Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File: YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier: jyCSe8Pe/X4daNOEIxUkESo3NOPsS17SKODpC602tpQ=
Subject key identifier: 9C:09:98:31:E9:E8:DC:09:51:3D:E2:D3:28:78:C7:B8:CB:C6:D4:3E
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 019FA7BDCC721E77FD607BD093EA516DA7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number: 158D
Signing time: Tue 28 Jul 2026 08:01:01 +0000
Manifest this update: Tue 28 Jul 2026 08:01:01 +0000
Manifest next update: Wed 29 Jul 2026 08:01:01 +0000
Files and hashes: 1: A2edUifbSShzdJ1Gis-SqBKDNH4.roa (hash: Vy37s5YBxFgEPmxrlCq+GM34iA4Ip0Oc6gKZuBhegNc=)
2: BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa (hash: Io/zg3oPjnrBQRK8TUjjHMBbPc/oa9KH3Wg0gDqsd6M=)
3: CMj-58s7HjFJfPYnqyY_H8iMras.roa (hash: l/VgtwLP67EeRyfmCVyIdNqgvDzJvQY/H0EIMqQ+RF0=)
4: LYaVyURA1Hqer0FhBdoqEAlltug.roa (hash: NWGVsZzZidWUl0MNChqOvov8kyqJB0zTJQ1HSXjGZw4=)
5: MFBUVUGoLTFb6mMUZK00McW_7z0.roa (hash: F53ezXG/M5tdcqiYCNPbO7yVUwgcKU5OMRV7nr04e3o=)
6: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: FwzAxJyvIw9yJ0+bRlGji4e9sVjy3aw12wTgNIy/Xrs=)
7: kjQiljeUwEx-0O3qxw80JEcNHTk.roa (hash: Nj75u7cki0A+yVZeLl5QIeG1w+agzNtRDNjOCJHZFpc=)
8: m4DpurF7pXpEMEv3x379sHsIzI0.roa (hash: AQ+Y/OhWDwIEf3fur9MU0/7BD96QO4hZo7G0csSPbMo=)
9: qaLHn37xtjw3qy4avBKJZx30pG8.roa (hash: 37z1vS8oU1I2E/gSNbcyl0yQyKdvAVXffCULUq/vHIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:cc:72:1e:77:fd:60:7b:d0:93:ea:51:6d:a7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Jul 28 08:01:01 2026 GMT
Not After : Jul 29 08:01:01 2026 GMT
Subject: CN=9c099831e9e8dc09513de2d32878c7b8cbc6d43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e8:1c:1f:d5:eb:da:ae:93:ed:9c:52:a4:db:
84:7d:ea:d7:23:a5:d2:d3:03:59:78:8c:4a:54:cb:
44:8a:e5:cc:d6:0b:26:a7:26:02:19:bc:50:01:3a:
3e:d7:a6:09:7d:12:fb:a2:03:3e:cd:c4:89:7c:29:
be:cf:98:79:5f:e7:24:03:81:01:43:f1:2c:53:f6:
82:af:df:59:52:5f:79:d5:e1:4a:9e:18:38:5d:20:
dc:e9:6b:e3:86:e8:12:ea:8d:89:42:df:15:95:23:
4b:f9:65:96:65:4b:e8:16:7e:d4:ca:d4:02:2d:af:
00:89:a9:cd:ff:6f:c5:23:a0:ec:52:48:c0:8c:37:
ce:db:6d:64:c1:6f:98:d6:44:d3:c9:af:f9:e2:d4:
51:c7:ae:21:c9:85:a6:a3:68:94:e6:6a:6a:d4:f1:
19:df:fc:e4:bd:97:71:b4:b4:0a:e7:b4:1f:66:87:
45:1f:89:6c:2b:a8:2e:58:e5:04:60:79:29:ca:71:
c8:cf:a9:fb:1c:71:36:ea:ea:70:33:56:a5:0e:fc:
d6:9a:00:4b:47:60:42:6a:41:c8:c0:57:82:7f:18:
cb:31:20:6c:f4:c0:41:72:2b:62:04:72:6d:f4:b4:
cc:81:7a:ec:4e:a2:8a:f5:40:45:88:05:80:af:58:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:09:98:31:E9:E8:DC:09:51:3D:E2:D3:28:78:C7:B8:CB:C6:D4:3E
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a5:e8:4f:8a:25:79:26:72:61:da:3d:61:e7:3b:65:b7:1a:
f5:52:84:f8:f5:74:2f:ee:ba:54:62:04:01:bc:8c:58:3e:02:
69:4c:0f:e0:d2:0d:e1:41:17:bf:83:93:4e:2e:53:f0:30:f4:
45:20:b3:b7:21:fa:a5:3c:e8:94:66:70:c4:2a:d2:f2:1a:b7:
e1:99:fc:fd:4a:b5:fc:f1:e7:a9:d9:90:e5:8e:a0:01:0c:89:
4a:62:a5:8b:bf:7a:ca:ab:a6:da:7d:80:4d:4b:bc:63:b9:66:
12:a3:5c:a8:ed:50:f1:0f:1a:60:15:92:d9:1f:93:2a:8d:4d:
ef:4b:83:cc:d0:f6:40:63:c2:6a:59:15:b1:22:cb:9e:bf:38:
df:47:99:97:6c:21:72:8b:30:9a:d0:c2:e1:7a:68:14:4e:56:
13:84:1d:94:74:de:52:dc:9e:ab:4f:64:7d:76:b2:8e:90:dd:
e8:d5:fd:dc:14:23:f7:79:2d:c7:a8:3d:9c:48:2a:d4:1f:95:
cc:a5:78:c8:64:c2:a0:bf:6a:18:f2:9e:af:e9:7e:19:2a:2b:
81:cb:f6:f6:9d:99:42:18:74:42:d1:55:4c:fd:7b:e9:31:35:
ec:86:99:59:d6:26:40:89:84:5f:3b:8e:5e:80:cb:4b:40:03:
e8:60:e7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 11:29:20 2026 by rpki-client