Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: r89B5ZC/3G7tGAUPAk7LypsPTBL7/GwmDy0/y8msW48=
Subject key identifier: C3:75:1E:B0:67:40:7C:F9:1A:06:11:45:DE:2C:F1:D9:64:F0:54:2B
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019F939205CB9704DF67EB1D5BAFD34DBF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 10B5
Signing time: Fri 24 Jul 2026 10:00:48 +0000
Manifest this update: Fri 24 Jul 2026 10:00:48 +0000
Manifest next update: Sat 25 Jul 2026 10:00:48 +0000
Files and hashes: 1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: U/xV9TwCdwSWO67ujOVDDA/L5hmb4Tm+ISqW0JO2JKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:05:cb:97:04:df:67:eb:1d:5b:af:d3:4d:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Jul 24 10:00:48 2026 GMT
Not After : Jul 25 10:00:48 2026 GMT
Subject: CN=c3751eb067407cf91a061145de2cf1d964f0542b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:42:33:86:45:af:68:08:17:06:1b:0f:da:
01:51:df:7e:5c:30:18:c1:d7:1b:b3:db:85:c2:74:
cc:a7:87:2b:a7:63:e0:12:21:27:eb:31:f9:ea:f8:
24:ae:f5:cc:a8:08:60:dc:56:13:0b:05:7c:fe:cf:
ee:c0:8c:04:a7:71:15:d9:f2:f2:44:f1:0f:f3:49:
d8:24:66:59:9e:5b:a7:dc:ac:ba:1a:db:0c:dd:83:
96:45:10:69:00:51:27:a5:c8:61:8f:ef:82:f3:70:
b0:c9:55:af:32:08:0f:34:6b:eb:52:36:eb:6e:84:
a9:c1:5e:88:0c:a4:db:f2:c0:e2:0b:8d:74:8d:34:
76:81:08:a6:b0:ba:2e:de:87:89:94:15:e0:73:6d:
58:04:54:38:13:56:35:1b:9f:29:c8:39:66:1a:5a:
8e:d0:5f:f2:aa:de:fc:12:39:6e:71:14:4f:77:de:
7f:1d:6d:02:7e:f8:bd:eb:d1:64:4e:35:74:55:9f:
61:b1:9d:21:59:54:71:4c:7f:6b:7a:4e:c7:b3:76:
24:a9:eb:e6:5d:da:9d:bb:a2:85:e0:ca:e4:ed:28:
af:94:a0:6d:f7:33:09:8b:cb:41:0e:34:8b:2c:22:
64:c0:86:d7:9f:8d:ba:f1:6e:18:94:40:70:9f:d1:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:75:1E:B0:67:40:7C:F9:1A:06:11:45:DE:2C:F1:D9:64:F0:54:2B
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:dc:5c:a5:a4:90:41:3e:d6:26:63:6d:02:cc:fc:86:76:65:
7a:a6:7a:80:61:d2:e6:c6:54:7f:46:04:1f:61:2f:95:0e:a4:
03:12:7a:3b:0d:87:47:1a:12:65:6a:06:b3:19:a7:fa:9e:78:
64:9e:28:dc:55:ee:87:af:4e:47:5e:85:c1:bc:07:30:52:df:
99:f6:02:37:34:34:43:d0:37:40:74:7f:8a:d9:cd:19:d8:1f:
e9:9d:c1:c2:a1:26:08:aa:af:e7:e6:9c:97:01:0e:f2:ba:0e:
4e:44:00:31:58:f9:84:69:67:1d:65:05:cc:37:a3:36:a5:cd:
46:2e:af:82:d7:1a:20:ef:b4:1d:a5:c0:16:1a:d6:c1:09:62:
ed:3f:e3:07:d0:c9:ba:73:26:f0:28:0a:27:9d:82:e4:df:d8:
b7:f1:8b:9e:35:63:a3:72:c3:66:4c:4c:3e:94:f6:3e:80:d3:
8b:ca:6a:69:0a:28:86:25:69:c1:83:f7:4f:c4:9f:fb:e4:2c:
0d:b7:1f:3b:7c:e7:25:ab:58:d5:74:1a:50:0e:46:d9:65:f5:
31:0f:af:5f:74:87:ee:25:7e:b7:0c:aa:26:e0:bb:00:f1:a7:
8b:72:7c:aa:40:34:c0:fe:57:3e:98:68:55:0d:ec:56:8b:a5:
75:cf:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:23 2026 by rpki-client