Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: yvhXrsz9jgm7Ejgr1nKtYVaqQhwfqutMBjpOmRSTa0g=
Subject key identifier: 4D:1B:12:48:1F:65:41:46:84:C9:AF:78:8F:70:1C:76:B4:67:CC:64
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 019FAD885F0275C75F916B797BC6E6F7CA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 11:00:23 +0000
Manifest this update: Wed 29 Jul 2026 11:00:23 +0000
Manifest next update: Thu 30 Jul 2026 11:00:23 +0000
Files and hashes: 1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: NbvHtCzzh/bX7RDmK9CfSeuk5G2n4uXFyE5CVPQKfEc=)
3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:5f:02:75:c7:5f:91:6b:79:7b:c6:e6:f7:ca:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Jul 29 11:00:23 2026 GMT
Not After : Jul 30 11:00:23 2026 GMT
Subject: CN=4d1b12481f65414684c9af788f701c76b467cc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:44:83:84:28:f5:e4:ec:36:e0:0f:4f:d4:
b2:98:15:f2:e9:0e:1c:19:c8:0f:97:49:02:fa:0d:
99:46:23:3e:e5:48:4a:37:6b:71:92:ab:7e:77:89:
ad:a4:99:62:ed:d7:9a:70:ea:ea:d9:ef:cc:a5:54:
6b:0f:f0:f4:23:aa:86:55:9d:34:af:2f:53:36:d8:
6a:e5:42:90:26:44:57:5e:2d:80:09:4e:92:d6:87:
9e:8c:d1:fe:01:9f:11:65:cc:dc:f9:ca:25:34:76:
6e:b0:6e:fc:36:53:51:6f:84:8a:cf:82:c0:bb:0c:
af:47:f6:d3:aa:0b:3c:9e:6c:d1:bd:45:41:3b:c2:
39:5e:99:0c:06:e6:93:27:db:48:c5:b5:75:f5:62:
35:f9:4e:be:2a:3e:29:95:7d:a1:98:df:e3:5f:6a:
fd:89:34:c7:ff:ad:31:c0:74:35:84:74:e4:24:a5:
2a:a0:9a:29:7d:99:20:b2:28:b8:b3:ea:b4:6e:d6:
84:ca:65:ff:01:37:60:02:ea:1a:81:62:9b:ca:a9:
92:63:09:a6:c9:dd:f9:22:5c:9d:ad:33:0b:ad:f5:
52:56:35:c6:12:fd:62:c4:c9:16:d7:05:1c:ea:bb:
22:3d:5d:48:9f:8c:ac:d7:82:6e:7f:c1:6c:4a:fe:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1B:12:48:1F:65:41:46:84:C9:AF:78:8F:70:1C:76:B4:67:CC:64
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b5:e8:04:17:df:4b:d2:4b:2e:f3:a7:7f:43:cb:e2:e5:9c:
1e:34:a6:53:b8:f6:9b:3c:85:a3:33:30:46:90:6a:f7:76:4d:
5e:a6:85:28:6c:4d:71:5a:b5:82:10:16:fa:b2:b9:95:a3:f8:
2d:b8:03:30:ec:0a:7a:2d:94:78:7e:ed:13:ad:4e:0c:c9:b8:
74:cf:46:d7:d5:c3:8f:2a:9c:92:72:23:b4:97:a0:0c:80:90:
83:69:80:e3:43:52:69:2d:92:3a:28:cc:90:2a:97:d9:d8:87:
26:c7:a8:66:bd:3a:63:b5:b4:7f:dc:35:07:37:ab:a5:e2:ab:
77:eb:e1:24:ad:5a:69:9a:ff:b4:7b:d3:32:b0:05:7a:61:8e:
ef:e5:d1:48:d4:c5:79:d7:8f:a7:b0:39:2a:66:ae:13:7f:47:
bc:af:65:18:ce:84:1a:b7:1b:92:57:88:11:75:b8:65:66:51:
c0:9d:74:42:3b:50:7c:79:cf:ac:c1:4b:27:ce:1d:e7:83:fd:
d6:18:2f:a6:2b:fd:58:ef:a9:51:60:e9:7f:fe:f8:f2:4c:f8:
2a:4d:48:2a:0e:2e:53:94:b9:74:50:82:c4:f4:b1:67:c3:3d:
20:b4:40:0d:98:07:4a:02:de:b3:8f:d8:24:e2:87:e9:2b:ee:
7e:df:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:09:58 2026 by rpki-client