Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: IjIYOGJU64rWId1/ddJFjp/j9aq29XOON710rqvrcos=
Subject key identifier: C4:44:96:49:19:27:3C:8C:39:9A:47:45:BA:87:CB:45:57:AD:E4:9A
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 01A02167C478607187D62BAC4C8569C585B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 1A11
Signing time: Thu 20 Aug 2026 23:00:43 +0000
Manifest this update: Thu 20 Aug 2026 23:00:43 +0000
Manifest next update: Fri 21 Aug 2026 23:00:43 +0000
Files and hashes: 1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: Pp/n/36qkFHhDsbgAW1slgdHISmopdLER/nE1Y4j/xE=)
3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:67:c4:78:60:71:87:d6:2b:ac:4c:85:69:c5:85:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Aug 20 23:00:43 2026 GMT
Not After : Aug 21 23:00:43 2026 GMT
Subject: CN=c444964919273c8c399a4745ba87cb4557ade49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:d6:b4:b5:4c:8d:c2:e3:a3:d9:90:48:1f:
4e:2a:22:51:91:20:8f:0a:ae:e0:18:40:79:c7:b9:
01:15:b0:2d:b8:89:1d:09:9f:44:1f:52:ae:23:58:
5b:60:88:3a:23:3c:1a:56:eb:45:14:0f:24:e3:e3:
5a:7e:76:9a:24:70:ae:59:97:de:91:41:be:cf:03:
c8:38:86:b0:f3:a4:d8:b6:fa:19:6c:45:ec:75:f4:
53:c5:af:34:95:7c:a9:20:79:9c:00:26:85:4e:a0:
b8:ed:b8:2e:32:84:57:89:67:8c:8d:ca:85:a6:9e:
c5:71:9c:fe:8f:bc:33:e2:58:59:c5:4a:d9:f5:18:
31:bb:c4:ae:3c:b7:f4:27:01:c3:b6:22:53:4e:2f:
75:f7:6a:d7:7c:18:d8:e0:f3:b3:d7:10:11:1d:76:
1d:4c:7b:2a:82:fb:65:f6:96:b7:6f:4c:5a:88:a0:
d3:9f:70:55:fa:c7:96:77:28:b9:1f:e6:b9:64:29:
4d:46:6f:da:f0:03:2e:e2:80:6c:1a:b0:50:58:c9:
c7:4e:7b:40:c6:f5:1d:f3:d8:04:54:2b:fb:f7:64:
72:1a:49:90:36:a4:c8:fb:32:83:bf:45:6a:d2:16:
e0:17:0d:8f:77:b0:e8:64:1e:de:8a:b6:c5:54:66:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:44:96:49:19:27:3C:8C:39:9A:47:45:BA:87:CB:45:57:AD:E4:9A
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:93:10:9a:c1:3e:5e:06:09:48:d1:e6:34:ab:ae:e4:39:09:
9a:9f:14:f5:61:06:69:b6:8f:0b:db:73:e3:0e:37:85:ec:8b:
de:52:1e:22:b3:af:3d:8b:d0:37:71:31:57:a0:ec:80:1d:bf:
7d:3d:df:46:a3:fd:e1:53:2c:37:c0:a5:52:d8:60:dd:5b:0b:
4c:de:7f:da:e3:16:63:72:5b:e7:4e:47:4e:8e:3f:57:96:a1:
b0:c5:80:da:cf:91:8a:c2:71:71:40:e7:52:e5:03:95:3f:cf:
40:0f:41:82:5e:e2:03:32:a0:31:b4:af:78:7e:c0:f8:ab:5d:
5c:e7:4a:ae:84:03:a4:1f:35:a3:41:99:68:e9:91:35:2a:cb:
0e:d0:19:97:32:aa:52:4a:36:a2:f0:af:7c:58:8c:8f:ff:cb:
be:ca:81:40:5f:88:f7:57:53:ab:6f:4e:46:60:05:36:d8:6f:
e9:6f:81:2d:f5:99:ff:01:a7:54:c3:94:cd:9a:e5:0f:a4:0a:
e0:ea:e6:2e:0f:76:06:a4:52:3a:4f:16:c4:5b:20:8f:dd:d4:
0f:8c:34:49:cf:fb:28:46:89:cf:bb:6b:9d:f3:3b:ec:46:c6:
51:e3:75:df:f1:3b:5d:a4:71:d1:f1:f9:50:23:80:e1:ea:c2:
cc:84:59:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAhZ8R4YHGH1iusTIVpxYW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTE3YTFlNmY2OTljMzIyYjZiOTgzNDk0ZjQyYzIyMDkx
Mjc1NTMwHhcNMjYwODIwMjMwMDQzWhcNMjYwODIxMjMwMDQzWjAzMTEwLwYDVQQD
EyhjNDQ0OTY0OTE5MjczYzhjMzk5YTQ3NDViYTg3Y2I0NTU3YWRlNDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1HWtLVMjcLjo9mQSB9OKiJRkSCP
Cq7gGEB5x7kBFbAtuIkdCZ9EH1KuI1hbYIg6IzwaVutFFA8k4+NafnaaJHCuWZfe
kUG+zwPIOIaw86TYtvoZbEXsdfRTxa80lXypIHmcACaFTqC47bguMoRXiWeMjcqF
pp7FcZz+j7wz4lhZxUrZ9Rgxu8SuPLf0JwHDtiJTTi9192rXfBjY4POz1xARHXYd
THsqgvtl9pa3b0xaiKDTn3BV+seWdyi5H+a5ZClNRm/a8AMu4oBsGrBQWMnHTntA
xvUd89gEVCv792RyGkmQNqTI+zKDv0Vq0hbgFw2Pd7DoZB7eirbFVGa1gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRElkkZJzyMOZpHRbqHy0VXreSaMB8GA1UdIwQY
MBaAFGIReh5vaZwyK2uYNJT0LCIJEnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQt
NWJjYzg0NThhYTJjLzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQtNWJjYzg0NThhYTJj
LzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5MQmsE+
XgYJSNHmNKuu5DkJmp8U9WEGabaPC9tz4w43heyL3lIeIrOvPYvQN3ExV6DsgB2/
fT3fRqP94VMsN8ClUthg3VsLTN5/2uMWY3Jb505HTo4/V5ahsMWA2s+RisJxcUDn
UuUDlT/PQA9Bgl7iAzKgMbSveH7A+KtdXOdKroQDpB81o0GZaOmRNSrLDtAZlzKq
Uko2ovCvfFiMj//LvsqBQF+I91dTq29ORmAFNthv6W+BLfWZ/wGnVMOUzZrlD6QK
4OrmLg92BqRSOk8WxFsgj93UD4w0Sc/7KEaJz7trnfM77EbGUeN13/E7XaRx0fH5
UCOA4erCzIRZrw==
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:31:02 2026 by rpki-client