Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: jUp1BnYWUBoHbWdtOGgQpdz0FzPh0mgFumc2NN2i9Uo=
Subject key identifier: E2:4F:08:F0:38:FB:BF:82:B4:7E:21:A1:E4:C3:36:D2:E6:9E:86:5B
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 019CAAFD57E734A9CCA60F6D8B812669B0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:55 +0000
Manifest this update: Sun 01 Mar 2026 20:00:55 +0000
Manifest next update: Mon 02 Mar 2026 20:00:55 +0000
Files and hashes: 1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: q+i9Pf1oBZ/c7igevyaBDJOGN/TQ1q1BEWly4QuVemE=)
3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:57:e7:34:a9:cc:a6:0f:6d:8b:81:26:69:b0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Mar 1 20:00:55 2026 GMT
Not After : Mar 2 20:00:55 2026 GMT
Subject: CN=e24f08f038fbbf82b47e21a1e4c336d2e69e865b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:99:72:41:b9:b9:ba:1d:fb:b2:3e:17:fb:
f7:ec:fe:ab:46:4b:ea:3e:53:1c:ec:8d:19:82:16:
f4:bb:47:9a:20:9a:b1:8d:36:f6:1b:e9:a7:57:42:
9a:98:c2:26:46:15:c9:3f:df:d8:75:f9:b9:a5:48:
6f:cf:06:64:bb:7e:ad:e0:d2:fc:1a:a5:b9:69:5e:
da:2b:fa:9a:bb:f9:97:92:7b:fb:51:d2:18:06:f1:
b2:3a:8a:4f:2d:f8:ab:f5:7a:a1:c3:e1:2d:85:e6:
92:e4:ef:be:4d:52:2d:0f:15:c6:de:11:63:fc:73:
8b:8d:1c:22:0a:5b:db:36:19:3d:97:18:bf:fb:a9:
b7:54:46:66:93:98:6e:26:65:e5:98:55:14:41:c3:
bd:eb:d9:7c:bf:a7:bd:6b:67:5e:55:63:8d:63:d6:
55:da:38:3a:5a:9b:07:7c:70:54:7e:b9:5a:53:ea:
6d:fd:0c:a4:a0:fa:73:3b:68:69:dc:7e:db:d8:27:
06:95:18:36:8e:33:39:dd:69:c1:03:b9:e5:af:84:
97:6a:83:14:3d:59:82:ea:b2:7f:65:e3:2c:46:bf:
16:f0:c7:da:d8:c4:3d:f6:bd:8d:62:1a:8d:d6:b7:
eb:97:f9:2c:78:55:c5:6b:4c:e6:0b:fd:57:a2:2b:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4F:08:F0:38:FB:BF:82:B4:7E:21:A1:E4:C3:36:D2:E6:9E:86:5B
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8c:7e:be:38:0e:d8:e8:b6:2f:f6:4c:c3:44:11:ba:e2:0d:
61:b8:44:5f:d4:d8:4a:dd:e8:d4:a5:d1:10:91:b5:d7:e9:13:
20:dc:c2:8e:26:1f:14:3f:6d:c8:d9:93:7a:d6:91:aa:3e:62:
22:a5:5b:f3:9a:33:89:08:e1:c9:52:22:9f:1f:59:9f:09:aa:
52:ec:cf:46:3e:58:06:d4:e3:59:51:cd:fb:6a:d7:db:62:59:
67:75:0d:3f:fc:cd:12:12:83:ea:83:44:33:29:40:fd:3d:1b:
b0:23:4e:1b:5c:e7:cb:e2:85:06:7a:c6:df:73:d9:94:32:be:
78:7f:f3:cc:7b:fc:09:80:ef:89:36:d8:3f:58:d8:22:b3:41:
81:6f:2e:c0:3c:e0:ca:2f:06:c7:d1:75:10:58:fc:38:4a:c6:
f7:42:cd:0d:ca:55:c1:ab:4e:cd:59:4e:1a:f8:86:c5:54:b7:
be:c8:e6:7f:f5:42:a3:f3:fd:97:2e:c2:69:f1:0c:fa:e7:9d:
e6:8d:15:00:00:51:83:f2:69:27:a3:ef:28:67:e4:21:f6:4d:
2e:f2:9d:9e:2a:fa:b0:87:d7:04:e6:89:73:4b:f7:d5:4e:8a:
f0:2e:30:c7:7f:45:66:6e:2f:1a:c2:db:82:86:28:66:33:4b:
7e:7e:4b:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/VfnNKnMpg9ti4EmabCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTE3YTFlNmY2OTljMzIyYjZiOTgzNDk0ZjQyYzIyMDkx
Mjc1NTMwHhcNMjYwMzAxMjAwMDU1WhcNMjYwMzAyMjAwMDU1WjAzMTEwLwYDVQQD
EyhlMjRmMDhmMDM4ZmJiZjgyYjQ3ZTIxYTFlNGMzMzZkMmU2OWU4NjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mSZckG5ubod+7I+F/v37P6rRkvq
PlMc7I0Zghb0u0eaIJqxjTb2G+mnV0KamMImRhXJP9/Ydfm5pUhvzwZku36t4NL8
GqW5aV7aK/qau/mXknv7UdIYBvGyOopPLfir9Xqhw+EtheaS5O++TVItDxXG3hFj
/HOLjRwiClvbNhk9lxi/+6m3VEZmk5huJmXlmFUUQcO969l8v6e9a2deVWONY9ZV
2jg6WpsHfHBUfrlaU+pt/QykoPpzO2hp3H7b2CcGlRg2jjM53WnBA7nlr4SXaoMU
PVmC6rJ/ZeMsRr8W8Mfa2MQ99r2NYhqN1rfrl/kseFXFa0zmC/1XoivQ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJPCPA4+7+CtH4hoeTDNtLmnoZbMB8GA1UdIwQY
MBaAFGIReh5vaZwyK2uYNJT0LCIJEnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQt
NWJjYzg0NThhYTJjLzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQtNWJjYzg0NThhYTJj
LzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArox+vjgO
2Oi2L/ZMw0QRuuINYbhEX9TYSt3o1KXREJG11+kTINzCjiYfFD9tyNmTetaRqj5i
IqVb85oziQjhyVIinx9ZnwmqUuzPRj5YBtTjWVHN+2rX22JZZ3UNP/zNEhKD6oNE
MylA/T0bsCNOG1zny+KFBnrG33PZlDK+eH/zzHv8CYDviTbYP1jYIrNBgW8uwDzg
yi8Gx9F1EFj8OErG90LNDcpVwatOzVlOGviGxVS3vsjmf/VCo/P9ly7CafEM+ued
5o0VAABRg/JpJ6PvKGfkIfZNLvKdnir6sIfXBOaJc0v31U6K8C4wx39FZm4vGsLb
goYoZjNLfn5LwQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:11 2026 by rpki-client