Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: lEr45t2Xqop5qrtQdw03cuvGqFP0j0XazMGfno4Ixvw=
Subject key identifier: 94:A2:1A:54:5B:90:46:5E:39:65:3F:F8:E0:46:5C:E1:7E:7B:45:E1
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 019EAE9DD8CB7170289CDF1E4C159DCC5A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 1951
Signing time: Tue 09 Jun 2026 23:00:40 +0000
Manifest this update: Tue 09 Jun 2026 23:00:40 +0000
Manifest next update: Wed 10 Jun 2026 23:00:40 +0000
Files and hashes: 1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: m3a3zA23IagRDbxBIi60FxxGvLjSHDEC7xvIms8axAc=)
3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:9d:d8:cb:71:70:28:9c:df:1e:4c:15:9d:cc:5a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Jun 9 23:00:40 2026 GMT
Not After : Jun 10 23:00:40 2026 GMT
Subject: CN=94a21a545b90465e39653ff8e0465ce17e7b45e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:4a:1d:e5:b8:a0:07:c6:39:ba:93:5d:7b:
4a:03:f7:bd:a6:3a:52:d8:1e:97:b8:50:bb:29:47:
79:55:58:aa:d2:41:be:db:79:28:9d:72:a1:05:68:
c3:98:75:27:a4:71:42:8a:fa:93:77:12:20:47:8f:
a6:00:4f:22:a6:da:d7:29:48:b6:8c:f6:20:d3:e3:
bd:78:67:cb:7b:d5:ba:75:be:a1:83:33:14:10:c6:
6a:a0:9c:08:63:54:08:d4:ef:92:aa:b8:cc:e5:f4:
1d:8d:f5:45:87:68:e6:f4:4e:60:21:35:38:fd:3f:
de:b4:2d:f5:7b:ab:85:6f:47:af:96:6d:ce:71:d2:
55:ba:02:c3:c5:b4:63:12:09:6a:be:2b:2f:b0:12:
a5:76:26:f1:9c:bc:3f:8a:a9:da:30:d9:e5:14:f7:
b6:ce:01:34:a5:e8:3d:6e:ea:8e:6e:6e:3f:68:33:
9a:9d:c4:e1:49:e1:12:90:25:4d:bb:d6:15:30:12:
86:de:6a:80:39:65:32:64:e1:1d:66:ca:e8:60:97:
7a:29:74:68:48:11:6d:f6:39:8e:b5:c2:bf:7c:67:
54:13:9a:ab:2a:fb:42:59:b8:43:10:8a:2f:e0:9f:
c7:7f:ee:a0:62:98:4d:c6:88:41:8f:ec:71:c0:de:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:1A:54:5B:90:46:5E:39:65:3F:F8:E0:46:5C:E1:7E:7B:45:E1
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:8c:bc:bd:b8:0b:0f:d6:76:30:60:f9:b3:db:1c:47:47:f4:
15:fc:58:4e:ce:ea:68:21:0a:61:ae:50:fd:20:06:53:85:0c:
b0:27:60:b7:c2:f3:fb:11:e5:1e:36:e8:60:db:68:e4:f1:91:
c7:46:a5:f4:48:82:b3:4a:cf:ca:7c:6a:bf:c4:ba:f7:a5:a2:
29:a1:84:37:15:88:2d:61:1d:5e:c6:ec:db:86:7c:6f:68:81:
32:3e:3e:ea:33:e0:e2:24:40:31:5d:b7:2f:16:ff:fb:17:ba:
66:51:21:42:52:87:69:5a:27:58:c6:0d:8d:76:54:71:51:1d:
6b:2c:59:60:88:14:75:58:e0:1b:03:b1:d4:39:a3:1b:6f:ee:
1f:c3:82:fe:df:37:f0:6a:fe:ca:b8:07:b1:15:36:0a:98:62:
a7:59:7b:fa:2f:2e:2d:da:c1:e6:fc:85:c9:52:b6:a9:7c:05:
a7:3f:0a:78:a7:f8:6b:69:a2:15:35:19:59:9e:53:f4:c4:bb:
11:44:81:74:2a:7b:70:00:58:e5:0e:18:35:a9:d9:f2:a9:13:
6c:ad:4c:7d:54:f0:b0:07:61:e7:3d:95:3f:f0:f4:72:85:91:
6b:bd:a6:b6:4a:55:5f:f3:7b:3d:ab:34:9a:21:40:c0:eb:26:
0d:7f:30:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:35:57 2026 by rpki-client