Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: cjv8qCK4nk+tHSBKIuJ+e6ApV94tscA8YT2MbwIYjJE=
Subject key identifier: E2:5A:5B:90:65:AB:31:F6:34:6B:CB:3C:A8:37:1E:B8:DD:0E:12:6C
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 019D37F76E576DFF102983368273E950B511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:55 +0000
Manifest this update: Sun 29 Mar 2026 05:00:55 +0000
Manifest next update: Mon 30 Mar 2026 05:00:55 +0000
Files and hashes: 1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: UaPpja5bLJpIr4Xb1Q6xbjaNVqY0cD52zrD6FVmZ88g=)
3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6e:57:6d:ff:10:29:83:36:82:73:e9:50:b5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Mar 29 05:00:55 2026 GMT
Not After : Mar 30 05:00:55 2026 GMT
Subject: CN=e25a5b9065ab31f6346bcb3ca8371eb8dd0e126c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:be:0f:6b:bc:60:4f:1b:1d:74:3a:53:b4:
fa:a6:84:8d:11:ba:85:52:17:25:60:5d:03:6d:5d:
60:2b:c4:78:fe:58:ce:f5:25:e7:e4:3f:f1:1c:6f:
0d:f3:44:43:dc:12:1d:ec:ba:e2:ae:4b:d5:df:3c:
f9:5a:b2:ab:29:0f:37:ec:01:ac:27:99:9d:7e:79:
36:d9:df:be:12:50:8f:b2:ff:a8:54:79:2a:dd:82:
4e:df:d7:2a:b0:85:22:11:cd:8b:e6:7a:de:63:fd:
42:a9:f8:63:37:1c:27:6c:8e:26:7c:1b:05:16:11:
b9:5a:74:63:bb:59:26:ca:0d:d4:51:51:01:53:62:
52:7c:47:0b:90:1b:e0:36:84:48:7a:e3:79:2f:17:
77:74:e8:f2:f6:d3:31:ac:de:c5:10:6e:61:2e:f8:
e7:4b:dd:c0:e8:29:6c:b0:fd:29:04:51:02:f9:4a:
2e:82:3e:92:61:36:a0:e4:99:6d:98:1f:fc:fe:d7:
36:ec:53:80:54:e2:0b:dc:a5:11:2a:70:0e:9a:45:
c3:a0:6d:a3:98:6c:7e:73:e2:10:3d:79:9a:3a:ab:
4d:29:52:96:50:29:b1:31:e6:a1:2c:c5:bf:ea:4a:
6f:23:a2:0a:dd:e9:8c:4c:27:8d:ae:59:77:54:eb:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5A:5B:90:65:AB:31:F6:34:6B:CB:3C:A8:37:1E:B8:DD:0E:12:6C
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1b:2a:2d:b2:38:87:eb:32:5c:86:a5:0d:4d:5b:a1:11:dd:
1f:22:0e:95:1d:12:e1:f3:1f:d3:01:a2:ec:d0:4b:c8:a6:0c:
e3:c9:c2:79:01:a0:0d:da:3b:5b:28:29:12:fa:8d:7d:4f:ce:
2f:c3:ee:ac:41:3c:51:42:d3:29:74:16:e1:77:53:b9:3d:b2:
2b:b0:d2:f5:c0:95:c3:ac:3b:a7:29:86:52:f3:09:0e:88:3b:
9a:0f:8c:ef:ed:16:44:63:75:1f:29:8c:0b:a5:b4:12:bb:6f:
5c:de:68:f1:71:c5:f7:8f:0c:b7:27:cc:51:0b:bc:17:7e:47:
71:ed:0b:b9:b7:5f:a1:52:c1:cb:ea:27:e9:12:35:ab:fe:b3:
63:c8:91:06:6a:cb:15:65:b4:eb:2e:04:c1:71:58:a9:2f:28:
46:54:f5:16:6e:ae:cb:d6:2c:47:d1:8f:1f:24:d9:36:5a:27:
28:57:96:ee:21:d0:dc:d3:cc:a7:bd:fe:32:7f:e8:fc:ef:ee:
1a:00:8d:fc:54:58:86:a4:f5:fe:68:84:56:5f:70:72:e2:d9:
67:18:f5:84:e4:72:84:5f:57:c4:a2:5b:8d:84:14:07:21:84:
0e:04:be:1e:47:da:75:0a:85:de:46:e8:a9:96:e2:6c:d0:3b:
da:2b:ef:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:10 2026 by rpki-client