Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: WGKCgq0PjYTaRvdZlL/eDcrV6UOif4ka4mpHSADTeSc=
Subject key identifier: 56:78:E5:5C:88:3A:12:04:3C:93:73:13:21:FB:0B:51:4A:85:6D:C9
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 01A1DB01CB778B8205D87EB4B6EFB4EEA2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 1350
Signing time: Sat 14 Nov 2026 17:01:30 +0000
Manifest this update: Sat 14 Nov 2026 17:01:30 +0000
Manifest next update: Sun 15 Nov 2026 17:01:30 +0000
Files and hashes: 1: 66guKTDTss6EYTkw4zccY7WRZk8.roa (hash: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: JQpPaVYeWtXjX8F3BmeQj3TOj0jy6twDCCnaQj2cRNU=)
3: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (hash: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:cb:77:8b:82:05:d8:7e:b4:b6:ef:b4:ee:a2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Nov 14 17:01:30 2026 GMT
Not After : Nov 15 17:01:30 2026 GMT
Subject: CN=5678e55c883a12043c93731321fb0b514a856dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:97:2b:3d:e3:1d:d6:73:9d:ff:bb:0c:87:
c6:ca:3a:22:73:e5:f7:c2:4f:8a:b1:37:76:20:0c:
36:9f:19:6a:8a:04:32:2b:69:72:0e:ee:26:10:7f:
65:f7:e8:e0:65:a0:ee:54:46:6a:84:fe:30:65:6c:
3f:dc:f0:04:55:f2:0e:1f:01:e2:09:8b:d3:94:c4:
7c:04:e3:9f:94:cd:09:69:d8:01:6c:da:6e:3b:35:
9e:31:71:f0:36:0c:a3:a3:eb:56:2c:4d:68:4e:f2:
34:ce:ba:e6:9d:a0:b7:18:04:1b:97:80:34:a1:89:
14:ef:40:ec:65:bb:07:11:5a:ba:83:92:02:df:0b:
d4:d8:5f:ff:8e:e9:17:d0:47:9d:a2:4d:d9:a8:e1:
1a:36:b5:e8:20:3a:aa:97:99:ae:a4:d8:b2:87:15:
97:bc:bb:7e:66:5e:64:5c:a2:de:e7:51:0a:7d:fa:
9a:7e:e5:39:db:69:1e:e3:0e:7a:fb:04:83:6d:ca:
72:cc:a8:bb:bf:21:98:d2:d5:ba:d8:c3:f4:a6:c2:
a4:79:bb:5f:9d:a0:c7:8c:1c:40:78:87:29:77:06:
b8:b1:d9:c2:5a:21:36:ce:16:31:20:4e:7f:24:07:
f6:69:76:0c:a5:8b:93:17:b0:70:88:59:16:2e:01:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:78:E5:5C:88:3A:12:04:3C:93:73:13:21:FB:0B:51:4A:85:6D:C9
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0d:ca:3a:2e:ac:b9:63:fb:55:89:f9:83:f5:96:c9:70:b5:
b5:1e:94:d3:fb:4f:6c:69:4e:bb:f6:de:0e:c1:57:73:21:e3:
1f:8c:86:3e:14:f1:34:af:a0:82:07:03:fa:c1:74:71:07:53:
44:90:c4:47:a4:70:78:8c:fe:92:ca:1d:fb:f8:8f:e0:7e:68:
f3:a5:98:a1:81:84:b6:69:38:4a:2e:d1:68:f6:aa:11:63:84:
31:46:34:77:cd:9f:79:de:9e:8a:49:09:67:53:db:84:3b:1a:
37:6d:51:ab:d9:3c:f9:96:78:86:08:b5:47:58:02:fa:12:e9:
91:65:83:d7:92:e1:4f:0f:21:05:26:ab:41:0c:26:7e:9e:e7:
c2:e6:03:49:e3:a6:17:0c:4f:7f:8d:dd:d9:58:23:5c:cc:31:
e0:7a:9c:3c:15:5a:46:d8:70:b6:34:ad:7d:a5:f9:89:6e:9a:
48:6f:38:40:5d:21:24:24:49:51:54:de:1b:04:c7:79:49:76:
3b:7b:aa:ee:92:95:ec:02:d1:a6:95:f0:3e:b3:4d:7b:95:53:
16:21:50:1d:02:12:5d:1f:5b:d9:08:65:6e:3a:6d:73:50:4a:
4b:3a:14:08:20:81:ff:46:b6:ff:de:68:4a:61:7e:90:c8:93:
30:06:0e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:25:48 2026 by rpki-client