Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: C0Bb6OMfB7wQ5YzcL0AN6/wAra8wkkQBbkXoMLr+xf8=
Subject key identifier: 9C:7C:14:65:05:5D:57:09:0A:CD:8F:9D:88:EA:09:4E:59:0C:6B:4B
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 019F91DA8A223AFC13D6BBD324FA6E9D5335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 1221
Signing time: Fri 24 Jul 2026 02:00:46 +0000
Manifest this update: Fri 24 Jul 2026 02:00:46 +0000
Manifest next update: Sat 25 Jul 2026 02:00:46 +0000
Files and hashes: 1: 66guKTDTss6EYTkw4zccY7WRZk8.roa (hash: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: RZHZOTUCo4EClfNTBpdAx50zNUBLv6IWGXBDN7kXM0w=)
3: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (hash: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:8a:22:3a:fc:13:d6:bb:d3:24:fa:6e:9d:53:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Jul 24 02:00:46 2026 GMT
Not After : Jul 25 02:00:46 2026 GMT
Subject: CN=9c7c1465055d57090acd8f9d88ea094e590c6b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:9c:08:6c:8f:16:9c:ac:0c:95:63:ab:bd:
14:f8:a7:89:63:ca:a2:c5:dc:df:4d:62:81:8c:30:
be:ea:ac:e8:b7:26:fc:c1:04:cb:d0:c6:db:2e:f6:
ef:91:6e:b1:74:e7:40:6f:4c:3f:a6:bc:da:78:49:
6e:6f:d8:c7:1c:45:95:6e:1e:ae:16:66:ac:bd:1f:
91:87:06:9d:8b:44:9c:1f:99:f9:85:0d:b4:b9:81:
fb:74:f3:bc:bb:99:c3:13:58:33:fa:0e:fa:30:99:
49:44:a1:6a:c2:03:9d:5e:1b:b4:84:b4:6a:e2:ed:
bc:19:0f:3d:f5:5b:63:ef:b9:41:06:cf:91:5e:b0:
5a:79:3f:46:2c:d3:a4:a4:69:23:78:6f:c2:ca:a4:
d8:64:d9:70:db:b9:27:61:1d:2e:31:fc:9f:2c:b4:
5d:22:c8:67:64:b6:8f:73:8a:47:fc:20:75:da:df:
e6:f9:49:7d:5e:95:54:80:f5:cb:33:57:c4:29:69:
bf:30:7b:32:e1:0e:58:bf:32:f5:8b:d5:14:c6:07:
31:74:ee:51:05:58:9d:83:61:c6:ed:71:6e:2a:be:
5d:56:ab:54:12:cb:e9:55:42:b0:13:20:10:39:4a:
ac:f5:77:3a:70:04:ed:68:55:43:e8:a2:cc:dd:49:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7C:14:65:05:5D:57:09:0A:CD:8F:9D:88:EA:09:4E:59:0C:6B:4B
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d5:6f:e0:8c:b0:fb:c5:ac:02:e2:db:ec:a0:89:45:5b:07:
40:f1:49:e6:f5:00:cb:ee:d5:44:aa:e0:72:e2:6d:c0:f8:ea:
38:95:8f:bd:93:31:1f:27:6d:e9:3f:79:9a:e2:3c:cc:8f:1f:
35:d0:42:fb:3f:12:32:e3:a2:f2:a3:28:dd:c1:df:cf:e1:69:
ac:3c:8f:fe:65:1b:14:4e:1a:2d:52:31:f0:7c:c0:81:2c:ac:
f2:ad:4c:e6:d4:e1:fb:12:bc:f7:be:d4:14:a4:02:a0:76:eb:
18:16:58:07:a5:85:54:7e:b5:1f:14:62:14:1c:8f:b7:78:b5:
0d:d8:55:ba:52:b9:1e:f5:6d:ee:86:ef:b4:7b:d4:c7:55:a9:
ed:dc:37:11:c1:75:b4:32:5d:45:4b:b3:13:b0:a2:40:91:34:
36:45:7f:8f:2e:54:a9:ae:7e:97:69:c5:bc:7c:de:af:14:03:
5a:c6:b6:da:c1:03:dc:7e:40:36:06:cb:ac:76:73:39:76:ab:
42:78:4e:99:12:db:dd:9c:43:99:69:0e:e6:15:71:5b:34:bd:
04:e8:8f:3f:02:fc:93:62:d1:f2:6f:26:92:5f:c6:c9:2a:09:
a9:b4:18:a1:d6:85:3e:56:0e:0c:97:e0:27:57:b8:cf:12:16:
39:d2:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:49 2026 by rpki-client