Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
File: yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json)
Hash identifier: bzU8Npf+HitPPySpezQjhQd27gncowbBQUXP86TC+C0=
Subject key identifier: 52:24:41:BC:1C:C5:2B:8E:1A:6F:B1:AB:D9:92:22:EE:F5:43:0B:C1
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 01A06E704E573627C59AA327D28F99E0D9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
Manifest number: 070A
Signing time: Fri 04 Sep 2026 22:00:48 +0000
Manifest this update: Fri 04 Sep 2026 22:00:48 +0000
Manifest next update: Sat 05 Sep 2026 22:00:48 +0000
Files and hashes: 1: DHHudebUM3yKARxlaZ2YpDdj_10.roa (hash: 4IZZF7kG21QLytTXVu8J+ZgosQ4Y4zImjPdBHl+JNss=)
2: eCIxVJBlZJg4A1PAGkOvPg7aiUM.roa (hash: DjYNeiW4ymro6Kp8UT3pCBgwHWIhN9hxIR+IH3BcZMQ=)
3: i_xckZzjEkRw31aSrJAsV3dFCLE.roa (hash: autrGXMDWT9GWUylEMorom4KkZ2EMR11IzzFRFDlO9U=)
4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: esm7/3tANTVlmRT+kzokKYqDFiidRcYu91uKGDdj0vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:4e:57:36:27:c5:9a:a3:27:d2:8f:99:e0:d9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: Sep 4 22:00:48 2026 GMT
Not After : Sep 5 22:00:48 2026 GMT
Subject: CN=522441bc1cc52b8e1a6fb1abd99222eef5430bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:e0:32:06:c4:57:5f:05:37:78:a3:9b:fd:
2c:79:99:e5:33:c1:d4:76:73:ca:fa:51:ee:7c:2f:
8d:eb:4e:85:eb:03:22:f3:2b:97:19:f3:cc:bd:a8:
8f:ed:08:25:aa:cc:d9:16:8f:b5:2f:cc:43:ab:c5:
80:10:eb:af:d1:d8:51:26:3f:ac:8f:81:6a:04:da:
1c:ad:80:f7:5a:4c:41:28:98:c6:3f:b8:2b:4c:59:
2b:0e:52:71:d3:c0:21:33:4e:4a:94:18:6f:f6:21:
ad:77:93:89:7a:47:9f:db:84:fe:41:5e:14:55:19:
f0:26:17:6b:71:8e:f5:93:42:34:ce:2f:10:a8:03:
45:d7:6f:2a:7b:df:5e:a4:ca:fd:85:ed:b6:67:9f:
4a:e0:cd:e4:f6:54:c2:46:df:23:1a:08:ae:b7:a8:
df:0c:7b:88:5f:8c:2d:a8:7a:9a:79:e9:cd:d2:02:
e5:ef:13:33:1a:f4:34:56:37:08:bb:c2:1c:a9:0e:
46:e5:06:b9:47:e4:e9:99:ba:de:35:65:c9:44:3f:
54:61:74:58:19:d2:ac:ed:77:48:24:88:28:a0:82:
65:40:cd:c3:02:9b:23:f7:05:55:4d:45:6a:d7:3e:
9b:06:2e:a1:86:e0:a2:f4:8f:b0:6d:f4:2a:63:4d:
85:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:24:41:BC:1C:C5:2B:8E:1A:6F:B1:AB:D9:92:22:EE:F5:43:0B:C1
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a8:93:40:4e:9a:9a:28:dc:0b:ac:e6:bc:bb:59:75:7a:24:
a8:16:50:87:4e:0a:e7:1c:40:35:41:50:76:9d:2c:22:13:8c:
c5:02:95:c1:e5:09:4e:b6:ad:c3:23:5a:90:da:ee:86:ad:46:
5d:7d:29:a3:59:8c:ef:61:60:82:c1:58:bd:b6:c1:a3:16:17:
7d:7f:15:82:2d:46:24:b3:02:30:12:c7:01:db:61:eb:02:40:
b5:92:7c:d7:51:42:8d:58:9e:53:1d:15:75:0a:7e:39:36:b5:
10:81:54:f9:d2:fe:d0:fb:01:8a:ef:2d:9a:60:ab:e5:26:2d:
3a:9f:b9:2c:58:66:bd:29:b4:f0:a4:ca:82:28:59:36:3f:78:
1c:4c:55:0e:9a:8a:a6:d3:29:ea:31:c0:8b:71:b6:10:30:e9:
d4:0f:2d:bd:75:2d:78:d4:cb:c7:47:eb:32:a1:7e:d8:fb:96:
6c:08:08:12:5f:4b:bb:f1:91:77:37:b6:8e:9b:f3:6e:5b:4c:
28:df:99:7d:15:da:94:88:84:ea:51:94:59:e5:c9:94:32:bc:
d1:0d:4b:b8:36:6e:f9:dc:f5:d3:b2:6c:5a:5a:92:55:0e:ce:
5a:28:d0:da:50:38:67:e0:01:08:88:9a:4c:45:88:27:56:17:
ba:12:f0:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBucE5XNifFmqMn0o+Z4NnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzQxMzJjMTJmODY5OTVmZTI4OTNlNGRlYTcyNjM4ZDI2
MDEwNzkwHhcNMjYwOTA0MjIwMDQ4WhcNMjYwOTA1MjIwMDQ4WjAzMTEwLwYDVQQD
Eyg1MjI0NDFiYzFjYzUyYjhlMWE2ZmIxYWJkOTkyMjJlZWY1NDMwYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv7gMgbEV18FN3ijm/0seZnlM8HU
dnPK+lHufC+N606F6wMi8yuXGfPMvaiP7QglqszZFo+1L8xDq8WAEOuv0dhRJj+s
j4FqBNocrYD3WkxBKJjGP7grTFkrDlJx08AhM05KlBhv9iGtd5OJekef24T+QV4U
VRnwJhdrcY71k0I0zi8QqANF128qe99epMr9he22Z59K4M3k9lTCRt8jGgiut6jf
DHuIX4wtqHqaeenN0gLl7xMzGvQ0VjcIu8IcqQ5G5Qa5R+TpmbreNWXJRD9UYXRY
GdKs7XdIJIgooIJlQM3DApsj9wVVTUVq1z6bBi6hhuCi9I+wbfQqY02FGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIkQbwcxSuOGm+xq9mSIu71QwvBMB8GA1UdIwQY
MBaAFMh0EywS+GmV/iiT5N6nJjjSYBB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84OWNlNzQtOTM4MC00Y2NmLWE2MTUt
NGMwOGI0YWEyMGZlLzEveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84OWNlNzQtOTM4MC00Y2NmLWE2MTUtNGMwOGI0YWEyMGZl
LzEveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqiTQE6a
mijcC6zmvLtZdXokqBZQh04K5xxANUFQdp0sIhOMxQKVweUJTratwyNakNruhq1G
XX0po1mM72FggsFYvbbBoxYXfX8Vgi1GJLMCMBLHAdth6wJAtZJ811FCjVieUx0V
dQp+OTa1EIFU+dL+0PsBiu8tmmCr5SYtOp+5LFhmvSm08KTKgihZNj94HExVDpqK
ptMp6jHAi3G2EDDp1A8tvXUteNTLx0frMqF+2PuWbAgIEl9Lu/GRdze2jpvzbltM
KN+ZfRXalIiE6lGUWeXJlDK80Q1LuDZu+dz107JsWlqSVQ7OWijQ2lA4Z+ABCIia
TEWIJ1YXuhLwuQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:36:01 2026 by rpki-client