:13:54:a6:54:ea:c7:6f:72:9e:ef:ef:f8:
7d:09:de:68:b7:41:ab:86:c7:10:68:c6:d4:8a:a2:
e0:5d:36:b9:f1:e1:4c:07:85:18:ca:96:d2:9e:3d:
f0:e1:2d:cc:81:af:b5:53:ed:77:87:6b:31:43:25:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:ED:08:5D:64:F6:DE:85:7C:12:D5:82:CB:10:3B:D9:7A:4F:3D:CC
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:52:d5:86:da:4e:e1:67:5e:20:eb:f1:39:c0:0f:30:07:95:
2c:2a:ab:6d:d1:82:aa:78:4c:d0:b3:ba:06:f1:c3:79:e7:37:
d4:41:73:4e:88:c6:00:fe:2b:46:0a:f8:bd:03:7f:1e:a7:42:
0c:f1:a6:8c:6b:4b:a7:0f:8b:2f:83:31:f4:a0:77:9a:09:43:
77:3e:9d:59:d1:96:60:e2:0d:a3:77:23:5b:4d:e6:f9:9f:d8:
fa:78:66:b3:33:1e:37:3f:d9:d6:9c:29:ae:ae:c9:3c:a3:78:
82:47:96:e8:8e:25:12:19:c3:7a:9e:15:a7:c2:3d:41:d4:21:
43:b3:14:4a:17:3a:17:88:e6:02:d3:2c:3e:a6:c3:74:f1:e9:
f5:75:c5:e5:ed:b6:e6:ad:46:21:4f:16:f1:c3:a4:9a:8b:72:
7b:d9:b5:45:d5:94:eb:36:c1:4e:be:34:a2:e0:47:80:1a:a3:
59:af:6c:8f:48:02:8e:6f:02:1b:d1:0e:d4:2f:a5:18:37:b3:
e2:92:c3:e8:16:0e:a8:45:cc:e0:19:b0:aa:77:32:cc:ab:4a:
12:3e:a8:86:0f:6e:fa:cb:0f:aa:54:02:f1:55:62:c2:53:54:
f1:55:d7:3f:70:c8:e5:e9:87:85:d1:90:b1:47:27:f0:a0:42:
a1:0b:02:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:08 2026 by rpki-client