Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: dyTgBpojwgBY0BTcVyDDSuD1RRdsDY3vNw67B/dlj+s=
Subject key identifier: EA:9E:39:E4:83:B3:91:87:9E:0F:9C:28:AF:A0:65:70:26:14:9C:2B
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019F160B98037849005A4A62F43D8D5C7DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 1074
Signing time: Tue 30 Jun 2026 01:01:26 +0000
Manifest this update: Tue 30 Jun 2026 01:01:26 +0000
Manifest next update: Wed 01 Jul 2026 01:01:26 +0000
Files and hashes: 1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: MkucqSSGRE2KWxVNlAiaXa0pkrZOa4UmOzN+c15Qecc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 21:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:16:0b:98:03:78:49:00:5a:4a:62:f4:3d:8d:5c:7d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Jun 30 01:01:26 2026 GMT
Not After : Jul 1 01:01:26 2026 GMT
Subject: CN=ea9e39e483b391879e0f9c28afa0657026149c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:43:91:54:b7:39:a1:50:71:9f:d6:5b:d5:ec:
d6:ea:a8:2b:eb:f7:25:70:ff:44:e4:d0:50:15:2a:
02:bb:26:f3:4c:5d:fb:61:2e:40:f7:c7:bf:52:c3:
5b:62:87:be:48:b7:df:b0:ed:58:0b:0c:3c:85:c4:
53:75:b4:c7:40:46:a4:59:11:8d:93:24:8b:93:e0:
89:86:c0:0e:46:41:8a:51:36:e8:e9:70:70:a9:5d:
7b:86:b7:03:30:67:dd:e4:57:69:32:dd:1e:34:f2:
a7:a9:52:6d:63:11:db:09:73:73:ee:30:fe:88:52:
02:99:9d:9f:58:f4:ee:61:e9:0d:68:46:66:7c:00:
46:a1:33:9b:13:32:cd:53:ff:f2:c4:14:98:8e:14:
87:0f:21:a5:35:14:ff:5b:c0:89:79:fe:82:93:41:
a2:9b:a9:d0:2f:4d:c8:76:b5:27:a5:9d:b0:6d:a5:
af:89:1a:07:4c:d3:54:ec:84:b3:f1:f7:e6:5d:93:
84:a2:32:42:e0:42:b3:81:c3:eb:a1:30:92:49:ad:
87:15:74:92:85:35:ed:1e:fe:a0:fd:f1:52:e3:6c:
b6:ae:05:72:6a:d9:8b:b9:f3:a0:b5:af:bf:a4:4b:
cf:db:08:d3:4b:8d:5a:9b:93:7d:7c:6a:40:be:28:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9E:39:E4:83:B3:91:87:9E:0F:9C:28:AF:A0:65:70:26:14:9C:2B
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8f:df:f1:6b:d3:ec:54:25:e0:4f:60:45:6a:fc:ed:65:08:
5d:90:e4:af:87:a3:f3:63:d2:fd:34:35:1d:f4:62:e2:d6:63:
01:2c:30:4c:2f:51:d5:92:b2:b2:36:95:df:93:e1:53:98:54:
18:82:12:f3:89:bf:1e:8a:bd:b2:f3:69:5b:27:21:8a:e0:37:
83:22:11:59:36:18:92:95:ac:97:d9:8b:a3:56:23:a4:c9:95:
23:5d:0d:38:40:af:4d:cd:77:93:31:d9:94:46:35:6b:7d:b3:
ce:c1:5b:b1:eb:f2:6b:de:b3:e2:a7:96:40:83:13:a5:16:53:
ab:56:e2:a9:3b:e5:5b:f8:49:60:92:20:15:6e:67:f2:54:a0:
b9:d5:4f:89:a3:50:3e:28:be:40:be:8c:3c:5d:8d:12:7b:5d:
dd:d9:2e:2a:82:4c:8d:db:21:ce:90:5e:e1:eb:d1:e2:25:5f:
f7:e9:62:d8:35:5f:8f:ee:c6:14:21:e1:4c:57:9f:d9:c4:79:
dc:3d:7e:f1:8b:ad:b8:63:66:b9:b6:73:22:34:98:18:af:a2:
e2:6e:cf:d7:b5:eb:02:b3:df:ff:e8:75:4c:f4:54:85:1a:9c:
0a:e1:a8:4c:33:bb:ab:ea:c8:6b:e8:04:8d:8a:11:3c:72:e9:
ea:aa:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 03:13:19 2026 by rpki-client