Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: wLVsN6UNTMJs7KC/TQU/0tov1MfPBV/Raj89tZ4VyrE=
Subject key identifier: 0B:07:E6:15:A7:D0:9A:E7:87:B5:26:AD:36:0F:E4:E8:11:26:9C:82
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 019D99D00EFA5F6488E03975073744AE7EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 111C
Signing time: Fri 17 Apr 2026 05:00:42 +0000
Manifest this update: Fri 17 Apr 2026 05:00:42 +0000
Manifest next update: Sat 18 Apr 2026 05:00:42 +0000
Files and hashes: 1: 66guKTDTss6EYTkw4zccY7WRZk8.roa (hash: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: 4JMtA37ROHvHzMChK9q9LzgNxjQXM+0clyfuuu8zw4c=)
3: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (hash: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:0e:fa:5f:64:88:e0:39:75:07:37:44:ae:7e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Apr 17 05:00:42 2026 GMT
Not After : Apr 18 05:00:42 2026 GMT
Subject: CN=0b07e615a7d09ae787b526ad360fe4e811269c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9f:64:92:ff:e5:6a:6d:a4:73:2f:b5:84:9d:
98:a4:f5:4b:6b:f4:3e:9d:75:b5:9f:2c:b4:ac:2f:
44:11:05:07:74:0f:a3:05:b6:a7:2b:5f:e0:1a:4a:
ed:27:84:4d:9f:2d:d0:63:cc:3e:f0:30:18:60:38:
d6:5a:84:05:8c:71:25:50:3e:44:c1:b8:fd:6c:1b:
ea:0f:44:32:3d:e1:2e:23:ad:9d:5a:24:61:18:0c:
53:ee:82:2b:ed:73:3a:0b:cc:91:34:8e:6f:a3:41:
36:2c:74:49:30:bf:04:4d:97:bc:97:2f:c5:dd:7d:
85:fe:da:9e:72:2f:04:39:d0:36:b7:db:7f:aa:8a:
a0:82:71:92:8f:8b:d1:5a:d6:dd:06:2a:e6:75:97:
47:36:a3:29:f2:1b:79:cf:fb:a8:b6:13:61:4a:33:
4e:98:9c:85:3e:18:5b:da:bc:39:8b:af:d2:d9:7f:
eb:6e:3c:26:69:c3:94:fa:96:35:c6:25:b1:2a:89:
d9:3e:47:a1:ef:57:74:93:b4:f5:25:93:6d:60:ff:
db:bf:91:10:a3:08:2a:3c:e0:29:25:75:88:bc:0a:
5d:3d:f2:d3:5e:c7:26:e0:27:a1:2c:84:56:a7:e9:
00:28:e1:ac:c9:11:21:9d:c3:3b:74:90:f4:33:48:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:07:E6:15:A7:D0:9A:E7:87:B5:26:AD:36:0F:E4:E8:11:26:9C:82
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5e:4d:8e:4f:bb:9b:cd:64:3f:42:d6:88:59:99:a5:de:38:
40:b7:dd:88:0e:87:2d:78:b9:66:14:55:db:50:2f:fc:a0:5a:
4e:7c:2e:e0:89:a6:7e:bb:0d:2a:f0:ee:92:e9:98:e1:b5:f3:
2d:98:70:81:fa:df:9a:7c:0b:2a:ab:ce:89:fc:1b:fe:7d:b7:
19:d8:01:24:6a:4b:3c:b2:3c:5c:29:c9:a3:64:a6:e5:e4:35:
f6:36:0a:01:2d:93:84:8a:f2:f6:78:01:be:32:7f:df:88:ad:
97:41:44:45:c0:97:37:98:e9:b7:f0:af:00:0a:9d:e4:b7:ec:
76:bb:ef:bf:1d:5d:04:07:45:c5:9c:28:ae:5c:1b:97:0e:d5:
10:ac:bf:32:5f:ee:3f:c6:f9:6a:29:ed:8d:12:51:0c:71:9d:
20:58:05:35:69:c6:1e:7c:3b:b9:ce:a6:6f:68:37:05:18:69:
64:80:82:76:8a:1b:74:8e:aa:30:0d:3b:1d:73:a1:54:67:d6:
7d:36:47:08:f3:f3:2a:6f:01:cc:06:ca:69:60:83:d4:db:a2:
87:5d:5e:ff:2e:e1:97:4c:6f:5c:ee:90:27:f0:73:bc:ce:ff:
d2:4d:60:2f:72:35:e9:c8:a7:c6:7d:cf:b4:67:41:16:bf:47:
89:31:de:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:13 2026 by rpki-client