Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: WdQCFZQ9yK/JfN1/XYugXVKcI5ApaTGqh1WtetqANxY=
Subject key identifier: A0:15:63:C6:62:C0:E3:8C:AF:6F:88:C3:19:6F:2B:06:F5:2F:47:F4
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 01A0CCA2C1CF5876E7CB4046FD993BF37283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 12C4
Signing time: Wed 23 Sep 2026 05:00:13 +0000
Manifest this update: Wed 23 Sep 2026 05:00:13 +0000
Manifest next update: Thu 24 Sep 2026 05:00:13 +0000
Files and hashes: 1: 66guKTDTss6EYTkw4zccY7WRZk8.roa (hash: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: GNXQYHKszbdwE/ycy+bP6zqMMKwutKB/FU3tTcM5jvU=)
3: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (hash: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:c1:cf:58:76:e7:cb:40:46:fd:99:3b:f3:72:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Sep 23 05:00:13 2026 GMT
Not After : Sep 24 05:00:13 2026 GMT
Subject: CN=a01563c662c0e38caf6f88c3196f2b06f52f47f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:61:aa:dc:02:15:d8:21:b7:79:19:61:bf:
27:df:0e:69:76:97:77:ec:27:92:fe:43:e0:74:98:
1f:bb:93:87:52:66:7e:82:12:ce:e8:38:79:13:03:
c1:a4:e2:52:b8:95:43:7d:4d:9a:29:ae:74:3c:92:
c1:b6:50:d6:73:6f:cc:68:27:10:c3:65:92:23:3d:
9d:91:37:57:aa:9c:6b:30:4e:cf:c8:3d:6c:7d:fe:
ee:e9:d1:e1:7c:82:19:68:d5:70:c0:bf:97:81:4f:
6a:24:c7:63:a4:d9:55:98:1f:f7:e9:d2:2d:95:77:
ce:39:40:78:9e:ca:e9:01:17:89:62:12:45:aa:13:
6f:6c:70:04:fa:ca:ca:95:8c:4e:19:04:87:f6:4f:
c2:c5:73:c2:b9:3f:87:54:66:84:f6:de:84:d8:6b:
57:49:53:a0:a5:bd:62:cb:65:f2:d6:17:05:0a:63:
af:01:41:b8:d7:76:86:ed:a8:f5:e9:38:65:81:e8:
b6:ec:f3:df:48:f7:18:20:0a:90:f1:d1:a5:92:ce:
aa:a5:ad:fe:7f:d0:33:98:c1:64:63:95:62:bc:51:
cb:f0:24:f9:e3:ed:d3:78:3e:c4:05:31:e0:77:cf:
a3:d1:45:07:e4:1f:ec:b5:74:71:78:51:86:5e:6f:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:15:63:C6:62:C0:E3:8C:AF:6F:88:C3:19:6F:2B:06:F5:2F:47:F4
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f5:6e:06:43:e9:4f:5e:28:db:91:7d:0b:3d:74:3e:74:cb:
38:a1:0c:8d:53:27:35:4f:45:76:9b:ab:f7:25:4c:a0:08:9f:
98:27:0b:be:0e:16:e2:df:1f:40:ae:41:ec:b4:1d:f0:65:76:
55:b5:d1:c5:04:8d:c1:d7:78:90:1f:aa:6c:4b:6c:b0:56:f0:
a1:5b:b4:87:01:b7:4f:ca:45:bf:0a:40:f3:7a:b3:88:0e:02:
5c:6e:83:d1:62:69:5d:5d:26:ea:a3:c9:fc:91:9f:40:bc:f4:
1b:47:07:23:81:4c:21:7f:ce:c2:a7:4f:f8:ef:94:d8:c4:cc:
2a:15:2f:e3:26:a3:8b:b3:08:31:ae:38:1a:ce:87:b7:7b:2f:
ce:8b:64:d7:02:cd:7c:e8:0b:8c:e7:95:bd:30:72:15:78:ba:
82:35:41:45:82:90:91:16:ca:82:50:d9:c7:9e:d9:b3:7e:6f:
13:2d:c8:89:f8:66:d1:68:85:4d:b9:da:cc:cd:24:16:d0:21:
0a:fd:d5:83:ae:3e:8d:c7:a3:fc:36:7b:aa:27:41:a8:91:c9:
d7:73:b5:a7:82:bc:5e:86:c4:36:61:0a:34:cf:af:65:82:1c:
71:08:52:95:0f:32:1a:92:94:20:0b:6f:89:9b:95:8c:87:22:
49:b3:2e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:19:45 2026 by rpki-client