Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: vfG22FqUZNHuKHumV9p3vTuMmadTXW7i6s4ZKLENsJQ=
Subject key identifier: A9:83:D9:F2:5F:89:DB:F8:A2:C4:94:27:B1:08:74:37:D7:1C:BA:33
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 01A0EC2F26E349EDEA4C0B02E9F1B9FD245D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 08:01:48 +0000
Manifest this update: Tue 29 Sep 2026 08:01:48 +0000
Manifest next update: Wed 30 Sep 2026 08:01:48 +0000
Files and hashes: 1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: 9eyXio5LHQWhfXrjpZ6Fth4OUc9x8pNMtN4zJeB1UEI=)
3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:26:e3:49:ed:ea:4c:0b:02:e9:f1:b9:fd:24:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Sep 29 08:01:48 2026 GMT
Not After : Sep 30 08:01:48 2026 GMT
Subject: CN=a983d9f25f89dbf8a2c49427b1087437d71cba33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:c7:d6:af:e9:74:e3:7e:42:ec:19:6e:32:
e2:58:1d:f4:d0:78:cf:45:4b:ea:bc:e2:c8:da:a5:
06:dd:94:6e:31:bc:db:38:0d:73:52:0a:16:6b:52:
13:61:46:94:da:4c:ab:96:0b:e5:1d:02:96:09:50:
aa:b6:07:7e:bd:bd:08:d5:8a:f4:d2:44:78:e2:72:
55:24:34:8a:07:17:8f:1d:5c:01:0a:93:2c:93:aa:
1c:09:c4:dd:bd:69:30:09:bf:c6:03:c5:66:3f:42:
8a:37:35:14:73:51:02:1b:40:bc:b6:5a:de:14:69:
4e:38:e8:d6:e4:f4:3c:75:8e:63:95:70:f8:9f:66:
c0:7e:cb:5f:5a:35:8e:9e:86:84:8e:07:2c:52:a2:
29:16:09:77:67:b1:f5:ed:f5:5a:e6:13:a2:3b:9e:
23:10:1e:fd:5a:d9:98:f3:bc:24:63:78:86:02:97:
e5:bc:a6:4f:5f:dc:0c:12:28:1f:b5:64:ad:36:39:
1a:4c:84:86:a6:ae:32:b4:ba:9c:ba:c0:e2:71:b2:
6a:69:12:08:2e:a0:12:42:85:6f:fe:bf:97:ba:4c:
a8:ee:3a:38:5a:63:a2:57:44:88:9d:e8:69:e4:78:
bc:52:c7:e7:43:5d:40:63:73:00:cd:b4:9d:62:23:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:83:D9:F2:5F:89:DB:F8:A2:C4:94:27:B1:08:74:37:D7:1C:BA:33
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:50:cf:67:f8:55:6a:71:c5:55:7a:08:af:29:18:68:88:e6:
6f:84:39:89:7a:06:12:84:ee:7e:05:9d:ef:88:95:02:6e:ed:
49:80:03:ce:bf:22:9f:68:33:e3:51:9f:76:64:5a:2f:46:f1:
61:27:98:fd:ec:01:f6:c1:a2:4a:a9:0a:03:7e:0b:e0:79:f4:
d7:d4:7d:f5:c7:c1:9d:79:68:50:47:a5:9a:28:44:bd:f8:3f:
32:3f:53:99:a4:9c:55:55:7f:08:2b:88:86:7d:7b:b5:19:a0:
6a:3b:3e:dd:75:00:68:eb:4e:8c:57:8f:51:9c:2c:a4:1d:42:
e4:61:2d:3b:a8:26:56:69:bf:ab:c1:43:ed:1a:69:69:eb:1c:
d8:3b:4e:57:49:c3:67:02:ce:6f:d2:26:d7:d0:d3:8e:0d:1a:
bf:db:a7:81:c4:8e:15:98:a1:9c:e5:e7:73:bc:f3:78:82:79:
5a:22:80:53:b1:6a:c1:be:a2:8f:d7:cd:f9:54:6b:21:7b:d4:
f6:34:49:92:51:9d:af:24:ff:9c:ba:9e:0c:99:be:ac:78:9c:
a2:c0:0b:b8:13:10:9a:fe:df:ad:05:12:e7:39:58:1b:66:9e:
bd:42:f3:bb:37:3a:b6:86:a4:6a:e6:53:8e:e7:41:01:b8:56:
41:8e:40:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:30:07 2026 by rpki-client