Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: akl9XlwRLFpCtxnVYQutWB448iNuJpin+jDuNwxTJvM=
Subject key identifier: BC:EE:A1:BA:97:5E:6E:1F:86:14:A4:79:37:C0:E9:9B:6A:A1:99:41
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 019D27DFB1FAED88335D685B267424065067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 10E1
Signing time: Thu 26 Mar 2026 02:01:04 +0000
Manifest this update: Thu 26 Mar 2026 02:01:04 +0000
Manifest next update: Fri 27 Mar 2026 02:01:04 +0000
Files and hashes: 1: 66guKTDTss6EYTkw4zccY7WRZk8.roa (hash: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: p+thiZuv4TzmHuE0w/wUORmlC3mVilOgkFk4xuX+A5M=)
3: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (hash: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b1:fa:ed:88:33:5d:68:5b:26:74:24:06:50:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Mar 26 02:01:04 2026 GMT
Not After : Mar 27 02:01:04 2026 GMT
Subject: CN=bceea1ba975e6e1f8614a47937c0e99b6aa19941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:37:7a:6f:b4:d6:05:b2:03:d5:df:76:77:98:
fc:04:cd:b0:8e:79:13:18:3c:97:7e:72:2f:1a:61:
45:aa:97:24:1e:8b:af:8d:17:29:2c:a5:cc:bf:cc:
35:08:4d:3b:ce:41:c8:10:2e:ce:ae:84:5e:91:a6:
3e:ca:7c:d0:37:19:a9:cd:e3:db:98:81:53:18:20:
e7:5d:98:f2:cf:ea:fb:83:ba:28:00:d9:d4:b4:9a:
24:ad:e3:ba:68:84:ed:97:31:96:23:21:ba:4a:c7:
7a:1b:b4:40:1b:0f:50:f0:8b:de:01:4c:df:38:c6:
7f:5a:8e:24:f2:11:77:a2:3b:8c:02:d0:ca:41:25:
d4:83:d3:5d:81:fa:85:d2:29:05:1f:aa:70:82:bd:
0a:e7:b5:c2:7e:78:57:93:5a:d9:34:4f:64:47:1d:
6e:40:53:9a:b9:56:9c:9a:4b:9f:df:16:a5:85:48:
1f:f0:50:a4:09:82:ce:2c:ae:dd:45:b2:9f:db:71:
b8:18:52:72:14:ee:30:d8:a5:81:5b:32:6d:5f:9b:
1e:55:6a:c3:a6:4f:ec:05:30:b9:9c:e1:28:67:a2:
3e:9d:3f:e7:94:be:0d:2e:58:ee:7a:2e:f4:e9:78:
00:d8:63:3d:cf:93:b4:a0:b1:4a:4d:b8:3d:fb:33:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EE:A1:BA:97:5E:6E:1F:86:14:A4:79:37:C0:E9:9B:6A:A1:99:41
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e1:52:72:c0:54:c5:3c:ee:8e:0b:0a:de:34:be:d9:93:fb:
b9:87:38:c9:0a:77:4a:17:c6:d6:83:8a:bc:5b:49:d4:0b:58:
44:4c:c5:b9:b0:7d:d8:a5:02:a8:c9:24:89:7b:9f:75:cd:6d:
47:ba:a5:26:25:fa:07:8d:ff:dd:b0:32:8e:48:42:30:f0:b2:
07:bb:c7:8a:d9:69:40:68:9d:b7:f4:03:27:3d:a7:b8:81:c7:
8f:e5:9a:41:32:d1:ef:07:83:59:f3:26:02:c9:54:0b:b1:fa:
76:8d:f6:77:66:88:4d:0c:b2:f9:a6:95:19:76:76:c5:d8:f5:
0c:33:1d:e6:35:b8:cb:23:a7:ed:5f:dc:80:12:7c:9c:5d:2c:
46:a3:dd:b8:65:46:fe:7b:47:01:47:91:fe:2c:1a:ea:78:be:
69:14:fe:a2:77:42:7f:3c:8c:3e:69:b2:ab:26:c4:1b:31:66:
d2:a1:05:3f:c1:f4:54:52:2a:15:96:8a:15:78:a9:ab:ba:d7:
eb:ec:ef:6e:84:17:fc:c3:61:4a:9a:3c:83:8e:a3:79:de:3a:
16:60:4c:ec:2d:00:7c:b1:a8:eb:54:97:a3:50:2d:9a:9c:38:
1d:06:24:05:e7:4b:96:0a:f8:77:d2:56:d6:a1:ab:43:f6:54:
ca:12:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:43 2026 by rpki-client