Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier: 2050PaZzHFPVFCe5hZmZX2podU2w+q+pvK8ttyXOMcc=
Subject key identifier: 0C:D1:6D:C6:FF:80:4E:48:CC:D7:9D:16:24:B4:47:AF:F4:B4:18:39
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 01A0BD6694C73F8B543C13E85F2AD096A2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number: 1A6C
Signing time: Sun 20 Sep 2026 06:00:11 +0000
Manifest this update: Sun 20 Sep 2026 06:00:11 +0000
Manifest next update: Mon 21 Sep 2026 06:00:11 +0000
Files and hashes: 1: 1-CQYobvcQG21mAnMiaW7vyH7CXY.roa (hash: F30Qwwm1mnG4O3FtxSySy1RIR2PJUKOcNn6fyL1ZO8E=)
2: Q8ZPUdn-YmcTmBwAi_7GVX9YQUw.roa (hash: kBU03x/ocDiC2CPd5HE27yOrt08fP6gCbdih5TdOqEQ=)
3: Sy7wu7HbvDyeRA19AagewX8X6a8.roa (hash: 3GBSbUmpYJlg9KE6xgU1mWhmKjjwIsWji4O9OpkK8H8=)
4: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: aJDGbDMffVoSkZCRmrpwdQmw4b/6pDmPQykd833LBUU=)
5: bdnGFt0hHzKvmqEY93Eh959DQNM.roa (hash: Uc8DaiaZyUQDwe1ODSCGoQeREP5FCzxxss2vrZnDmR0=)
6: lqsLALggP8BPfl8pdq3Xpv8eVgg.roa (hash: bdexZFMhJLX7gjQGkdBbU8UkKwrPdu12kMoaVc9RB3s=)
7: ruyO6zUfbaRsGVkfFZtSsnxMh1s.roa (hash: zoSCjiMf6V8kppFFwtfWmMhnEG6ujkudnMTWLbB1XSc=)
8: xkh0_qQROZrSh7wQT28dLg374SY.roa (hash: DYUAA1oa5//rqv0OvMnn2Z1Gp+Lzbo3Hx+khO/MXiMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:66:94:c7:3f:8b:54:3c:13:e8:5f:2a:d0:96:a2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Sep 20 06:00:11 2026 GMT
Not After : Sep 21 06:00:11 2026 GMT
Subject: CN=0cd16dc6ff804e48ccd79d1624b447aff4b41839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:3b:d9:fe:2d:5f:bc:55:4c:18:7d:6c:7b:
92:af:ba:7c:5f:0d:5c:7f:22:72:68:b8:66:dd:fd:
51:a7:5c:18:80:a2:e7:7d:bf:a7:97:90:8f:f6:71:
90:81:ea:74:1c:0a:06:3c:2a:9c:19:e0:f4:57:54:
47:d0:e6:e6:f7:41:23:58:38:fe:62:b6:6e:7c:ad:
00:55:16:c1:90:0c:ab:f4:91:d6:21:a3:df:60:71:
c8:ea:36:fd:dc:e9:40:39:a1:cf:63:3f:77:c1:df:
4b:89:e8:72:f9:b8:20:0a:a7:6d:0d:b2:1c:a5:ed:
26:1a:00:b9:64:2a:9c:04:76:36:75:c2:f3:20:c9:
26:ba:21:5f:a7:f0:77:f2:6f:a9:c9:77:0b:e6:c4:
01:28:a9:84:a3:55:43:08:7c:47:b3:5a:5b:b0:68:
36:42:8f:cc:d9:73:75:c2:ee:f8:4d:a4:6b:54:7d:
06:53:a1:db:36:8d:2a:77:69:78:3d:5b:65:69:86:
e5:2f:b6:cb:40:c7:2d:cc:63:7c:ee:18:d9:97:06:
5b:6e:32:e8:64:a3:1f:42:44:d4:8c:71:21:e7:07:
2c:76:6e:37:1e:54:5c:38:40:1a:9a:dd:a0:b1:b4:
2d:83:21:8d:ef:c2:13:86:68:b0:0d:60:af:f6:0a:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D1:6D:C6:FF:80:4E:48:CC:D7:9D:16:24:B4:47:AF:F4:B4:18:39
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4d:02:4c:6a:a7:36:f7:19:e6:5c:28:76:16:3d:70:3d:6e:
2e:b5:69:ae:ff:d5:a2:d1:30:63:4e:6f:19:bd:5b:e0:c3:ab:
4f:9c:b1:cf:92:28:ae:b9:f3:89:ed:b7:e6:67:eb:11:f9:8d:
6f:6a:8e:c4:ad:56:6b:ed:97:be:03:02:2f:ec:f3:64:24:59:
25:eb:a5:19:6c:c2:e9:27:72:94:5d:f9:44:86:a5:aa:9c:cd:
d1:06:05:06:91:be:e2:21:1a:75:6a:58:a6:69:d5:c3:e1:cd:
7a:c6:41:8e:20:3a:37:34:41:58:24:7a:ab:ca:50:7c:ae:07:
4a:35:5f:8d:0c:58:ac:95:cf:6f:12:fe:2d:20:9f:af:e1:1f:
ae:2e:74:77:f3:1e:2e:fa:8d:7e:09:18:cc:f0:19:e3:30:d5:
5a:14:39:8b:8b:7f:f8:d5:f7:9f:4d:e8:02:c7:1d:4a:1c:d0:
9e:96:88:00:2c:7d:fc:80:c7:34:df:19:5f:a4:63:92:b2:8c:
a9:9c:5c:6c:a7:4c:d1:b9:59:18:06:76:8f:48:32:f6:2b:de:
17:c0:21:f2:0d:f1:7c:e2:90:72:2a:f5:ae:a5:95:ee:80:51:
87:d0:2c:63:34:cd:cb:5f:e7:d4:6d:14:ab:70:a2:b1:de:7f:
17:b8:a1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:38:36 2026 by rpki-client