Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: zRc7GksHWvqz1gKliEIJwGew/FpHKz0yXZMDiH/L9TI=
Subject key identifier: 84:D5:F0:8A:3A:AF:D1:03:07:8B:0A:D2:9D:C9:32:E9:6B:88:D0:40
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 019F08BD80A652366D356BD0DCE4A12546B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 11DA
Signing time: Sat 27 Jun 2026 11:01:04 +0000
Manifest this update: Sat 27 Jun 2026 11:01:04 +0000
Manifest next update: Sun 28 Jun 2026 11:01:04 +0000
Files and hashes: 1: 66guKTDTss6EYTkw4zccY7WRZk8.roa (hash: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: vNfe7ASsJXMAoPp4FdISyJaUoVRr1f+l6yALFFs112g=)
3: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (hash: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:bd:80:a6:52:36:6d:35:6b:d0:dc:e4:a1:25:46:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Jun 27 11:01:04 2026 GMT
Not After : Jun 28 11:01:04 2026 GMT
Subject: CN=84d5f08a3aafd103078b0ad29dc932e96b88d040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:78:71:0a:f7:fe:29:81:ad:9a:74:08:f7:
14:b7:f3:0e:ec:f3:1c:81:2e:40:2b:93:32:51:b3:
ac:cb:ad:6f:d3:d7:9a:01:fa:32:90:0f:6f:15:61:
8a:7d:9d:8e:88:ee:8d:9d:5e:65:89:81:86:7e:39:
d1:aa:7b:47:f9:35:a5:08:f4:a9:0f:be:1e:46:2e:
df:f5:c6:51:ad:75:3a:b0:44:b1:11:f7:74:a5:87:
45:ed:30:2c:2c:d1:e8:1c:7f:1a:b4:14:61:6d:b7:
a9:bc:49:d0:f2:12:6c:d1:66:65:cd:7a:2c:79:81:
02:d4:e1:b3:19:81:c7:65:99:79:9d:e5:fb:bf:8c:
ca:68:02:94:2b:60:ec:f5:1f:60:ed:46:dc:23:2c:
52:6a:69:10:fb:26:38:9f:93:79:49:99:e1:c4:71:
a4:c5:4e:3b:41:74:d8:16:42:10:42:f1:33:ec:00:
52:1f:1d:42:10:86:2e:7e:0f:22:f2:4a:a0:b2:53:
ba:22:43:be:82:99:59:27:b8:03:e0:00:c6:0a:3b:
d6:9a:bf:cd:1b:04:c9:16:09:3e:fd:39:5d:08:51:
f1:02:a0:f7:d8:8e:1e:0e:85:97:fe:2d:55:31:6e:
b9:5d:e6:29:41:2c:72:28:81:af:8c:40:35:26:c3:
63:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D5:F0:8A:3A:AF:D1:03:07:8B:0A:D2:9D:C9:32:E9:6B:88:D0:40
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:41:c1:88:d8:c8:f6:d2:d6:a7:fa:41:e0:2c:15:64:e6:06:
d2:80:f1:14:96:e6:66:73:e4:e6:0b:93:fe:aa:18:d0:ae:0c:
33:a0:ce:b2:fd:19:c1:72:f4:fa:89:b0:76:9f:8f:69:3d:21:
fe:cd:e2:ca:af:b0:52:56:56:3f:fc:5b:12:2b:a5:af:34:c2:
e7:57:ea:16:87:81:d5:c2:cd:3c:81:9f:f6:59:d6:33:68:60:
b9:4a:0b:87:d6:9b:88:06:5b:9a:5c:db:47:a4:ef:1d:c5:84:
8f:04:41:be:c5:a4:06:96:49:3c:40:1c:f0:26:56:80:22:ce:
cc:0d:ee:5a:7c:93:01:99:ca:8f:7d:db:78:79:2b:54:74:48:
06:ad:19:38:d5:fb:fe:33:40:d1:d4:9d:af:9b:28:37:22:51:
2f:c9:02:7b:e0:be:2e:1b:b9:52:0a:42:cb:bd:4a:07:d2:7d:
bb:c7:cb:dd:df:d9:2a:9a:f1:28:61:e4:0e:3e:d0:b8:bb:18:
3f:8f:c0:84:6e:27:90:af:2a:2f:ef:86:f5:9c:e8:e8:df:c9:
f3:fa:99:c3:ae:7f:0e:67:b8:0a:fa:4a:82:33:37:26:5c:9e:
d0:ce:8b:6b:8f:4d:1d:a8:1f:ee:aa:7e:7b:2e:d5:3f:16:88:
99:08:d2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 12:36:46 2026 by rpki-client