Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: ybca+1sTnrwVgBUZZc0poN8wk7dvEd0nJdAHPQ14f3U=
Subject key identifier: 36:01:61:CA:A3:45:82:8B:40:0D:C9:FC:B5:9A:62:30:FE:66:DF:ED
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 019EC3DC0883E4E53ED7D131EE4E51685B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 195C
Signing time: Sun 14 Jun 2026 02:00:37 +0000
Manifest this update: Sun 14 Jun 2026 02:00:37 +0000
Manifest next update: Mon 15 Jun 2026 02:00:37 +0000
Files and hashes: 1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: SeS71jh2j+LTthLBTI+tMi0KAoHVo4p3KfFEtF1fy0U=)
3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:08:83:e4:e5:3e:d7:d1:31:ee:4e:51:68:5b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Jun 14 02:00:37 2026 GMT
Not After : Jun 15 02:00:37 2026 GMT
Subject: CN=360161caa345828b400dc9fcb59a6230fe66dfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:29:a9:d4:bc:ff:03:91:4b:77:9c:ce:1f:
44:10:40:4c:22:75:45:78:99:4c:7f:7d:83:8e:44:
ca:2e:49:98:50:4c:9a:a5:c6:63:be:4f:2f:dc:bc:
df:5b:bb:a5:55:cf:73:c4:a2:c0:ed:28:82:20:a2:
76:f7:70:f0:53:77:3e:da:21:ad:30:e7:03:37:fd:
59:a3:07:26:a6:4d:b8:f7:16:9c:d7:9e:f1:db:c4:
dc:68:dc:39:f2:c6:88:98:48:47:c8:3d:cc:0e:16:
78:9c:c5:54:2a:1f:4d:b5:d4:a7:88:6e:58:6e:4b:
6e:ab:7c:43:5f:b6:a4:1d:9c:69:5a:77:93:da:79:
e9:2b:70:4c:4b:a2:9f:55:8e:0c:48:24:3f:65:4d:
4c:f2:82:12:af:f1:c0:96:ae:d7:1d:83:7f:e0:94:
04:ab:c3:06:2e:f6:09:0e:81:55:36:88:21:87:4d:
d2:15:42:50:b7:59:3e:0d:4c:c6:4a:1a:3a:3b:ce:
c5:bb:91:2f:51:b2:b8:00:c5:cb:84:6f:11:d0:bb:
db:73:9b:28:7e:f0:a5:9f:70:47:2f:9f:6b:ab:39:
fc:95:b8:0a:e8:3a:f7:c8:89:8e:ea:ba:a2:bf:e1:
79:e1:2d:82:13:19:a4:f9:5c:11:a7:95:37:57:28:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:01:61:CA:A3:45:82:8B:40:0D:C9:FC:B5:9A:62:30:FE:66:DF:ED
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9c:1e:1a:cf:23:bd:26:c9:2a:b3:6e:ca:1d:c7:ba:d5:70:
80:69:5a:75:c7:78:a5:43:b1:2a:b3:4f:2c:9f:99:9a:c1:87:
6f:d9:08:d6:17:2b:51:de:92:eb:10:e2:e4:2d:03:0f:6d:eb:
19:50:26:b5:ea:73:86:90:40:6f:8c:b1:d8:5e:97:7e:6f:fd:
01:1d:24:b3:45:9b:c5:a2:c2:6c:26:19:33:9e:6a:d5:37:72:
c1:be:79:2e:4a:ae:4b:5d:74:a8:92:d6:b4:1c:d5:98:72:7f:
58:49:8b:3c:27:5b:eb:3a:2a:7e:83:a2:2c:3f:3e:7e:f6:83:
0d:e3:45:1d:80:11:a9:86:34:7b:60:6b:24:b6:fc:d3:96:eb:
48:d6:73:ac:b2:ef:4b:98:05:da:b3:e4:7f:ce:d8:7d:ea:c2:
5d:ba:c6:75:18:18:7c:9e:f6:3a:9f:6b:fd:95:82:74:a1:b7:
7b:48:dd:ec:f5:2d:7c:0f:c8:85:65:2d:1b:4b:b5:96:b9:f0:
84:30:97:50:d6:9c:ff:96:da:1c:5e:63:e7:f3:ba:7b:96:96:
a5:b6:7f:e2:86:c0:d9:30:24:f3:43:91:8a:32:c5:83:bb:19:
4a:51:54:94:91:61:72:0b:98:b8:91:ae:05:f0:1c:34:5b:e1:
bf:46:9b:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7D3AiD5OU+19Ex7k5RaFteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTE3YTFlNmY2OTljMzIyYjZiOTgzNDk0ZjQyYzIyMDkx
Mjc1NTMwHhcNMjYwNjE0MDIwMDM3WhcNMjYwNjE1MDIwMDM3WjAzMTEwLwYDVQQD
EygzNjAxNjFjYWEzNDU4MjhiNDAwZGM5ZmNiNTlhNjIzMGZlNjZkZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFcpqdS8/wORS3eczh9EEEBMInVF
eJlMf32DjkTKLkmYUEyapcZjvk8v3LzfW7ulVc9zxKLA7SiCIKJ293DwU3c+2iGt
MOcDN/1Zowcmpk249xac157x28TcaNw58saImEhHyD3MDhZ4nMVUKh9NtdSniG5Y
bktuq3xDX7akHZxpWneT2nnpK3BMS6KfVY4MSCQ/ZU1M8oISr/HAlq7XHYN/4JQE
q8MGLvYJDoFVNoghh03SFUJQt1k+DUzGSho6O87Fu5EvUbK4AMXLhG8R0Lvbc5so
fvCln3BHL59rqzn8lbgK6Dr3yImO6rqiv+F54S2CExmk+VwRp5U3Vygr3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYBYcqjRYKLQA3J/LWaYjD+Zt/tMB8GA1UdIwQY
MBaAFGIReh5vaZwyK2uYNJT0LCIJEnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQt
NWJjYzg0NThhYTJjLzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQtNWJjYzg0NThhYTJj
LzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpweGs8j
vSbJKrNuyh3HutVwgGladcd4pUOxKrNPLJ+ZmsGHb9kI1hcrUd6S6xDi5C0DD23r
GVAmtepzhpBAb4yx2F6Xfm/9AR0ks0WbxaLCbCYZM55q1Tdywb55LkquS110qJLW
tBzVmHJ/WEmLPCdb6zoqfoOiLD8+fvaDDeNFHYARqYY0e2BrJLb805brSNZzrLLv
S5gF2rPkf87YferCXbrGdRgYfJ72Op9r/ZWCdKG3e0jd7PUtfA/IhWUtG0u1lrnw
hDCXUNac/5baHF5j5/O6e5aWpbZ/4obA2TAk80ORijLFg7sZSlFUlJFhcguYuJGu
BfAcNFvhv0abkw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:01 2026 by rpki-client