Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
File: YmqokTLSpoTY0qGj9-QPIjRjbzg.mft (raw, json)
Hash identifier: AE9Ukh6J9qBzKEFwGCRo9JymJsXeGhvnlDj5tfHB6vU=
Subject key identifier: BB:FD:7E:D8:21:2E:75:94:3C:62:19:50:05:3E:C5:A9:BF:7B:59:65
Authority key identifier: 62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
Certificate issuer: /CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Certificate serial: 01A001A66393E763A56C30F751C6B95AF533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
Manifest number: 17DD
Signing time: Fri 14 Aug 2026 19:01:16 +0000
Manifest this update: Fri 14 Aug 2026 19:01:16 +0000
Manifest next update: Sat 15 Aug 2026 19:01:16 +0000
Files and hashes: 1: WCWp0vmGJYt70q-YkfGeiqk74HA.roa (hash: WWuYuPcraJwNveZ8Pjl950Glgpk1p9KqCUVVhSjy+fs=)
2: YmqokTLSpoTY0qGj9-QPIjRjbzg.crl (hash: gXyW3O1/CzSSTa1dSGoFguv9StGmLg2givI/flepLTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:63:93:e7:63:a5:6c:30:f7:51:c6:b9:5a:f5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Validity
Not Before: Aug 14 19:01:16 2026 GMT
Not After : Aug 15 19:01:16 2026 GMT
Subject: CN=bbfd7ed8212e75943c621950053ec5a9bf7b5965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:cc:75:ce:cb:89:08:b3:53:71:d1:d1:c9:
8d:08:4b:2e:eb:56:88:34:98:0d:4c:28:a2:47:62:
a4:52:96:c9:01:08:5a:13:d3:ea:99:71:ab:79:5b:
19:70:6f:b0:3a:db:79:77:93:2d:19:da:5f:01:94:
51:9e:84:62:78:da:d0:0b:50:ab:27:59:51:30:f8:
00:03:9d:4a:56:e7:f5:33:63:e1:5d:ee:12:de:22:
37:47:fa:fa:95:a2:f0:20:44:c4:d8:3a:14:40:7a:
c1:9d:11:2f:4e:10:1f:9b:e9:51:ec:93:b3:ca:3f:
36:e3:b2:3e:2a:81:1b:0d:ed:64:c7:81:d5:ba:40:
36:8d:eb:f2:17:7e:14:9a:5c:d4:86:ae:74:dd:8f:
29:f1:e0:e9:c4:9e:bb:84:8f:1b:11:3d:9c:c2:86:
8d:ed:d4:5a:6c:fc:5f:9a:df:74:e4:49:ec:74:52:
8b:bb:e2:c7:7c:0d:50:36:b0:b8:48:fe:d0:5d:f8:
3b:3f:4c:db:46:c1:ca:ae:6a:be:ee:9f:9a:71:fb:
4d:66:0a:87:ce:f6:a3:33:9a:c9:dc:cf:76:02:b2:
67:bd:01:8e:28:fc:ce:8a:e7:1f:c3:e5:ec:06:02:
72:e7:fa:aa:ea:bc:a8:de:54:8d:92:63:d6:19:2d:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FD:7E:D8:21:2E:75:94:3C:62:19:50:05:3E:C5:A9:BF:7B:59:65
X509v3 Authority Key Identifier:
keyid:62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3e:65:f6:60:ca:66:25:3d:72:6b:66:51:c7:24:08:f6:bc:
b7:5b:90:05:8c:28:53:b8:55:ff:08:75:71:39:48:37:47:9e:
7d:b8:00:57:fb:7b:09:e2:f5:c0:85:22:fb:15:7f:4d:3c:7c:
fe:70:a8:42:06:1a:35:5f:fc:32:0c:c8:39:b0:be:2b:42:6e:
d3:0c:69:ed:4d:4e:79:db:ad:50:a6:33:aa:bc:78:d1:c1:aa:
ad:d6:83:d6:75:0c:18:f8:0f:a6:0c:91:f2:14:04:66:7c:04:
09:5c:2d:b3:ae:5b:95:89:b6:d0:53:e8:ba:25:84:18:0e:71:
7b:2a:21:35:05:9a:2d:89:fa:9e:a8:43:14:74:15:60:90:ef:
07:67:8a:82:7d:a3:6d:7e:a5:7e:b5:d7:f8:aa:e5:6f:7c:03:
32:75:21:59:43:db:b1:e2:4e:ef:ff:8a:45:f5:b4:ca:42:5d:
77:91:68:1e:df:56:9f:b2:95:32:5f:8c:34:32:e9:4a:8e:3d:
96:da:8d:88:a2:46:c3:02:76:8c:87:a6:3f:ba:18:96:7b:25:
fd:30:9a:26:27:06:3d:cf:ed:3d:a7:ba:bf:9f:35:fc:24:66:
e4:7d:99:01:a2:29:26:f0:4f:f5:04:b8:96:45:c3:ff:fa:fb:
b1:87:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:00 2026 by rpki-client