Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier: muMmD4oWvzkVcZBTss4N4sDaaGJRdCARGaW0OTG83KM=
Subject key identifier: 34:30:A9:87:10:12:94:F2:BD:2B:22:6E:FF:84:82:85:66:6E:13:71
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 019E59379E55BA9F200DDBC3D7E8346FEE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number: 074D
Signing time: Sun 24 May 2026 09:01:17 +0000
Manifest this update: Sun 24 May 2026 09:01:17 +0000
Manifest next update: Mon 25 May 2026 09:01:17 +0000
Files and hashes: 1: Rmbqki6sfeVONmSCUKVbSwnLV2w.roa (hash: m02OGs1ERDq2Tep5VBBDirUwK9M85zv/SGcl5/T9Gng=)
2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: vsi70kSmwlcT1GAjsRZ0d0SgoBCPSs+VxLMBr0txU8o=)
3: YrjDjaI3_Q6KPQ90f8RoYBEvTqI.roa (hash: VmD17BnA3G7W1dMkZraFPy0h1sdRJ/jQerJj3HVgUI8=)
4: mEMBpqCiAZX-66IM2v28OLBYmaU.roa (hash: D0q/tQQJTMQWefAkqZBJ1Tlw8AdCPKqxL86ZtoZ1fgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:59:37:9e:55:ba:9f:20:0d:db:c3:d7:e8:34:6f:ee:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: May 24 09:01:17 2026 GMT
Not After : May 25 09:01:17 2026 GMT
Subject: CN=3430a987101294f2bd2b226eff848285666e1371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:17:48:0c:6d:f0:5a:c3:0c:1a:ae:2a:96:
20:ad:8c:0d:a9:d8:34:a9:86:27:93:a3:b3:cc:0b:
20:38:da:5c:69:3e:92:0c:00:9b:21:c3:38:87:6a:
62:de:74:a9:b5:3c:7c:48:f8:ae:42:3a:4e:3d:36:
67:f3:8a:8d:f0:94:fa:52:dd:00:d6:1c:b5:53:ed:
93:64:0a:d9:6f:5e:4a:de:47:c7:40:dc:46:e8:1e:
7f:19:3c:6d:c7:1f:f9:0a:d4:7c:fe:65:4b:be:be:
2c:a9:a9:6e:d9:d8:30:bc:59:ff:c3:b0:08:2e:eb:
22:a2:bb:53:ea:1c:44:05:88:1b:12:1e:29:41:f5:
2b:20:fd:f9:d6:38:42:14:af:b0:9d:81:46:4e:f6:
10:9e:11:1f:b3:64:b9:17:fa:e2:40:ff:fe:1e:98:
9c:eb:43:87:c9:05:41:47:ce:09:cf:1c:8f:65:e9:
0b:48:41:91:61:20:47:32:07:03:6a:bd:fd:fe:75:
17:7b:1b:5b:6c:10:7f:98:86:f0:a4:4c:6c:64:a7:
4e:2f:35:9a:6e:7e:9b:f8:e4:a1:96:3f:46:1e:19:
e4:43:b3:91:2b:7d:ed:e8:eb:0a:78:ce:08:70:01:
34:6a:91:09:9c:e8:7c:b0:4e:ae:a1:4f:5d:ce:19:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:30:A9:87:10:12:94:F2:BD:2B:22:6E:FF:84:82:85:66:6E:13:71
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e7:f3:b9:7d:a9:15:4d:78:3d:85:15:79:41:d6:2a:6d:26:
ff:34:ff:0c:d3:96:6c:2f:16:c5:0c:e1:66:29:4c:f0:2f:2f:
88:71:1d:52:14:05:78:5b:13:6c:19:07:cd:ed:ce:84:50:ab:
33:3a:98:9a:14:e0:0e:92:7c:69:d8:5c:26:ee:09:a9:03:f4:
62:d2:b8:0b:6d:12:98:de:16:1b:b1:c8:8e:e7:7d:f2:ec:6a:
24:b8:93:d9:87:14:5c:14:c2:08:b3:e4:e3:4c:9a:fe:86:dc:
91:13:d4:94:6b:d3:f4:15:a6:2a:63:f2:94:97:37:d5:16:10:
5c:39:dc:93:fc:37:97:92:c8:43:a0:6b:51:b3:06:40:5e:c9:
5b:9a:3a:be:ce:12:62:67:bb:2f:26:3f:c2:3a:4b:17:9e:d5:
3f:b5:90:b3:0a:7c:1e:1e:19:5f:f4:80:c9:13:6a:a7:94:0e:
bb:19:f8:70:a8:47:7a:f5:c9:e7:89:fb:f1:cd:cd:30:fb:c7:
b9:40:c5:98:24:77:a7:97:0b:ca:2e:c1:08:fc:90:4d:6f:c1:
2f:5a:71:4b:96:dc:42:1b:36:af:ed:7a:4f:67:0f:ea:21:76:
7a:1c:96:62:03:75:bc:37:86:b0:65:4a:e8:af:b8:74:ff:a3:
76:37:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:48:33 2026 by rpki-client