Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: lPZGZMLewGXN9jMlTAefs1iShX9nozDM2Gsh5iiVhws=
Subject key identifier: 6E:5E:03:0F:94:05:AE:44:A7:06:A1:F8:D8:57:2E:85:00:E2:DF:48
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 01A15C6798FD03BE5ADF7A7F97A08C5F2B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 1578
Signing time: Wed 21 Oct 2026 03:00:55 +0000
Manifest this update: Wed 21 Oct 2026 03:00:55 +0000
Manifest next update: Thu 22 Oct 2026 03:00:55 +0000
Files and hashes: 1: OVXT6gUHNs92I_TpJokrvNCUI_k.roa (hash: GunbA4sCmSgthfWeCRgymGCKQHjNQ++TdcqNZ9NqpfA=)
2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: /QKeZHp+1BeEdjnKorQX5nyCuxGMTFx30eWnUo0V7BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:67:98:fd:03:be:5a:df:7a:7f:97:a0:8c:5f:2b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Oct 21 03:00:55 2026 GMT
Not After : Oct 22 03:00:55 2026 GMT
Subject: CN=6e5e030f9405ae44a706a1f8d8572e8500e2df48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:53:be:45:bc:12:24:39:11:79:f0:74:8e:f1:
51:24:14:b7:93:90:f0:45:1a:f2:ab:39:d9:6d:e2:
fa:a3:74:dc:95:48:d6:23:2b:62:da:a0:74:ae:41:
bb:1c:61:06:e7:7e:51:db:24:58:71:81:6d:40:37:
50:56:a2:f6:93:45:ae:b8:85:63:3d:51:0c:07:b2:
29:76:9a:df:13:02:f8:59:0a:a3:56:a5:cf:f9:fd:
f4:e4:87:0d:03:7b:64:d3:30:d3:58:cf:72:46:87:
d6:4f:9a:3c:de:46:52:9f:bc:04:71:c8:d4:9d:97:
c8:85:42:78:09:32:35:e6:59:0b:ae:e8:96:ad:7e:
bd:02:4d:72:18:bf:91:94:eb:ff:c7:00:2e:d7:a1:
bf:d2:2f:eb:73:b4:8e:d0:71:44:fd:a0:43:e0:6b:
44:6d:03:dd:a9:a0:90:64:b0:25:9e:32:e5:af:bd:
91:66:48:17:7c:f8:7b:38:a2:8b:7d:b4:fe:5f:07:
ba:19:7e:72:17:32:f0:86:0f:72:65:f0:0d:73:2d:
e2:63:f3:df:aa:2c:cc:ff:d6:2d:dc:90:aa:59:50:
aa:1b:8b:c0:55:3a:b4:86:80:4f:b6:ed:98:1e:bb:
29:64:6e:55:e1:52:5a:2e:e1:15:c4:25:fc:cd:f6:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5E:03:0F:94:05:AE:44:A7:06:A1:F8:D8:57:2E:85:00:E2:DF:48
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:28:f0:59:b7:ee:54:99:d2:6c:dc:6d:59:dc:b0:3a:85:74:
f4:3f:b8:f1:04:b4:0d:32:5b:8e:a3:9e:96:5a:84:e8:a5:5c:
9f:d2:13:9b:7e:35:54:ee:ea:0a:6f:83:f0:fd:65:0d:34:91:
31:45:69:26:b0:20:ab:26:4f:9c:16:e6:5c:30:ee:a4:ac:3a:
a8:08:78:de:22:20:40:ce:d9:8c:00:e9:f0:15:9c:a5:34:98:
75:50:9e:d2:f1:34:7e:4e:16:a8:5f:9b:47:76:6e:93:78:34:
41:d1:25:69:97:6c:e0:bd:e4:9c:05:21:5a:14:a2:69:35:aa:
28:c0:fb:eb:6a:ab:ce:ac:21:1e:a5:b3:b8:96:95:eb:5c:65:
ef:44:6c:55:18:8a:b4:79:c7:ec:12:69:c1:e6:7d:5d:35:e4:
78:bc:9d:88:d7:62:62:43:5c:84:78:f4:95:06:90:75:3c:34:
95:bf:44:3f:2b:46:dd:be:b7:80:16:d1:b1:f9:be:3b:22:76:
e9:e8:10:d3:58:cd:43:84:27:a8:84:66:b8:1d:b0:fc:ba:70:
24:4b:c7:25:5a:c5:8e:b9:b5:cb:82:6b:f6:75:8f:7b:f5:f9:
37:e2:13:12:e5:94:cc:46:db:cb:f1:dd:08:11:0d:4c:86:7d:
01:c2:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 08:01:12 2026 by rpki-client