Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: PUT4qvnBdc+xVYKIZrg+B+wLOfFqjnxFB8icOihY680=
Subject key identifier: 4D:D9:1C:8A:CA:9E:37:51:A6:42:D2:DA:58:1B:13:32:B0:C3:D7:1B
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 01A131B4AE8C951CA6D8FE668A62B374AD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 1A9E
Signing time: Mon 12 Oct 2026 20:01:27 +0000
Manifest this update: Mon 12 Oct 2026 20:01:27 +0000
Manifest next update: Tue 13 Oct 2026 20:01:27 +0000
Files and hashes: 1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: AVbo22e4D5/8RSrS1p8HIHoVv7QylLbN7Kpz2zaxFC8=)
3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:ae:8c:95:1c:a6:d8:fe:66:8a:62:b3:74:ad:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Oct 12 20:01:27 2026 GMT
Not After : Oct 13 20:01:27 2026 GMT
Subject: CN=4dd91c8aca9e3751a642d2da581b1332b0c3d71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0d:05:ed:db:39:91:99:59:c2:cb:af:f6:20:
fc:c3:75:f0:33:14:86:12:e1:38:bc:0a:c0:42:45:
a8:33:e0:22:50:d5:16:ea:eb:5a:7b:d3:f5:53:3e:
f4:5c:80:b1:2b:6e:8a:8d:10:ab:19:6e:1e:27:97:
cf:67:76:b8:01:79:f0:a0:3d:18:6f:2e:88:ff:fa:
74:44:4f:7c:64:1b:8f:18:97:e1:fc:91:93:e3:7a:
d6:64:80:75:69:89:2c:41:d9:6e:20:e0:97:4f:f2:
75:c5:72:70:2a:1b:1a:1a:ea:3c:d3:f5:6b:94:42:
bc:d0:20:7c:1d:42:e2:de:5d:6d:25:b9:f8:95:52:
6c:94:fe:a1:b4:21:d8:6d:89:b0:fa:71:8a:97:79:
9e:32:82:31:fb:f3:a2:ab:e7:09:23:8c:a1:f6:89:
34:aa:ac:ec:1b:05:08:bd:0b:b5:c4:06:83:2d:90:
e1:da:e5:8d:b3:ca:dd:16:8a:c6:ea:68:85:3c:27:
f0:e2:ef:68:72:de:01:67:25:48:5a:9d:72:6b:24:
8a:4c:b2:ce:36:e9:32:06:39:aa:07:04:b8:e6:af:
ff:ef:ee:84:3f:d2:d8:f6:ac:d5:7e:dd:5d:13:54:
d7:c4:88:48:f3:6b:62:09:eb:ae:60:44:02:2f:f0:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D9:1C:8A:CA:9E:37:51:A6:42:D2:DA:58:1B:13:32:B0:C3:D7:1B
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ad:a2:ec:83:cd:d3:59:26:12:01:17:e2:2b:a7:17:5d:32:
d9:13:58:61:3c:c2:15:9a:0f:45:74:82:66:c2:4d:f3:ea:19:
61:01:05:ed:02:a8:8d:aa:2c:c9:54:3e:8a:a9:64:39:be:4a:
ea:c7:ca:f6:5e:e8:63:1c:2e:eb:e3:54:ec:c3:2b:8d:64:f6:
e9:1f:e0:93:f0:58:3f:db:7b:d0:41:e8:ee:96:61:76:e7:ec:
82:9e:96:97:8b:70:18:38:06:46:8f:81:18:87:65:03:9f:8e:
5f:54:e7:22:47:85:20:e2:81:39:ea:97:7a:33:fa:57:0d:1c:
05:a9:c5:2e:cf:79:5c:2f:d1:8a:4d:57:c1:e7:40:90:5f:1d:
b4:6d:0c:cd:8e:7e:05:2c:c0:41:f3:b7:aa:28:48:49:20:fe:
25:71:2f:06:ec:cd:e5:73:d4:55:ed:1e:f8:05:da:53:e2:2e:
2a:16:3b:f4:17:89:11:4c:e1:f1:8c:0c:72:67:79:ea:6d:7d:
52:64:dd:0b:2f:46:d0:66:db:cd:5a:4a:c0:b8:8f:89:f9:f1:
23:72:8e:62:67:c8:fa:ab:a1:68:1e:a3:ff:84:0b:30:c7:f2:
f6:b3:d9:b9:fd:56:6e:ed:82:d7:dd:61:73:9c:f3:ee:8a:eb:
fc:0b:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:12:00 2026 by rpki-client