Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: nvQdSCHW9x0y5w7QXaQ8K+8RF2xsEk2e3fu7LFsqWhk=
Subject key identifier: 57:01:6B:9A:74:02:4B:AA:47:71:29:4E:D5:C0:A4:38:C1:35:61:5A
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 01A1DEDE84550C769D78B793F4D94F210268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 1352
Signing time: Sun 15 Nov 2026 11:01:27 +0000
Manifest this update: Sun 15 Nov 2026 11:01:27 +0000
Manifest next update: Mon 16 Nov 2026 11:01:27 +0000
Files and hashes: 1: 66guKTDTss6EYTkw4zccY7WRZk8.roa (hash: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: VVjKeUCJEhpG9obl6UlmrRcyc81XyafQJ1uvD7IW1IM=)
3: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (hash: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:84:55:0c:76:9d:78:b7:93:f4:d9:4f:21:02:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Nov 15 11:01:27 2026 GMT
Not After : Nov 16 11:01:27 2026 GMT
Subject: CN=57016b9a74024baa4771294ed5c0a438c135615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:5e:10:a9:6d:4a:ae:4b:fc:f0:9b:23:2c:
1a:6c:59:50:74:79:79:e9:65:11:c7:5a:20:ee:7a:
d6:d1:d2:8c:22:39:57:c3:5a:07:ee:8b:a0:15:a8:
de:b7:61:36:f9:b8:3b:09:05:dc:24:b9:b1:cb:7b:
86:0b:4b:1c:3f:5e:c5:7a:89:5a:a1:7d:85:d9:82:
8d:9c:c8:1c:5d:47:23:b7:aa:22:9c:6c:aa:af:85:
27:6f:e5:e9:31:22:4b:2c:d3:1d:aa:2b:b9:73:27:
1b:b7:2a:0d:70:e5:2a:bd:be:5e:f0:8d:d9:2f:25:
7e:a2:b8:d0:21:32:e6:ae:84:66:da:77:ed:ae:4c:
82:f5:d2:c4:33:23:68:5e:aa:68:46:d0:6f:ef:12:
63:ef:13:e8:97:21:fa:23:e5:df:e1:73:d7:7a:a8:
43:17:56:c4:0e:46:e0:84:19:1c:08:d2:e3:36:1d:
5a:8b:42:ae:fb:fd:ac:1a:6b:b9:c5:1a:6c:fd:6f:
01:31:f4:ed:15:a0:22:b4:c2:6d:0e:12:86:54:19:
18:89:8a:80:60:ce:03:f4:e8:c9:c7:28:66:71:99:
37:f1:6f:44:93:36:f2:52:4d:e6:c7:60:86:fe:23:
a0:fa:05:d5:8b:28:d7:14:31:15:30:71:38:e5:0e:
74:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:01:6B:9A:74:02:4B:AA:47:71:29:4E:D5:C0:A4:38:C1:35:61:5A
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d3:3a:f9:97:8d:31:67:9d:1b:bf:61:67:b0:56:ca:9c:be:
4a:07:47:83:10:f2:2d:83:d5:38:a1:b1:c8:15:5c:fd:59:79:
0a:bd:a9:30:92:a2:18:a1:32:5d:e1:1b:86:b9:94:d3:22:5b:
3a:1b:55:4c:1c:0c:70:34:d1:82:91:4e:58:1d:67:ed:b1:96:
52:6a:67:90:7a:67:19:62:36:c0:45:dc:a4:6a:ab:bf:26:90:
fb:2b:fb:57:54:28:eb:53:73:c1:9b:9b:03:a4:23:13:54:a0:
3e:ed:f3:af:5e:6e:26:15:15:55:bb:83:7b:62:ed:fd:7e:40:
cb:ce:f3:62:39:f8:df:a1:eb:a0:27:ce:20:a9:92:4b:c8:fc:
6f:27:99:e8:b0:bf:11:b1:29:70:a6:03:38:5d:40:26:ad:d1:
e4:1e:a0:79:37:9d:5b:6d:1f:c2:08:93:6a:82:37:4e:c2:74:
84:5b:b0:34:a4:40:ff:f0:e9:93:f7:4c:3a:bf:65:ce:57:b3:
f2:2c:21:00:b8:2f:f9:7c:12:3c:68:1d:0b:bb:bf:fb:63:2f:
36:c8:85:0e:53:53:d0:b2:c7:a7:db:8a:0b:b5:53:54:55:f0:
c8:e4:85:09:3c:d2:7e:f2:47:53:7a:3b:de:38:e6:ed:2e:57:
22:b7:a9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:22:13 2026 by rpki-client