Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: J7Envr3JPlo9IaYhsIARUDiAhuizQvXJnPV2EcmlNOM=
Subject key identifier: 5F:6C:F4:DF:6F:BE:C1:C1:5A:4A:CB:DA:4E:35:6D:19:EC:9B:EA:E0
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019E2C5F1642AD94734704D5DD492FB7041F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0FFB
Signing time: Fri 15 May 2026 16:01:29 +0000
Manifest this update: Fri 15 May 2026 16:01:29 +0000
Manifest next update: Sat 16 May 2026 16:01:29 +0000
Files and hashes: 1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: jgO/uA95NuD5T9EcVHs7F4K66NuXf5gNEdTS5SLVD3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:5f:16:42:ad:94:73:47:04:d5:dd:49:2f:b7:04:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: May 15 16:01:29 2026 GMT
Not After : May 16 16:01:29 2026 GMT
Subject: CN=5f6cf4df6fbec1c15a4acbda4e356d19ec9beae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:70:1e:03:a7:24:8d:eb:f3:d0:ac:9d:59:
aa:b7:52:af:6f:6a:f5:e7:5c:05:46:b8:c4:9e:7d:
89:01:82:ba:4a:7a:e9:e2:31:ae:00:2f:52:e5:c3:
eb:ed:dc:e0:75:9b:88:6a:c3:76:59:81:4f:3a:86:
97:73:46:7a:8d:a4:d6:2e:df:d6:65:9e:11:31:d6:
da:66:4d:63:78:4d:47:52:54:74:e2:5e:73:f1:c3:
d4:60:3c:72:e9:b7:db:6c:21:08:4a:79:34:d0:bc:
56:f2:fe:ff:83:90:d9:30:bb:d7:9d:68:5a:5b:e8:
17:71:b2:c0:0d:ae:18:c3:3d:37:af:4d:18:c1:11:
1e:21:7d:4d:34:d8:de:47:b6:52:6c:cc:e9:fc:d4:
82:33:7c:94:13:cb:eb:e0:7e:01:78:c1:27:74:04:
99:c3:9f:cf:4e:5c:7a:32:f1:ce:c2:8e:c5:79:e0:
3e:74:f3:c0:34:aa:36:96:16:9d:87:a1:6f:91:b4:
de:7c:12:e8:c0:c7:ac:d0:af:c6:54:f9:71:c0:77:
18:84:5c:ae:9d:b0:1f:89:6e:b8:f8:64:ac:c0:82:
15:e6:dd:b8:66:a0:72:b5:e2:eb:bf:9a:b5:c3:2f:
1f:46:cd:b7:77:f9:65:e3:61:20:43:75:7c:5a:15:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6C:F4:DF:6F:BE:C1:C1:5A:4A:CB:DA:4E:35:6D:19:EC:9B:EA:E0
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6a:87:29:68:92:31:5b:58:61:4f:b9:97:9e:90:7f:5f:2c:
88:11:36:fe:73:f7:f4:0c:e7:e6:1d:17:69:19:25:7d:16:63:
ee:7a:f4:69:f2:a5:da:35:b8:f8:48:2e:41:23:d9:82:2b:7e:
4e:5e:75:39:8d:86:04:f3:5d:fc:e1:3b:03:8d:8f:91:b3:b9:
28:ad:ec:96:49:21:54:87:4f:c5:ee:c9:c4:b8:f7:8e:f6:f2:
01:0b:59:1c:f1:11:1a:ad:10:7b:06:08:72:a2:2d:98:1b:85:
64:1a:63:be:3b:d8:ae:1c:a8:ea:21:94:3e:e4:04:b0:07:22:
48:de:de:d3:98:60:92:77:50:f5:7b:50:4e:b7:0e:68:75:83:
d4:d5:49:66:49:63:42:c6:06:f3:81:76:4e:7f:98:cc:3b:ba:
da:12:91:32:7d:7f:4e:53:bd:a3:70:42:c0:ee:f9:6a:6a:ed:
29:bf:53:47:8d:5a:dc:eb:4d:10:26:59:d6:8f:7e:0e:30:61:
bc:8b:09:57:9f:74:52:24:cc:48:25:00:c1:8c:f8:9e:e2:08:
0f:c1:76:ac:e2:ab:57:86:73:43:f5:c5:7e:87:c0:57:68:9d:
84:8d:b2:ba:4c:44:fc:46:d7:62:0c:6f:ec:e9:d2:53:38:04:
86:77:85:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:07:21 2026 by rpki-client