Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: 5ZM08VXeRViE5zFXarmMQUY0BSCiU/2KDlJsJWYgNmM=
Subject key identifier: 24:C2:C8:D6:E5:C6:C5:72:CF:13:C7:15:46:B9:EB:35:C6:98:02:1B
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 019E1F115AA3E07A38D68B436AB7784C5769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 1161
Signing time: Wed 13 May 2026 02:01:31 +0000
Manifest this update: Wed 13 May 2026 02:01:31 +0000
Manifest next update: Thu 14 May 2026 02:01:31 +0000
Files and hashes: 1: 66guKTDTss6EYTkw4zccY7WRZk8.roa (hash: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: CAZ1x6npziY85JfCYGutBWwEAXw6prturpIODvhQ40g=)
3: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (hash: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:5a:a3:e0:7a:38:d6:8b:43:6a:b7:78:4c:57:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: May 13 02:01:31 2026 GMT
Not After : May 14 02:01:31 2026 GMT
Subject: CN=24c2c8d6e5c6c572cf13c71546b9eb35c698021b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4a:eb:85:f1:96:b9:a0:c2:af:b3:1a:7b:6c:
8d:00:b9:d9:fe:3f:1a:bd:13:a5:7a:2b:47:73:37:
cb:65:ed:b2:7d:84:f7:d2:65:0a:0e:4a:09:fb:f7:
69:3c:6f:0b:f1:b8:6e:c7:82:db:cc:02:06:43:37:
69:cf:bc:f1:ad:50:5e:7d:7d:f3:92:0a:b8:98:97:
f2:d4:07:de:95:cb:1b:be:0c:41:0d:cb:01:c1:3e:
12:06:e2:b0:fe:64:9f:88:ff:43:9d:61:33:df:a1:
ef:90:56:bc:d3:7b:27:bb:06:26:35:96:15:54:58:
5d:f6:92:b2:4e:7b:6d:32:8a:e2:4c:fd:cb:86:66:
db:c1:3b:10:b0:88:0e:14:cf:bd:a7:2c:36:fa:01:
a4:28:65:de:10:08:47:bf:06:bb:09:2a:93:4b:5d:
d1:f9:7a:d3:64:c5:3f:7e:7b:e7:45:56:4c:a5:ac:
1a:bd:27:8a:7f:72:d3:fc:4b:28:bb:29:a4:b5:77:
1f:f4:d6:c8:47:11:94:2e:fb:6c:c9:6f:0e:d3:d3:
e5:da:a5:cd:cd:1b:4d:24:1a:5e:70:db:bb:00:af:
b3:d7:ff:8b:93:c7:62:1b:46:57:6b:1f:be:08:54:
a6:2a:e4:ae:c7:55:a3:17:7c:d6:6e:3d:65:0a:67:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C2:C8:D6:E5:C6:C5:72:CF:13:C7:15:46:B9:EB:35:C6:98:02:1B
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:30:d4:e6:ef:7d:7d:98:ca:78:9b:95:bc:1b:25:a5:78:67:
2b:aa:09:ab:94:b6:eb:fa:94:59:03:3b:59:0b:93:c6:db:e8:
0c:81:f2:11:6a:15:06:1e:41:6e:5f:9a:4e:68:a3:b7:39:8e:
88:51:c4:f0:8c:07:31:bc:a8:e7:de:13:d6:6c:ef:19:bb:2b:
b5:6a:21:66:75:3c:37:06:33:d9:50:8a:c8:e4:ff:ca:80:d6:
a2:0b:05:63:f5:a2:94:85:d0:62:04:fe:6a:39:cf:5e:21:e2:
21:69:80:f3:9e:95:94:ec:ff:41:c1:b8:9c:d4:45:e6:06:ba:
e7:78:1c:23:62:be:40:05:9a:4f:80:96:48:25:b8:cb:9d:ae:
32:76:2e:ee:6f:63:e3:e3:19:9c:55:c3:8b:c9:ab:b8:ee:51:
5b:92:f8:32:64:af:ee:9c:f1:56:0f:9f:a9:eb:ef:60:28:1d:
2c:8c:28:92:de:0f:ce:7c:f2:79:4b:c1:79:5d:33:51:04:1c:
53:24:e6:6e:ee:f0:d3:6b:cf:a0:9f:8b:ca:19:57:aa:77:54:
5c:89:42:7d:05:99:cb:8e:e5:8e:f9:44:80:7f:4f:94:67:15:
bd:8a:97:d3:33:a2:aa:86:3d:d5:94:fd:a6:03:9f:64:59:e6:
5a:6a:d7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:18 2026 by rpki-client