Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: iaRzrajk9koJbKyuJM/H6yhiCZLWCVtMYA8n8qZl25k=
Subject key identifier: 81:B7:B8:91:22:69:97:CB:78:D8:5D:82:F9:D7:06:2C:5E:BA:54:16
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 019D9886B473FEF071E466D20CE489B0BF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 23:00:58 +0000
Manifest this update: Thu 16 Apr 2026 23:00:58 +0000
Manifest next update: Fri 17 Apr 2026 23:00:58 +0000
Files and hashes: 1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: J206HojJc776FUN0ySMyIOdzXa5tXvIf5CbwsuYfpIo=)
3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:b4:73:fe:f0:71:e4:66:d2:0c:e4:89:b0:bf:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Apr 16 23:00:58 2026 GMT
Not After : Apr 17 23:00:58 2026 GMT
Subject: CN=81b7b891226997cb78d85d82f9d7062c5eba5416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:ef:d5:42:fe:9b:6d:18:cc:bd:c3:60:82:
df:4d:a9:bf:95:96:ee:51:d5:3e:a7:e8:e6:6e:38:
e2:6e:d1:d0:1b:cc:51:ec:33:b6:0e:ec:d7:64:b0:
01:4c:9c:d2:64:8a:41:fc:01:5f:af:02:c3:2a:79:
69:b5:b0:3c:9a:f4:2f:11:1d:bb:67:2d:e2:09:9c:
f3:fd:36:ac:a9:bc:d4:d2:ac:66:55:78:0a:13:12:
f5:b3:58:34:bf:7e:67:54:14:a2:cc:02:54:08:1a:
30:ed:e5:e4:aa:59:e3:ed:a2:49:5b:19:4c:dc:d0:
9a:2d:f1:00:29:fe:e2:a7:e3:0c:e4:b7:ef:ea:a6:
72:b9:18:d2:5e:b3:82:8d:f4:25:a2:55:83:d5:9c:
66:f2:f0:27:b8:e3:e9:a6:0c:39:02:53:b0:4c:e5:
f8:36:3f:4f:9d:35:76:55:41:c8:79:d3:0f:d3:8d:
3a:8d:95:a3:59:ac:1f:89:0a:d0:c0:50:7d:a2:29:
a9:26:e8:da:0f:fb:2a:52:88:be:32:8b:a2:26:16:
56:ab:24:72:f9:cb:10:66:41:ff:de:9e:2a:8e:ef:
37:44:89:83:28:9c:6b:2f:2b:a9:55:62:16:98:b9:
96:de:b4:f9:d0:1c:65:4a:32:42:2f:f6:1c:7c:e1:
1a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B7:B8:91:22:69:97:CB:78:D8:5D:82:F9:D7:06:2C:5E:BA:54:16
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fb:fc:43:3e:a6:d8:3c:19:be:f5:38:36:6e:af:03:69:4f:
5a:e0:ea:9b:5a:10:f4:23:b8:c9:5e:ad:b2:d2:a0:a5:a3:22:
78:66:23:97:8b:dc:36:7a:97:db:95:2f:05:8a:49:93:53:05:
6c:03:ca:07:74:c7:49:79:ae:7e:60:6b:0d:1d:5c:a9:b6:bd:
ad:d2:8c:e3:e8:1d:4d:12:24:ea:ae:78:c5:c0:0e:a5:f0:05:
74:a4:1d:bc:76:12:83:f9:01:0b:00:0a:c0:29:6d:e3:2b:3f:
92:f3:b6:e9:bb:8d:f6:61:bd:13:d8:60:18:63:b7:1a:1d:35:
83:0c:2c:c8:de:50:1e:d1:b3:bb:d6:13:e3:77:9d:a2:5d:ae:
27:84:19:73:10:79:4c:83:f2:0e:61:c5:66:c6:88:38:28:4e:
14:9a:fa:87:6d:a7:a8:35:83:d6:4e:de:d0:db:90:d1:9d:f3:
97:f1:a0:1f:d7:b3:e0:2d:91:26:a6:97:05:50:c8:24:c8:ae:
a4:c0:6c:e2:43:63:d7:e1:9d:e7:00:48:13:e5:41:09:63:82:
cd:a2:ed:20:d1:aa:0f:da:ef:cf:f4:8c:23:1a:8b:95:79:4e:
99:3c:a5:98:47:84:96:6e:fe:82:34:c5:e8:74:af:2b:af:b9:
a4:76:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:22 2026 by rpki-client