Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier: tv7qNmFwj1MYQTUiJ94LLiDHxIrM9g4HRgNsD0smIQM=
Subject key identifier: 06:78:9C:80:08:E8:39:97:2A:5F:F3:F3:09:D3:46:AC:65:CE:1A:FD
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 019D9818E321F466C6D1ED2D91F21EAA91BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number: 18CB
Signing time: Thu 16 Apr 2026 21:01:00 +0000
Manifest this update: Thu 16 Apr 2026 21:01:00 +0000
Manifest next update: Fri 17 Apr 2026 21:01:00 +0000
Files and hashes: 1: 1-CQYobvcQG21mAnMiaW7vyH7CXY.roa (hash: F30Qwwm1mnG4O3FtxSySy1RIR2PJUKOcNn6fyL1ZO8E=)
2: Q8ZPUdn-YmcTmBwAi_7GVX9YQUw.roa (hash: kBU03x/ocDiC2CPd5HE27yOrt08fP6gCbdih5TdOqEQ=)
3: Sy7wu7HbvDyeRA19AagewX8X6a8.roa (hash: 3GBSbUmpYJlg9KE6xgU1mWhmKjjwIsWji4O9OpkK8H8=)
4: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: cPEdKP9uZZIxpmMKobgAf8jhX9VsaMQIh49YFyNXOlw=)
5: bdnGFt0hHzKvmqEY93Eh959DQNM.roa (hash: Uc8DaiaZyUQDwe1ODSCGoQeREP5FCzxxss2vrZnDmR0=)
6: lqsLALggP8BPfl8pdq3Xpv8eVgg.roa (hash: bdexZFMhJLX7gjQGkdBbU8UkKwrPdu12kMoaVc9RB3s=)
7: ruyO6zUfbaRsGVkfFZtSsnxMh1s.roa (hash: zoSCjiMf6V8kppFFwtfWmMhnEG6ujkudnMTWLbB1XSc=)
8: xkh0_qQROZrSh7wQT28dLg374SY.roa (hash: DYUAA1oa5//rqv0OvMnn2Z1Gp+Lzbo3Hx+khO/MXiMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:e3:21:f4:66:c6:d1:ed:2d:91:f2:1e:aa:91:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Apr 16 21:01:00 2026 GMT
Not After : Apr 17 21:01:00 2026 GMT
Subject: CN=06789c8008e839972a5ff3f309d346ac65ce1afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:68:16:51:ce:fa:3c:a6:6c:44:23:75:f2:
d7:c4:6e:be:6c:8a:2a:6c:9f:f7:7f:9b:c9:c2:11:
8e:73:1e:19:f1:6a:70:86:67:b3:ed:10:9a:5c:08:
40:72:07:e9:93:fa:59:56:c2:36:63:a7:d3:14:a6:
a7:af:81:20:de:5d:ef:a1:33:43:f3:8e:aa:26:82:
2a:f3:cb:fb:69:10:e8:55:3f:19:a5:77:e2:67:75:
6b:9c:13:f6:3d:51:92:51:71:83:d6:a7:da:15:5c:
f2:19:2a:7a:48:5b:05:3a:f2:46:cb:f5:8b:68:1c:
a3:c4:bf:92:a0:6a:5c:af:ac:e0:4c:a5:5a:b0:cc:
ef:46:1c:fb:94:8b:d6:54:cc:e1:59:37:18:5c:2f:
3d:1b:fa:90:38:07:99:d3:c9:b1:b3:40:76:6d:b7:
7d:04:0d:74:4a:ff:54:ae:1c:fa:5f:f3:bc:d0:3e:
55:ce:dc:1e:6f:b0:e7:ba:a5:5f:f6:c6:ff:1f:92:
be:89:d3:43:53:0b:99:23:02:36:65:e3:b0:b2:a3:
d8:6a:d6:76:38:2e:c2:c7:26:11:15:9b:05:2d:d5:
73:08:57:e4:83:4b:16:a6:15:1e:a1:92:75:fd:80:
4f:8b:fd:9b:62:7a:5b:36:e2:91:14:68:ac:f9:27:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:78:9C:80:08:E8:39:97:2A:5F:F3:F3:09:D3:46:AC:65:CE:1A:FD
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:31:bb:8b:91:5e:6c:8f:e1:aa:2d:f9:86:8c:0a:95:8f:bb:
30:b6:9d:de:00:be:03:d0:bb:cd:f2:11:f1:18:73:da:83:e0:
09:01:da:16:c3:1d:04:c7:2f:d4:2f:13:ae:8b:57:8e:6c:72:
22:86:e5:ba:58:e0:6a:1d:ec:0b:72:ef:30:db:a1:38:1f:16:
cd:fb:cb:e0:57:bc:89:d1:00:5e:a6:57:9e:59:40:58:fb:2a:
a4:cd:ea:a4:90:ae:db:1f:b9:1c:d4:97:fe:f1:fc:f2:72:12:
64:6d:c8:6e:9b:78:dd:c4:2a:f7:10:12:5f:74:64:d9:fe:64:
c1:37:bb:8f:f1:90:55:ff:69:75:73:60:2c:92:6f:64:14:25:
5d:34:e0:f0:c0:14:0c:37:d6:8f:f6:dd:07:0f:0c:27:51:3d:
bb:cb:62:64:9c:2a:50:5e:ac:e2:e9:0a:ab:41:94:7b:f1:d8:
70:39:16:a9:62:e1:20:03:bd:2e:55:9c:58:96:d6:34:ef:fc:
ae:2e:f4:57:84:54:1d:5a:75:e9:de:b6:13:f0:76:48:c9:a7:
e3:f0:91:f7:17:bc:63:b9:db:b2:b2:3d:6b:b1:9a:a9:94:78:
96:49:60:f2:c4:6f:c9:c4:51:17:a4:70:81:16:97:76:db:b5:
1c:71:f8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:15 2026 by rpki-client