Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: OoCPKXeZ8ZjiH0FPfxSczWSdiY2K2h4XZSdUUGE6IWc=
Subject key identifier: 31:57:0B:98:ED:CE:00:CA:29:8C:1E:E7:87:1E:73:60:BD:5F:6E:41
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 019FAAF574C28245B22B0451529A9FC5457A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 122E
Signing time: Tue 28 Jul 2026 23:00:40 +0000
Manifest this update: Tue 28 Jul 2026 23:00:40 +0000
Manifest next update: Wed 29 Jul 2026 23:00:40 +0000
Files and hashes: 1: 66guKTDTss6EYTkw4zccY7WRZk8.roa (hash: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: m5mj5M50RXSyeZk1DLrVvqZcoViNeNosTOOblx5CXCQ=)
3: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (hash: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:74:c2:82:45:b2:2b:04:51:52:9a:9f:c5:45:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Jul 28 23:00:40 2026 GMT
Not After : Jul 29 23:00:40 2026 GMT
Subject: CN=31570b98edce00ca298c1ee7871e7360bd5f6e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:ec:9c:8b:cd:dc:13:8d:4a:83:1e:e2:10:
e8:79:ce:f4:27:a5:2c:a6:39:6f:c5:77:1b:db:e8:
99:4d:2a:e7:ea:6f:bc:d2:bb:94:2a:47:d7:64:86:
bc:bc:28:53:88:81:f1:33:04:b3:76:f4:73:2c:81:
31:02:3c:73:fc:c9:0c:5a:0e:6e:0e:8b:d7:4d:24:
be:37:93:33:b1:c5:21:67:ce:9a:ae:a1:77:ae:32:
89:8c:73:c2:c3:d1:23:a1:eb:2b:07:08:1e:f6:36:
49:72:a4:41:2e:6e:40:54:c5:f0:a6:ec:8a:95:3b:
58:e5:8f:a2:e3:10:17:5d:32:3f:5e:2b:c0:00:cb:
4b:d1:2d:2a:77:57:35:19:b6:d5:1a:ad:ac:4a:90:
61:90:96:4e:3a:5d:af:4a:98:e1:1f:93:a5:d8:1f:
a3:7c:55:dc:ed:f7:06:4e:ff:49:ca:57:3a:f5:a0:
8b:f5:32:b1:44:30:39:4e:1f:af:53:f6:46:c2:40:
44:5a:bb:7c:56:ec:d6:56:38:ad:62:c6:a1:1a:81:
ba:c3:c8:b2:95:e5:9c:76:da:72:db:db:2c:b9:5c:
7f:91:18:51:3b:55:7c:46:76:1e:6c:49:07:65:13:
b8:39:d2:3c:18:59:42:e9:0e:04:8c:78:80:c1:d9:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:57:0B:98:ED:CE:00:CA:29:8C:1E:E7:87:1E:73:60:BD:5F:6E:41
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:54:aa:0a:cc:9b:d2:07:ef:23:b5:30:3e:b7:fb:30:a5:de:
2b:8a:0c:49:4f:ed:e3:3c:59:8d:56:88:61:c4:4a:d5:0b:a5:
dd:ac:f4:01:70:43:8b:99:05:a7:07:07:1b:8e:0a:98:d5:ee:
cd:45:1f:0e:e7:14:0f:9d:40:c4:dc:b2:b3:e7:9d:3b:73:3d:
51:93:bc:44:f1:50:15:b4:73:8b:82:98:f0:98:88:b4:4f:67:
7a:72:f4:36:ed:35:7b:5c:dd:76:f7:94:9c:da:1c:2d:9e:a9:
2b:3f:b2:52:3c:40:0b:46:68:5d:8a:65:7b:87:74:b7:6a:a7:
4d:05:59:0f:30:31:b3:a0:42:0d:04:eb:9d:7f:40:ec:55:ff:
4a:a3:a0:d4:7a:56:ce:12:4a:c5:41:a9:ee:43:fb:cb:f0:a0:
63:fe:aa:93:0c:6a:b5:1c:9f:3a:47:59:59:9b:07:c4:13:49:
b7:b4:74:c2:02:e0:6b:4e:a5:18:c1:d7:b9:3b:ad:cd:1e:da:
06:b6:d4:98:4b:35:5c:5b:88:0e:68:e2:b9:84:ed:47:ed:b9:
33:b1:d1:98:fd:b7:de:30:38:93:6f:65:d4:5a:5f:90:0d:5d:
84:d7:d4:79:a2:4e:07:32:09:9f:8d:9c:8a:21:48:df:1d:4c:
3b:57:36:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:57 2026 by rpki-client