Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: UQ9ZE9QxzC+Nv9yPjUHzbN7dOmPQXBix6aV5tF1aB9g=
Subject key identifier: 6E:CE:59:9D:57:23:CE:8F:B6:A3:27:4E:F3:E2:B0:40:3E:37:B6:73
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019F91A402FBFC2215F9CE8DD51DF8B834C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 10B4
Signing time: Fri 24 Jul 2026 01:01:12 +0000
Manifest this update: Fri 24 Jul 2026 01:01:12 +0000
Manifest next update: Sat 25 Jul 2026 01:01:12 +0000
Files and hashes: 1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: JKlz6gKSGLBYgoRdQyMY9tponC/FIgc8JlGpvoEX11g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:02:fb:fc:22:15:f9:ce:8d:d5:1d:f8:b8:34:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Jul 24 01:01:12 2026 GMT
Not After : Jul 25 01:01:12 2026 GMT
Subject: CN=6ece599d5723ce8fb6a3274ef3e2b0403e37b673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:fb:0e:71:6a:52:a8:8a:1f:29:27:f0:1f:
fe:a9:d1:68:e8:87:9b:a8:e6:f6:3d:78:0f:1d:88:
ab:4e:56:68:07:fe:4b:d4:f6:7d:e6:19:b1:30:88:
c3:75:d4:48:35:c9:4e:80:33:b4:16:85:b8:5d:95:
4f:31:77:3c:6f:2d:1a:2d:83:aa:3c:f3:9c:8f:1b:
96:35:2d:48:f6:7f:8b:8b:b1:af:9d:9a:30:3e:2d:
03:0c:d6:96:29:d5:88:b6:0b:66:63:fd:29:4e:c6:
da:2a:8a:92:44:01:c7:63:0a:43:8d:54:30:83:44:
1d:bb:8d:e2:c9:61:5d:19:33:da:41:cd:82:c2:19:
c3:60:b3:02:90:0c:66:de:ee:a9:14:c6:33:12:ae:
21:62:b0:15:98:fd:dd:c4:82:d9:61:0a:98:68:5a:
fd:9d:34:33:b1:a6:c6:5f:aa:4d:c6:fe:04:df:4a:
43:24:69:90:fe:a9:6f:38:8d:c8:c9:6e:39:4f:08:
4f:06:0a:52:f2:1d:2f:8d:0f:be:a1:4e:c9:75:14:
d6:a7:35:41:6d:4d:3e:08:93:64:c9:b5:40:38:b4:
b8:76:b7:19:1d:ad:7e:ab:2f:48:96:c7:3f:55:f2:
94:29:84:df:56:6c:ee:25:72:47:ee:4f:05:da:ef:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CE:59:9D:57:23:CE:8F:B6:A3:27:4E:F3:E2:B0:40:3E:37:B6:73
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f4:0c:6d:ee:8c:d8:a6:c6:ae:28:a3:37:7c:bf:ae:a4:1e:
cb:0d:00:93:98:ca:92:62:4b:20:e4:03:4a:76:ab:ec:18:60:
6c:49:9d:f0:21:ac:39:b2:ea:92:97:c3:ab:6c:57:14:70:69:
53:b2:6f:01:42:9d:27:f0:1e:2a:eb:95:31:61:4b:07:f0:8e:
2e:20:3c:ed:5c:23:37:f3:cf:88:af:dd:cd:1f:d5:24:ca:1d:
e3:af:41:43:01:22:11:9c:c3:c5:ae:b7:7e:90:4b:02:09:7b:
92:e3:31:f5:de:f3:9f:c9:b8:4b:37:65:87:a2:84:21:74:f1:
a1:c6:70:be:8b:9a:59:dc:64:b1:6a:f8:cc:5c:78:58:a2:3d:
72:83:90:f0:0b:29:46:f8:31:4b:9b:13:58:d4:93:73:88:9c:
fc:b4:99:42:84:0c:3e:19:4b:8b:49:9c:5b:8c:a0:7a:cd:1b:
7c:8c:b0:42:05:2a:ec:e3:d3:d6:11:92:d4:17:68:7d:21:40:
4d:26:7c:7f:09:c7:34:6f:6e:14:91:ca:13:a2:92:4e:c4:a0:
84:2e:0a:40:d4:1f:42:cc:4e:70:da:72:40:4a:0b:15:00:d5:
d7:06:9a:62:a6:3f:bc:1f:42:2c:c9:2f:4b:6c:9f:a7:db:2f:
83:5d:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:21 2026 by rpki-client