Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: Bj7kJeIKC5JjZbSU3/mcT09ippXlY0D42D73FyP7f5U=
Subject key identifier: EB:03:4A:D3:A5:9F:30:EE:C2:65:6B:DA:9A:4A:20:77:94:BC:7D:5F
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 01A1DEA75A4D032B28044289831B8B2CCD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 11E5
Signing time: Sun 15 Nov 2026 10:01:11 +0000
Manifest this update: Sun 15 Nov 2026 10:01:11 +0000
Manifest next update: Mon 16 Nov 2026 10:01:11 +0000
Files and hashes: 1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: V6ir8UPOiF0k7q1VvIRCrCJv00ttQBcpgpxyscJ6GiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:5a:4d:03:2b:28:04:42:89:83:1b:8b:2c:cd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Nov 15 10:01:11 2026 GMT
Not After : Nov 16 10:01:11 2026 GMT
Subject: CN=eb034ad3a59f30eec2656bda9a4a207794bc7d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:d4:f4:aa:6c:2b:8a:06:9d:ec:7c:c0:60:
c0:70:2f:b3:c1:12:d3:ee:d8:74:89:69:67:d4:ff:
00:dc:d2:0f:4a:c3:96:69:b2:af:5b:2d:54:8d:6e:
7b:62:c5:0d:22:b4:fa:70:b4:6d:d8:bc:da:96:03:
8b:ac:f2:39:c1:6f:c9:a0:f5:f9:23:6e:04:9a:9c:
17:e5:57:ae:6b:19:6e:15:cb:a5:33:30:f4:7b:2d:
ce:2a:5e:27:61:51:b5:0b:28:ee:2e:32:7b:76:52:
4a:8a:bc:c3:02:f4:4e:e5:79:a2:d6:d1:0c:25:cb:
69:20:73:46:dc:82:0a:b2:0f:b0:97:9b:d9:17:a7:
40:4b:90:0b:81:0f:61:48:3d:70:06:b5:fe:95:59:
ea:e7:22:1d:8f:79:bb:ed:05:aa:61:aa:20:59:0e:
3e:56:87:fa:35:79:76:93:28:88:20:01:11:66:3a:
b9:a8:d5:de:f0:0b:f1:f4:7b:c5:0d:78:c1:0b:35:
3d:cd:f6:a4:cf:f3:6e:21:05:74:c0:dd:dc:59:37:
c6:9b:91:50:ae:f0:10:eb:fc:19:dc:80:46:10:85:
5e:f4:82:15:66:63:5d:6e:0d:06:79:2d:71:b4:cf:
fe:f1:a9:0b:ab:b2:48:3e:65:cc:50:a9:ff:d9:15:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:03:4A:D3:A5:9F:30:EE:C2:65:6B:DA:9A:4A:20:77:94:BC:7D:5F
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c7:3b:0d:03:48:dd:25:0e:c6:f3:a3:e3:3f:17:22:0c:83:
31:b3:8c:ef:26:0a:53:31:a1:04:a4:15:57:22:2d:a9:69:62:
7c:bc:96:df:86:3b:4e:4e:dc:8b:d9:a9:b7:f0:45:db:4e:b0:
bf:07:3f:82:3e:6d:7d:14:69:3b:1c:7c:c3:97:9a:70:9e:39:
54:99:ae:36:bd:82:a9:0c:4f:ea:06:2f:78:c5:ee:ca:b6:ee:
d9:c1:d5:a8:1f:7d:85:4e:f4:8a:bc:8f:3b:10:20:45:23:f0:
20:3d:54:d9:32:26:69:3a:00:44:dc:15:7c:bb:8d:47:b0:bb:
f9:8f:86:92:40:dd:87:1b:89:29:e3:54:0d:99:dd:58:4c:4d:
b6:d1:24:39:70:ec:c3:33:9b:63:62:be:b8:0e:ae:bd:69:94:
49:0e:b5:62:1f:5a:fe:ad:14:52:d9:7d:6e:69:f5:29:fe:ea:
77:39:bd:f7:1e:06:53:94:aa:0f:76:dc:c5:bf:1b:23:ad:50:
20:41:d2:27:30:4b:e7:07:35:c9:2e:88:d9:0a:1d:cd:9e:ad:
22:08:98:45:f0:32:a2:4c:b9:b5:67:6b:a8:21:39:26:e9:1d:
15:22:81:db:b3:7d:ea:8d:a0:a0:87:83:68:28:52:26:20:d3:
b8:69:a0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:05:33 2026 by rpki-client