
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: 1+nt6cm1HRaX3kZvKrrmfCKtKLmb2LMnyx4hc67sq9M=
Subject key identifier: 2D:8F:62:03:19:67:0B:BC:19:51:1C:E4:21:15:78:52:81:85:BB:8B
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 01A002B89E0402EEE33A738EF153928DD5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 14C5
Signing time: Sat 15 Aug 2026 00:00:48 +0000
Manifest this update: Sat 15 Aug 2026 00:00:48 +0000
Manifest next update: Sun 16 Aug 2026 00:00:48 +0000
Files and hashes: 1: OVXT6gUHNs92I_TpJokrvNCUI_k.roa (hash: GunbA4sCmSgthfWeCRgymGCKQHjNQ++TdcqNZ9NqpfA=)
2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: MxJqVe/3d57kAmVrdrrx3IysmS7cGlpcZiyFw1J9B5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:9e:04:02:ee:e3:3a:73:8e:f1:53:92:8d:d5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Aug 15 00:00:48 2026 GMT
Not After : Aug 16 00:00:48 2026 GMT
Subject: CN=2d8f620319670bbc19511ce4211578528185bb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:f1:0b:6f:1e:89:65:b6:fe:55:fd:08:22:
72:2c:36:2e:8a:c5:a5:42:01:d0:b1:eb:47:06:10:
cc:c3:4b:1d:9f:71:99:e6:48:a4:bc:ff:97:f4:47:
3b:37:81:49:62:e1:43:a9:c7:62:fa:aa:55:da:15:
dd:02:98:92:55:e2:ef:d4:1b:fb:7d:a1:65:12:69:
26:76:0d:93:24:01:14:6b:b6:10:5a:ad:5d:1b:a1:
70:7e:64:ba:e9:bc:c7:88:ab:04:f2:29:29:be:75:
b9:46:b4:e8:a1:e1:20:02:92:26:31:75:47:af:66:
29:08:80:1d:4f:e7:4b:1a:ad:77:3b:31:ef:b5:58:
28:7d:69:81:28:a3:f2:8a:4f:c9:38:6e:04:5e:5c:
fa:d8:0b:45:c1:2e:ad:d4:71:63:95:88:9d:25:53:
9a:37:90:a2:2a:43:67:b2:c7:ae:29:8a:8d:dc:d0:
24:8d:c5:2c:a2:fb:26:69:d4:37:32:40:6c:e2:f7:
1a:65:a6:5b:f2:f1:63:2b:92:f9:54:1e:32:8e:7d:
34:b4:da:c7:2c:03:3a:12:42:8b:14:11:cc:fb:83:
47:ba:c8:b7:ad:e2:e5:50:6f:e4:ab:85:22:b8:58:
6a:fd:1c:89:93:00:61:2a:09:e1:56:50:fe:62:3c:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8F:62:03:19:67:0B:BC:19:51:1C:E4:21:15:78:52:81:85:BB:8B
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ee:f1:15:5e:23:c9:14:42:dc:ca:f1:04:18:68:56:c6:c5:
69:e6:5f:ef:36:eb:10:5e:d6:6f:bb:03:2f:93:2e:29:f0:64:
54:94:cd:5d:7b:1a:f3:e6:8e:e5:53:0c:08:d1:33:8b:95:38:
c7:eb:6a:3d:5c:cf:73:68:05:b7:80:29:92:4b:13:8a:21:37:
14:58:68:b3:96:51:7b:52:b5:3b:89:a2:c3:ee:c4:88:9a:e4:
19:ac:98:49:40:1f:bf:e2:57:1c:6d:29:e6:ef:97:62:b3:43:
b2:7a:6f:70:f8:79:0a:60:88:4f:fe:85:4c:8b:13:79:ad:d6:
f2:4b:da:4b:31:79:ed:32:34:96:97:bf:33:60:73:53:98:a6:
12:37:f8:1f:f1:b7:64:bd:e9:e5:37:a4:01:6a:8e:0e:23:4c:
53:15:db:62:37:93:3b:27:d3:eb:51:dd:3a:4e:c4:3a:15:dd:
bb:32:90:da:d9:04:ef:98:90:05:5e:52:a1:d9:0d:d4:02:62:
7a:71:67:ba:af:af:cf:33:09:f0:5b:6e:92:3c:ae:a8:6e:a8:
ee:5d:b4:0f:68:ef:2a:e0:20:52:17:ff:1c:64:4f:31:e2:ed:
68:60:e1:4f:00:eb:2a:29:4c:6a:8d:e7:a5:c0:56:24:74:07:
70:3f:24:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:46:27 2026 by rpki-client