Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: 5bJ35jd02DKgJ4fhaAbqKYasVZjYsUlEADg5ovgNy24=
Subject key identifier: 4F:9C:7B:50:37:ED:DA:37:8D:53:76:D4:A7:E1:A2:C4:E3:72:E7:25
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 01A0D26DDE41B974622F8631C3B4D98EAC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 12C7
Signing time: Thu 24 Sep 2026 08:00:10 +0000
Manifest this update: Thu 24 Sep 2026 08:00:10 +0000
Manifest next update: Fri 25 Sep 2026 08:00:10 +0000
Files and hashes: 1: 66guKTDTss6EYTkw4zccY7WRZk8.roa (hash: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: 3b6mgfqm1gNWW6FRmKMh5RBsLDnOfmu4wYJB1rueVQ0=)
3: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (hash: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6d:de:41:b9:74:62:2f:86:31:c3:b4:d9:8e:ac:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Sep 24 08:00:10 2026 GMT
Not After : Sep 25 08:00:10 2026 GMT
Subject: CN=4f9c7b5037edda378d5376d4a7e1a2c4e372e725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:3f:3e:a4:64:8b:5c:de:64:5b:fc:8e:59:
a1:f0:83:dc:4a:fd:56:c1:cc:d5:f2:2e:43:b1:61:
6e:fa:90:55:4b:47:35:62:18:d0:38:61:dc:79:05:
1a:e1:f1:34:f8:54:7b:2d:73:dd:36:a4:6a:42:ef:
d8:61:6c:0b:e6:31:55:0d:40:3b:b7:af:2e:c9:73:
d8:30:2c:39:6c:83:ad:66:c5:c1:2f:5b:5d:b6:1b:
45:82:9e:d7:a2:34:ac:6e:50:8a:46:c3:52:18:73:
b9:9b:a6:86:03:d4:b8:ef:42:eb:31:fe:ac:88:ac:
af:ee:84:a4:4d:5f:18:ae:89:94:ae:20:a2:6a:d0:
f9:7f:e5:f0:1c:55:be:26:da:94:47:ce:c4:76:5a:
9b:7d:9d:ea:69:0d:21:ad:ba:ff:bd:54:cb:c1:82:
3b:5e:3f:a2:87:ba:48:b8:31:cd:68:13:3f:b0:71:
4a:da:69:06:f5:34:98:d0:74:67:f0:a6:1c:be:ec:
06:33:1f:11:f3:72:00:3c:bf:f8:af:7e:a4:55:14:
8d:a5:ec:5d:46:ec:33:ac:36:fa:ea:60:44:43:44:
a9:e3:5f:4c:92:46:38:78:83:60:b2:68:33:f8:95:
b1:63:39:e2:7d:76:92:11:b7:e1:5a:62:77:69:99:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:7B:50:37:ED:DA:37:8D:53:76:D4:A7:E1:A2:C4:E3:72:E7:25
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b1:3d:9d:4e:ec:94:09:46:06:77:86:cb:5c:05:67:0f:1e:
48:c6:e8:5e:f4:27:26:2e:70:3b:f3:89:09:c6:71:72:86:7e:
f7:6f:71:94:54:12:fe:5f:29:a9:62:d3:20:d7:ee:82:43:47:
66:f2:64:ef:36:28:3d:a0:cc:a7:f6:dd:6c:57:ae:57:54:36:
93:01:b9:64:81:2e:9e:25:ca:4c:1b:ea:71:25:5a:40:1d:f9:
7a:ca:d9:79:05:f5:ac:42:01:f4:31:bc:77:b5:2e:75:b3:35:
3a:4e:d1:0c:8f:67:fd:25:da:3e:00:8f:4d:e6:04:42:7b:64:
85:b4:0c:e3:43:20:d4:52:2f:1f:1b:1d:46:31:3f:5f:22:9b:
6e:bd:05:f7:61:ec:5b:55:13:ef:92:d2:f5:84:a7:51:8c:dd:
d5:33:19:17:1f:9e:48:fc:35:e8:4a:02:3c:e4:a5:ef:a6:62:
10:67:44:ec:cf:23:38:67:b2:0c:f2:1d:65:72:95:e3:5a:f3:
74:2a:23:8a:67:fb:2e:22:0d:ca:e0:43:cd:2c:69:77:57:b2:
42:c7:3c:e6:67:a4:f7:3f:b5:ef:5e:c4:0e:80:ac:09:46:d8:
29:0a:e3:21:4e:e2:1b:66:d8:e4:49:48:ee:f5:0d:9b:8d:5e:
9d:96:9e:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSbd5BuXRiL4Yxw7TZjqyXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNDEwNzJlZTFhMWIxYzA2ODQxMmRmYjAzNTVkMjc1OTkz
MmM1ZjUwHhcNMjYwOTI0MDgwMDEwWhcNMjYwOTI1MDgwMDEwWjAzMTEwLwYDVQQD
Eyg0ZjljN2I1MDM3ZWRkYTM3OGQ1Mzc2ZDRhN2UxYTJjNGUzNzJlNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrE/PqRki1zeZFv8jlmh8IPcSv1W
wczV8i5DsWFu+pBVS0c1YhjQOGHceQUa4fE0+FR7LXPdNqRqQu/YYWwL5jFVDUA7
t68uyXPYMCw5bIOtZsXBL1tdthtFgp7XojSsblCKRsNSGHO5m6aGA9S470LrMf6s
iKyv7oSkTV8YromUriCiatD5f+XwHFW+JtqUR87EdlqbfZ3qaQ0hrbr/vVTLwYI7
Xj+ih7pIuDHNaBM/sHFK2mkG9TSY0HRn8KYcvuwGMx8R83IAPL/4r36kVRSNpexd
RuwzrDb66mBEQ0Sp419MkkY4eINgsmgz+JWxYznifXaSEbfhWmJ3aZnd4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+ce1A37do3jVN21KfhosTjcuclMB8GA1UdIwQY
MBaAFGBBBy7hobHAaEEt+wNV0nWZMsX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMt
NGQ1Zjc2MzdlZmNlLzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMtNGQ1Zjc2MzdlZmNl
LzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLE9nU7s
lAlGBneGy1wFZw8eSMboXvQnJi5wO/OJCcZxcoZ+929xlFQS/l8pqWLTINfugkNH
ZvJk7zYoPaDMp/bdbFeuV1Q2kwG5ZIEuniXKTBvqcSVaQB35esrZeQX1rEIB9DG8
d7UudbM1Ok7RDI9n/SXaPgCPTeYEQntkhbQM40Mg1FIvHxsdRjE/XyKbbr0F92Hs
W1UT75LS9YSnUYzd1TMZFx+eSPw16EoCPOSl76ZiEGdE7M8jOGeyDPIdZXKV41rz
dCojimf7LiINyuBDzSxpd1eyQsc85mek9z+1717EDoCsCUbYKQrjIU7iG2bY5ElI
7vUNm41enZae0Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:50:31 2026 by rpki-client