Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier: yEEjKWZYsYcZSTsABRXLe+tNBrtyyMtoMSMHgwmqzVo=
Subject key identifier: AA:6F:79:89:D9:AE:50:77:9E:A1:58:E6:D8:FB:B6:3E:A5:E8:B4:69
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 01A13ECB9FE25B2EB39B12A2EDD049B169D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number: 1AAF
Signing time: Thu 15 Oct 2026 09:01:34 +0000
Manifest this update: Thu 15 Oct 2026 09:01:34 +0000
Manifest next update: Fri 16 Oct 2026 09:01:34 +0000
Files and hashes: 1: 1-CQYobvcQG21mAnMiaW7vyH7CXY.roa (hash: F30Qwwm1mnG4O3FtxSySy1RIR2PJUKOcNn6fyL1ZO8E=)
2: Q8ZPUdn-YmcTmBwAi_7GVX9YQUw.roa (hash: kBU03x/ocDiC2CPd5HE27yOrt08fP6gCbdih5TdOqEQ=)
3: Sy7wu7HbvDyeRA19AagewX8X6a8.roa (hash: 3GBSbUmpYJlg9KE6xgU1mWhmKjjwIsWji4O9OpkK8H8=)
4: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: ORRaiBgTmnVprexQrrJ+oqWu7HCzIpWBoOq+bzsa7Ug=)
5: bdnGFt0hHzKvmqEY93Eh959DQNM.roa (hash: Uc8DaiaZyUQDwe1ODSCGoQeREP5FCzxxss2vrZnDmR0=)
6: lqsLALggP8BPfl8pdq3Xpv8eVgg.roa (hash: bdexZFMhJLX7gjQGkdBbU8UkKwrPdu12kMoaVc9RB3s=)
7: ruyO6zUfbaRsGVkfFZtSsnxMh1s.roa (hash: zoSCjiMf6V8kppFFwtfWmMhnEG6ujkudnMTWLbB1XSc=)
8: xkh0_qQROZrSh7wQT28dLg374SY.roa (hash: DYUAA1oa5//rqv0OvMnn2Z1Gp+Lzbo3Hx+khO/MXiMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:9f:e2:5b:2e:b3:9b:12:a2:ed:d0:49:b1:69:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Oct 15 09:01:34 2026 GMT
Not After : Oct 16 09:01:34 2026 GMT
Subject: CN=aa6f7989d9ae50779ea158e6d8fbb63ea5e8b469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:32:2d:77:c7:a3:bf:77:97:86:36:69:a7:
2f:be:8c:f3:27:bf:5d:c5:d8:c5:f9:67:c9:90:c5:
e4:f3:53:93:ef:31:aa:03:c8:26:1d:94:10:2d:64:
37:d9:4e:ec:b3:83:6f:92:88:5c:da:3e:1e:cf:5b:
5c:3c:09:61:96:e7:a6:42:de:25:d1:c1:aa:d2:47:
a7:b3:f8:54:2a:86:a8:9f:53:48:01:fd:bf:89:b1:
da:c2:c5:8b:00:63:08:c3:43:ca:bb:1f:34:18:a0:
41:fc:74:0a:3a:6d:2a:33:05:fd:3f:69:ac:26:1a:
1d:51:40:6b:fc:94:8a:7d:e1:b4:50:72:4b:7a:d9:
91:27:9d:74:67:80:b5:1f:1b:96:28:4e:45:9f:8d:
85:92:8d:62:bf:a4:75:16:32:8e:87:50:fa:3b:35:
70:3e:1c:94:b4:c9:3a:54:5d:00:df:d9:ab:32:e2:
ea:25:6b:4f:ae:ce:1c:9c:51:f0:16:24:80:bb:91:
25:87:65:4b:db:84:03:f4:b2:07:1d:52:7b:7e:db:
1b:8c:90:83:4f:5e:9a:37:a2:99:3c:26:56:25:cd:
e9:4c:14:53:ab:90:08:4d:f6:27:58:f6:2f:f5:33:
04:02:63:b7:e0:f2:71:fa:e4:c3:fd:3d:7c:c7:11:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6F:79:89:D9:AE:50:77:9E:A1:58:E6:D8:FB:B6:3E:A5:E8:B4:69
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4c:7b:7a:77:69:7b:de:e9:ba:99:d4:bd:e4:d6:6a:08:97:
e5:83:fe:5f:5a:44:3d:3a:ad:68:74:0a:5e:86:4c:7a:dc:29:
e0:5c:9c:9e:ee:3c:dc:ca:01:86:5b:e9:d8:3b:d2:c7:d0:54:
b9:4f:8e:ca:d2:22:ba:44:bf:57:0c:29:0a:08:19:c4:b0:e8:
4c:6b:58:68:c7:ba:51:dd:74:75:6e:3d:58:f5:6e:d0:ea:ce:
19:50:90:6d:6f:94:83:fe:ee:dd:6b:bc:3d:5c:a0:2a:a3:f4:
09:51:eb:f4:1c:37:5d:3d:9c:66:0c:b0:9c:04:43:ef:c2:3d:
9c:ab:58:e3:1e:f5:d7:42:78:5c:21:2d:6e:bd:90:10:6d:f0:
e0:41:f5:49:9d:cc:72:27:5a:09:de:f5:eb:58:35:fb:bf:0a:
e2:68:30:26:12:8e:01:ac:8d:96:a9:bf:54:60:60:b1:06:89:
76:f5:c0:bb:1a:78:40:5c:c4:57:ab:a2:aa:c4:f2:97:96:b5:
91:23:05:5e:f8:c7:45:fa:0e:f4:a6:24:fa:46:08:4f:fd:8a:
35:42:b1:43:34:ec:69:2b:28:a3:93:88:9a:1d:35:fb:97:a3:
09:5c:6e:39:c8:d5:b2:0c:49:ba:a9:2a:73:03:07:43:9c:fa:
a8:76:5b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:08 2026 by rpki-client