Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: gujiRq2O/n2ogMY9ePu+3f92LDVkCc5YbbaMLNxU9vg=
Subject key identifier: E5:28:B3:63:A4:08:8D:ED:AC:01:67:EE:AA:AF:15:F7:76:C1:F9:A3
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 019CAC47B87ADA46BE76E8A05739D43A400D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 10A1
Signing time: Mon 02 Mar 2026 02:01:47 +0000
Manifest this update: Mon 02 Mar 2026 02:01:47 +0000
Manifest next update: Tue 03 Mar 2026 02:01:47 +0000
Files and hashes: 1: 66guKTDTss6EYTkw4zccY7WRZk8.roa (hash: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: KuKw0tVZwqBYyHkkjVw63pcihrWx6fQNiozOTH5a+00=)
3: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (hash: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:b8:7a:da:46:be:76:e8:a0:57:39:d4:3a:40:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Mar 2 02:01:47 2026 GMT
Not After : Mar 3 02:01:47 2026 GMT
Subject: CN=e528b363a4088dedac0167eeaaaf15f776c1f9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:62:24:bf:06:3c:1d:a9:0b:35:91:8c:ec:
1c:11:3c:30:d4:92:5b:2a:23:8a:91:7b:e5:f8:82:
1d:d4:63:0d:0c:00:7c:4a:7d:db:03:ac:5c:73:0a:
5e:f5:d8:57:fb:fa:a2:05:11:86:44:68:27:b9:8a:
8b:f3:7c:71:3a:76:11:ac:f2:f5:57:b6:79:5e:44:
61:35:0d:16:39:20:82:32:c0:d7:f6:0a:b3:56:84:
91:72:4c:5b:2e:68:c4:b2:a7:03:49:88:f0:2d:4b:
b5:30:41:60:f0:02:37:15:05:49:d8:a9:5a:15:a8:
e8:fe:77:9b:3b:f8:30:78:03:cf:73:34:6d:80:f8:
04:a9:23:b4:5e:02:1f:e5:d7:ba:83:ea:20:6f:79:
08:db:b1:72:e9:d1:18:6d:b1:d5:6a:1b:c0:aa:1a:
b6:23:c9:a0:e6:9f:88:52:f6:e6:9b:dc:1b:18:55:
0e:4d:82:3c:4c:2d:68:79:7f:dd:21:28:99:dd:2f:
02:7a:ff:ff:58:52:ca:7c:22:08:c6:83:1b:19:b3:
de:e3:c6:07:b5:d1:18:df:09:6e:ed:cc:89:5d:43:
66:53:fb:80:32:28:8d:5e:49:3b:e0:92:dc:f4:a4:
26:fc:23:74:88:2b:e7:65:d9:51:38:c5:dd:dd:9f:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:B3:63:A4:08:8D:ED:AC:01:67:EE:AA:AF:15:F7:76:C1:F9:A3
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:29:f5:8c:46:d8:06:4e:54:3f:d5:d0:ad:91:bc:6f:56:b2:
a9:a5:a3:58:d9:c3:d8:79:bc:c8:ee:7a:b2:39:e9:9d:f0:39:
95:3f:a7:f8:da:c7:61:2b:ed:41:4f:7a:29:25:0d:5d:6c:bf:
13:9e:14:dd:89:ac:6a:29:11:e2:48:83:ec:b3:5a:71:31:3e:
79:94:f1:c2:f0:a6:db:5c:92:32:85:d1:3e:cd:ee:f6:c3:29:
62:fa:60:a1:0b:49:40:6f:27:6b:45:f5:f3:62:28:fa:2a:09:
28:fc:a4:15:3d:1f:46:8f:bc:c6:34:b8:81:0d:2d:31:02:1a:
b5:1c:88:10:6f:24:17:e9:7b:2f:8b:b0:e1:6e:38:af:ee:13:
ba:36:b5:63:c1:2a:38:7f:42:d1:f5:3d:0f:c2:0c:ed:c5:f8:
2d:3b:ca:c1:ba:89:01:4d:4d:aa:0f:9f:7b:f4:16:e4:72:dd:
66:08:fa:81:c9:34:da:ef:b5:1c:77:27:72:53:7f:a6:ad:60:
ae:1f:87:a5:e4:eb:b8:01:b7:0e:48:0d:cd:db:e7:d1:5d:ad:
ec:c0:9d:87:4c:93:f3:17:06:a1:b9:75:50:ec:5f:97:ec:23:
04:c5:f4:50:e1:9a:1a:bc:c5:66:c7:50:2e:c1:57:e2:02:12:
a5:53:ee:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:09 2026 by rpki-client