Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File: YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier: /pxl2oODCHf0xSBZ8SrU8BLnAbGlhmbPhhAgqktYRyw=
Subject key identifier: 41:23:1A:81:39:D1:F9:F1:C7:6D:62:BC:2D:A5:91:55:7B:76:F7:BD
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 01A0C3A023E221F200EF67FBBD2A6FF3EB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number: 1620
Signing time: Mon 21 Sep 2026 11:00:47 +0000
Manifest this update: Mon 21 Sep 2026 11:00:47 +0000
Manifest next update: Tue 22 Sep 2026 11:00:47 +0000
Files and hashes: 1: A2edUifbSShzdJ1Gis-SqBKDNH4.roa (hash: Vy37s5YBxFgEPmxrlCq+GM34iA4Ip0Oc6gKZuBhegNc=)
2: BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa (hash: Io/zg3oPjnrBQRK8TUjjHMBbPc/oa9KH3Wg0gDqsd6M=)
3: CMj-58s7HjFJfPYnqyY_H8iMras.roa (hash: l/VgtwLP67EeRyfmCVyIdNqgvDzJvQY/H0EIMqQ+RF0=)
4: LYaVyURA1Hqer0FhBdoqEAlltug.roa (hash: NWGVsZzZidWUl0MNChqOvov8kyqJB0zTJQ1HSXjGZw4=)
5: MFBUVUGoLTFb6mMUZK00McW_7z0.roa (hash: F53ezXG/M5tdcqiYCNPbO7yVUwgcKU5OMRV7nr04e3o=)
6: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: g/EspxATCAOo0nQSor2HGk4PFWTe7wL9OGjbFIKnB48=)
7: kjQiljeUwEx-0O3qxw80JEcNHTk.roa (hash: Nj75u7cki0A+yVZeLl5QIeG1w+agzNtRDNjOCJHZFpc=)
8: m4DpurF7pXpEMEv3x379sHsIzI0.roa (hash: AQ+Y/OhWDwIEf3fur9MU0/7BD96QO4hZo7G0csSPbMo=)
9: qaLHn37xtjw3qy4avBKJZx30pG8.roa (hash: 37z1vS8oU1I2E/gSNbcyl0yQyKdvAVXffCULUq/vHIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:23:e2:21:f2:00:ef:67:fb:bd:2a:6f:f3:eb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Sep 21 11:00:47 2026 GMT
Not After : Sep 22 11:00:47 2026 GMT
Subject: CN=41231a8139d1f9f1c76d62bc2da591557b76f7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:d3:1f:2e:fa:d6:ec:de:56:45:3b:44:bb:
c8:5b:17:e7:ef:0d:ec:b7:96:cf:a6:ac:ea:1f:b4:
26:9b:4a:bd:a8:79:11:40:6d:12:bd:7c:8f:fb:ec:
5d:86:ce:de:8f:f1:13:d7:d9:68:5d:cd:a3:1c:f1:
4a:96:91:f9:41:9f:e5:97:de:9a:90:ec:9b:6d:0e:
5c:a5:58:28:06:5b:1a:09:43:7f:bf:18:97:a3:2f:
e8:d8:8e:49:b4:f9:29:12:97:ad:cc:a3:5c:5e:ab:
08:ce:1f:f9:86:3c:94:6c:4e:a3:97:ef:6c:75:04:
a9:46:fc:95:96:5f:da:75:23:37:dc:2f:a0:f4:5c:
e2:70:cd:f8:c5:6d:56:61:a8:97:4b:e9:9d:a8:df:
95:63:a6:36:fd:b1:d6:9d:39:94:38:7d:20:cd:95:
ed:bf:7e:73:0e:10:6f:85:5f:ab:c9:25:5e:62:3f:
b5:30:21:71:68:97:f8:9e:5f:5f:7b:31:32:ea:a1:
92:88:9d:c1:d4:b1:b6:01:96:12:f3:4e:08:a3:b0:
59:68:81:74:4d:57:56:9f:11:2e:d7:37:d2:14:9b:
bf:db:06:66:02:52:87:6d:0d:50:9c:f4:dc:d7:93:
a6:b5:1f:4c:10:42:17:8c:fc:69:95:f0:df:82:35:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:23:1A:81:39:D1:F9:F1:C7:6D:62:BC:2D:A5:91:55:7B:76:F7:BD
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6a:45:1a:df:69:d2:51:7c:db:d2:ea:83:1c:cd:6c:87:19:
68:41:56:18:87:45:53:92:b3:aa:6a:d2:3c:2c:c3:f8:77:c9:
23:63:f3:fe:40:a5:b5:89:c0:f6:2f:db:74:ad:bd:99:47:fd:
9b:09:96:26:78:09:e4:e3:39:a8:60:23:52:9d:dd:94:84:d6:
db:63:7a:e1:1b:e8:72:99:6c:74:5c:e0:4d:31:e0:9f:20:1d:
8d:67:d7:a9:1d:d4:9e:9c:47:ec:bf:24:61:83:3d:ea:6d:c0:
7e:b0:3e:4f:09:f3:c0:e6:7b:14:0e:f6:a0:b2:c5:e0:39:9d:
f2:f9:fc:d7:15:de:89:9f:87:c2:7a:50:b5:95:81:87:1a:10:
99:9a:f2:52:8a:f4:1a:3b:77:5b:f7:25:b1:0f:c7:62:9e:97:
c9:5f:0e:50:0a:39:51:f5:d0:03:56:cb:c4:ab:b4:1d:cd:a4:
66:33:0c:5c:de:5e:8b:df:c5:0a:5a:c8:63:b3:06:08:0e:26:
76:53:c7:f9:b3:d6:d0:af:24:00:ab:dc:2d:ea:67:eb:66:32:
52:f3:b7:08:00:cb:56:47:b1:c7:18:43:b5:e2:a5:56:e8:9e:
ec:8d:4d:bd:4b:f2:3b:90:02:e7:45:f4:87:a8:64:52:97:0a:
28:c2:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:43:13 2026 by rpki-client