Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: RB+M8w8B8qmBAtvSQ+9bN+ONt2QnAUeg2pN4RihYzR0=
Subject key identifier: 87:25:3D:19:E4:BE:5A:C5:86:4A:C1:B7:D4:A7:20:DD:BB:68:31:A8
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 01A0CE5AAC63E580AB21DAEF5EE6D69655B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 1158
Signing time: Wed 23 Sep 2026 13:00:43 +0000
Manifest this update: Wed 23 Sep 2026 13:00:43 +0000
Manifest next update: Thu 24 Sep 2026 13:00:43 +0000
Files and hashes: 1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: pbzcu8SQxV6xoaZ0iPUXm/GXtL73RFxZkXujrDC+JEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:ac:63:e5:80:ab:21:da:ef:5e:e6:d6:96:55:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Sep 23 13:00:43 2026 GMT
Not After : Sep 24 13:00:43 2026 GMT
Subject: CN=87253d19e4be5ac5864ac1b7d4a720ddbb6831a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:67:ba:e5:a3:37:99:0d:d2:9a:8a:f6:51:
c5:c6:87:ef:79:ed:59:ed:81:21:e9:5d:44:1f:72:
82:c0:6a:45:c7:c5:8a:60:6c:d3:52:c4:4b:21:55:
4b:38:65:d0:39:e5:c2:19:90:84:99:9e:8f:d5:9d:
6e:11:a3:da:f0:af:b7:30:06:9a:7a:65:a3:9d:f6:
31:c3:6b:3e:e6:ff:87:5e:8c:f3:00:bc:81:75:a2:
00:4f:bc:8c:47:cb:a9:75:24:a7:88:fa:56:3c:9d:
b9:dd:ba:38:26:37:8d:ea:cd:38:93:a2:92:9e:c0:
57:b9:5d:1e:c6:32:c8:08:74:00:c9:cb:99:bd:dc:
14:4f:18:fd:a2:ee:29:d5:58:67:b5:5d:8a:ff:a7:
45:a3:e8:ae:ba:c6:b4:40:08:ba:12:ab:ea:9b:01:
b6:ae:61:ca:d1:5a:ea:0b:7a:df:b4:83:c0:e6:8b:
17:39:d0:bb:59:b8:30:fc:da:b1:46:a4:78:17:bc:
02:92:ee:99:22:11:60:f9:a1:f3:31:22:8f:71:bf:
75:ce:f8:38:8c:7f:25:b7:bf:68:d7:98:f8:4a:1f:
a7:be:51:cc:18:06:1e:c2:62:22:18:6e:4a:48:d9:
8c:92:ee:87:e3:e3:05:1c:06:e5:97:43:87:ba:04:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:25:3D:19:E4:BE:5A:C5:86:4A:C1:B7:D4:A7:20:DD:BB:68:31:A8
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cc:4d:b8:36:9f:b1:60:52:a6:58:b5:ca:44:04:80:41:3a:
51:48:e9:c4:7f:4a:57:3e:ba:fa:8f:0d:e4:d3:2d:cb:41:9c:
18:26:5e:a9:b0:00:ba:89:97:03:9c:3e:58:ce:df:f7:97:af:
01:f7:f1:8c:c1:c3:bb:e8:e6:ee:bf:e4:90:d3:19:f4:f1:c2:
b0:60:28:73:31:f6:5e:43:73:13:59:d5:ba:8a:73:aa:9d:d9:
07:8a:dc:a4:1c:eb:5b:ab:5c:20:6b:2f:e9:68:2b:53:ac:26:
c3:ea:71:11:eb:46:3b:eb:22:66:2c:1f:51:10:4a:0d:21:ec:
d1:95:78:e1:b9:04:79:b8:40:a2:40:0c:6e:8b:11:de:97:fd:
5a:f4:61:0b:6d:5f:ba:4b:7d:82:f0:b5:d7:99:89:39:3b:97:
af:af:8a:53:2e:2c:12:ce:ec:90:6d:13:9d:73:f1:a3:50:c2:
59:f5:fb:2a:2e:67:90:35:a6:08:e0:59:2e:a7:c2:03:c1:e4:
eb:5a:bd:37:53:6a:fb:5c:9a:a7:49:5c:ef:fc:da:3a:e5:c0:
83:c9:8d:1a:86:07:2e:d7:3d:2c:e1:fc:e7:2a:77:de:76:70:
74:c6:d9:c2:50:b3:25:22:17:09:6d:99:55:45:39:59:28:12:
11:7f:84:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:36:12 2026 by rpki-client