Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier: YbX0giJqpAaBy231buO0nZSe1DRNRLSd1M8lQN8PaEs=
Subject key identifier: CA:A8:C9:22:5A:31:51:40:1F:82:05:5D:15:7A:44:4B:95:AB:FA:24
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 019FFA5B4B3970A0B80E8E506989C68B1AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number: 1A07
Signing time: Thu 13 Aug 2026 09:01:54 +0000
Manifest this update: Thu 13 Aug 2026 09:01:54 +0000
Manifest next update: Fri 14 Aug 2026 09:01:54 +0000
Files and hashes: 1: 1-CQYobvcQG21mAnMiaW7vyH7CXY.roa (hash: F30Qwwm1mnG4O3FtxSySy1RIR2PJUKOcNn6fyL1ZO8E=)
2: Q8ZPUdn-YmcTmBwAi_7GVX9YQUw.roa (hash: kBU03x/ocDiC2CPd5HE27yOrt08fP6gCbdih5TdOqEQ=)
3: Sy7wu7HbvDyeRA19AagewX8X6a8.roa (hash: 3GBSbUmpYJlg9KE6xgU1mWhmKjjwIsWji4O9OpkK8H8=)
4: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: skaA7Fe266w8zx6bx0pzgQCRcVh80B7PxDsN/bLsF1A=)
5: bdnGFt0hHzKvmqEY93Eh959DQNM.roa (hash: Uc8DaiaZyUQDwe1ODSCGoQeREP5FCzxxss2vrZnDmR0=)
6: lqsLALggP8BPfl8pdq3Xpv8eVgg.roa (hash: bdexZFMhJLX7gjQGkdBbU8UkKwrPdu12kMoaVc9RB3s=)
7: ruyO6zUfbaRsGVkfFZtSsnxMh1s.roa (hash: zoSCjiMf6V8kppFFwtfWmMhnEG6ujkudnMTWLbB1XSc=)
8: xkh0_qQROZrSh7wQT28dLg374SY.roa (hash: DYUAA1oa5//rqv0OvMnn2Z1Gp+Lzbo3Hx+khO/MXiMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:5b:4b:39:70:a0:b8:0e:8e:50:69:89:c6:8b:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Aug 13 09:01:54 2026 GMT
Not After : Aug 14 09:01:54 2026 GMT
Subject: CN=caa8c9225a3151401f82055d157a444b95abfa24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7c:b1:65:ef:5e:0d:b1:fe:52:c5:99:79:92:
ad:bd:18:c2:86:92:3c:8c:cb:e8:5b:8f:58:8f:04:
40:87:a0:68:33:e5:ac:b7:22:95:7b:9d:e1:34:49:
d7:a1:4d:c2:71:fd:74:55:f4:0c:4f:83:d2:d6:b6:
44:90:65:95:35:47:9a:25:88:9d:fd:56:96:08:b2:
48:a1:bd:96:35:e2:03:c9:2d:c0:b3:23:a8:1b:da:
fa:56:50:69:ac:51:49:09:9e:69:fa:88:f7:60:61:
a1:80:67:9a:50:71:1f:59:7b:a3:31:87:99:20:f2:
d4:33:e7:4e:f6:b0:e2:50:0c:50:2e:56:de:51:cb:
06:ee:51:ba:fa:03:e0:87:11:f8:1c:7d:fc:7c:e5:
36:36:50:80:f8:02:ce:55:f3:f5:33:c2:95:28:fd:
78:7d:3f:f7:72:4c:9c:39:bd:30:7d:4c:25:f4:a7:
26:2f:e5:78:ca:3e:2b:d0:6f:69:a7:5d:ce:f0:27:
cb:bf:a8:b9:2a:f6:a0:67:36:13:fa:df:4d:39:34:
24:2c:02:21:78:0d:bd:80:cf:bb:fd:2b:b7:0f:66:
f1:a1:df:de:2b:a2:0b:0e:ff:84:b8:b6:6a:cf:5a:
f5:66:f7:03:f6:72:f4:e0:aa:ae:11:49:a6:c4:7a:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A8:C9:22:5A:31:51:40:1F:82:05:5D:15:7A:44:4B:95:AB:FA:24
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d6:57:ce:cb:10:50:f9:b8:4b:8b:6c:04:09:fb:72:30:a6:
dd:1c:3e:b9:70:b8:c1:dd:71:15:bd:5c:cf:02:e9:88:8a:97:
21:b3:4e:3f:4d:6e:ad:05:54:f1:7e:5c:75:21:33:2b:07:60:
01:c9:7f:e7:bf:a5:9b:c5:02:c7:8a:4b:b3:8e:d0:48:6f:26:
91:fe:15:f3:c5:7b:01:81:ec:a4:62:1d:5c:bc:88:70:27:1f:
12:d9:3a:25:97:b8:27:68:f7:a9:b8:bf:e6:aa:03:8e:0c:63:
46:b4:bb:62:8d:bf:f4:da:72:6e:db:82:b3:e1:29:a9:2b:59:
bd:eb:e3:6c:36:77:5d:e3:d3:41:b1:4f:c4:21:d8:96:90:b3:
e3:50:cd:2b:e9:cc:e9:13:f4:a4:e6:4d:87:12:8d:15:50:cf:
ec:40:e5:9e:36:e4:c9:69:dd:01:a2:0e:60:c3:a0:12:29:f7:
9e:34:bc:e0:22:cb:aa:83:e3:15:c7:b3:b2:69:47:c4:f9:f0:
00:24:4f:b2:00:35:77:5d:fc:26:9d:9c:fb:a9:4c:d9:73:53:
38:dd:ca:f1:9a:42:e5:18:69:27:10:0b:99:a5:a0:e7:a6:b5:
89:51:a2:33:81:44:e9:f3:96:ef:20:7e:80:09:1b:0f:b5:e3:
bb:d0:70:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:23:19 2026 by rpki-client