Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: J3yNSgvI5va4bbXLfts0P/vdRZEdTGO3vmJrXqb6Q2Q=
Subject key identifier: 4E:74:71:B8:86:C7:6A:60:EC:8C:8A:3A:68:19:31:93:BA:13:E8:E6
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 019FF26A19FBAC66D9DDD5CCABEE566B99B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 1253
Signing time: Tue 11 Aug 2026 20:01:07 +0000
Manifest this update: Tue 11 Aug 2026 20:01:07 +0000
Manifest next update: Wed 12 Aug 2026 20:01:07 +0000
Files and hashes: 1: 66guKTDTss6EYTkw4zccY7WRZk8.roa (hash: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: pF092hdH3RCMnLFpoMY4TIvVT0o7b134VSUayh0K8Xc=)
3: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (hash: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:6a:19:fb:ac:66:d9:dd:d5:cc:ab:ee:56:6b:99:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Aug 11 20:01:07 2026 GMT
Not After : Aug 12 20:01:07 2026 GMT
Subject: CN=4e7471b886c76a60ec8c8a3a68193193ba13e8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:55:ea:2b:7d:7d:bc:3c:b1:8b:f9:4f:db:
35:d5:cd:d9:54:35:c0:b6:cd:14:d2:82:98:46:56:
0b:d6:39:27:ad:17:2c:8c:71:f0:4f:81:42:3b:3d:
bb:5b:4a:31:3c:2b:aa:2d:5f:5b:87:cf:89:9a:b0:
25:36:80:f4:4f:46:9c:31:c9:e7:73:b0:29:7d:c8:
ac:a3:4e:9e:5f:79:5e:af:08:cf:b6:93:f4:0e:66:
54:8b:a9:ac:d9:49:f6:93:c4:c7:93:54:85:1e:fa:
80:29:72:7d:09:d0:86:3b:2c:aa:0f:0f:d3:de:7f:
a5:c7:89:6b:e6:e9:71:06:88:a7:25:20:43:99:4d:
74:7e:b2:ad:2a:79:13:be:f6:ec:ab:49:9e:da:17:
04:5d:fe:70:03:36:db:4b:98:04:29:2c:af:84:92:
d9:fc:45:10:ba:db:2a:d9:31:b9:0d:8d:06:b3:e7:
67:78:36:4b:fb:79:83:56:15:e4:e2:1e:23:c0:d3:
55:f8:eb:c1:75:81:df:fa:3a:3d:b0:24:3c:f0:b3:
7f:da:fc:6e:3a:e8:9f:f5:fc:e8:64:8c:84:20:78:
a0:b9:33:bf:5e:37:94:45:c7:7d:77:df:75:f4:58:
31:10:8f:6a:d0:13:47:69:05:5c:10:ba:05:78:71:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:74:71:B8:86:C7:6A:60:EC:8C:8A:3A:68:19:31:93:BA:13:E8:E6
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b4:51:54:96:34:75:34:a4:9e:2f:17:79:af:80:f3:50:0d:
40:14:4d:b9:7f:90:44:8c:56:be:cf:b0:d1:6a:38:14:12:e9:
8a:b6:72:52:83:58:87:19:fe:87:03:df:8c:28:4f:45:03:f1:
10:43:3d:3a:fe:ce:ee:2d:c3:25:6a:f9:0a:8a:55:b8:e6:ba:
69:11:7e:31:cf:b5:a8:08:13:f3:2f:0f:d2:c4:95:44:5e:20:
a0:cf:2f:64:2d:09:a1:5c:2e:bc:0d:c3:cf:38:8b:33:d8:88:
f3:df:15:1e:44:96:23:76:9e:96:9b:f8:35:3d:75:91:ac:56:
02:93:59:41:b7:d8:56:63:d4:66:ce:1a:b2:75:da:cf:9e:dd:
ae:84:32:14:7a:62:8d:4a:c4:31:15:4b:dc:eb:0f:77:b9:8e:
77:8b:fd:38:73:56:17:d1:bc:fb:20:63:d8:0f:1f:6a:b8:71:
17:3c:f7:b0:c8:52:fc:2d:4a:7c:29:8c:2a:b5:2c:85:44:10:
65:55:2d:34:a0:ad:88:24:af:50:ef:93:76:0b:fc:c8:8d:e4:
d7:a6:10:3d:94:82:a2:3b:ed:ca:f5:da:43:1d:dd:6d:83:e8:
f4:00:00:53:b4:f9:e3:d8:d3:d4:47:ae:be:d1:fc:78:f7:4f:
f5:27:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 01:56:39 2026 by rpki-client