Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier: iXnEJAWq4jhFpOwKbNArEPdDgeRt+Jdrj0fnr3RWz1Q=
Subject key identifier: 7B:75:39:36:93:CC:E9:C3:87:36:D8:27:37:AD:6E:65:14:A5:A8:44
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 019DA3AF4010B4A5C96966FC2050A16F4B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number: 18D1
Signing time: Sun 19 Apr 2026 03:01:04 +0000
Manifest this update: Sun 19 Apr 2026 03:01:04 +0000
Manifest next update: Mon 20 Apr 2026 03:01:04 +0000
Files and hashes: 1: 1-CQYobvcQG21mAnMiaW7vyH7CXY.roa (hash: F30Qwwm1mnG4O3FtxSySy1RIR2PJUKOcNn6fyL1ZO8E=)
2: Q8ZPUdn-YmcTmBwAi_7GVX9YQUw.roa (hash: kBU03x/ocDiC2CPd5HE27yOrt08fP6gCbdih5TdOqEQ=)
3: Sy7wu7HbvDyeRA19AagewX8X6a8.roa (hash: 3GBSbUmpYJlg9KE6xgU1mWhmKjjwIsWji4O9OpkK8H8=)
4: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: b+03h2AQL69+vmJ+xDaB1f6fjiBiycEocGU7h/anYJc=)
5: bdnGFt0hHzKvmqEY93Eh959DQNM.roa (hash: Uc8DaiaZyUQDwe1ODSCGoQeREP5FCzxxss2vrZnDmR0=)
6: lqsLALggP8BPfl8pdq3Xpv8eVgg.roa (hash: bdexZFMhJLX7gjQGkdBbU8UkKwrPdu12kMoaVc9RB3s=)
7: ruyO6zUfbaRsGVkfFZtSsnxMh1s.roa (hash: zoSCjiMf6V8kppFFwtfWmMhnEG6ujkudnMTWLbB1XSc=)
8: xkh0_qQROZrSh7wQT28dLg374SY.roa (hash: DYUAA1oa5//rqv0OvMnn2Z1Gp+Lzbo3Hx+khO/MXiMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:40:10:b4:a5:c9:69:66:fc:20:50:a1:6f:4b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Apr 19 03:01:04 2026 GMT
Not After : Apr 20 03:01:04 2026 GMT
Subject: CN=7b75393693cce9c38736d82737ad6e6514a5a844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:eb:44:56:95:39:59:a3:ac:46:12:9b:07:
14:2c:6b:8b:e5:1a:73:90:9a:05:bd:02:9a:34:92:
81:25:a9:82:fd:23:23:7f:3a:dd:39:6d:4f:69:b6:
56:75:fd:af:30:ae:d1:76:0f:48:f8:b9:b5:97:e8:
ce:c5:46:a3:6c:77:42:56:39:87:21:84:f5:a1:e0:
8e:bd:97:23:74:bd:9b:32:31:a3:7c:5a:28:42:ae:
70:6c:5f:92:93:3d:76:bc:48:fa:82:1c:9a:46:c9:
7f:c9:13:00:4e:b1:26:70:e1:ad:23:e9:0d:9b:00:
d9:13:7c:1b:a0:e7:13:ec:ec:69:1b:6f:6a:4d:4d:
58:b0:49:15:24:6a:c8:4a:b8:78:32:6c:dd:a2:de:
b1:6a:0f:2f:9f:d0:34:44:63:63:14:27:1a:c3:e2:
99:a2:7a:47:f8:b9:77:c0:99:db:0e:64:46:e7:32:
6c:df:46:8e:ea:03:57:15:6f:94:df:f0:cb:f0:11:
44:0b:48:cd:b4:b8:1f:dd:7e:b2:a6:3e:99:86:20:
97:de:35:87:e0:ef:dc:4a:b3:b1:32:51:1b:0e:14:
08:ce:fa:23:87:8d:21:68:8e:bd:80:d3:34:fe:e5:
75:a9:a7:be:c2:44:2d:11:6f:26:19:98:63:0a:50:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:75:39:36:93:CC:E9:C3:87:36:D8:27:37:AD:6E:65:14:A5:A8:44
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1f:85:e9:53:45:bb:36:77:00:af:25:11:7d:7c:16:fb:13:
45:43:0d:c2:91:29:a4:44:54:25:1c:d2:1f:8e:0b:6d:d3:85:
90:73:0e:76:f3:20:2f:3e:08:c8:77:c0:bb:bf:9b:fa:1f:e2:
eb:b0:b6:bd:d6:8b:26:17:03:72:98:84:b9:57:98:bf:6e:79:
5c:74:ef:73:0c:31:65:bc:32:54:33:39:ef:9b:ba:85:9d:d4:
67:da:09:33:d3:43:9b:38:68:48:ad:ac:a4:58:d9:93:73:25:
1e:ad:10:ef:af:1b:ea:9c:5a:f9:29:94:e8:0e:d9:1a:53:c5:
b8:90:12:4f:2c:76:af:7d:0e:1c:05:39:be:ab:ec:4a:82:20:
d4:1e:af:51:ea:52:2b:ab:49:78:2a:81:fd:d2:b5:da:ac:d7:
03:0e:79:51:9f:d7:8d:e0:da:d8:20:03:8d:91:c2:cd:ef:cf:
d7:fb:c3:22:9d:d3:47:e6:b9:83:20:9f:71:47:aa:01:ea:16:
3f:7f:7c:46:f8:7a:a4:74:89:60:1f:bd:5a:ac:5d:38:3d:4e:
da:ad:a0:ce:73:f7:c8:2b:99:20:b8:38:45:ff:5e:c0:b8:7b:
5d:69:e4:77:5e:35:12:65:96:43:4d:34:bf:a5:7f:fa:8a:2b:
03:5a:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:36 2026 by rpki-client