Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier: CK8bJXxGjMvv34MAHdIXSaioSm1yn9T78ZaHP/DFoSA=
Subject key identifier: CB:4F:1A:EF:BB:22:46:7A:0D:0D:2F:F2:76:42:A5:95:6D:25:FB:33
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 01A0C3326701884285BE46AEF8BE10E25C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number: 1A6F
Signing time: Mon 21 Sep 2026 09:00:55 +0000
Manifest this update: Mon 21 Sep 2026 09:00:55 +0000
Manifest next update: Tue 22 Sep 2026 09:00:55 +0000
Files and hashes: 1: 1-CQYobvcQG21mAnMiaW7vyH7CXY.roa (hash: F30Qwwm1mnG4O3FtxSySy1RIR2PJUKOcNn6fyL1ZO8E=)
2: Q8ZPUdn-YmcTmBwAi_7GVX9YQUw.roa (hash: kBU03x/ocDiC2CPd5HE27yOrt08fP6gCbdih5TdOqEQ=)
3: Sy7wu7HbvDyeRA19AagewX8X6a8.roa (hash: 3GBSbUmpYJlg9KE6xgU1mWhmKjjwIsWji4O9OpkK8H8=)
4: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: VJoJyC+KgwxSZjfNYVywvH+j+T80qNxKmIW94nXJyAo=)
5: bdnGFt0hHzKvmqEY93Eh959DQNM.roa (hash: Uc8DaiaZyUQDwe1ODSCGoQeREP5FCzxxss2vrZnDmR0=)
6: lqsLALggP8BPfl8pdq3Xpv8eVgg.roa (hash: bdexZFMhJLX7gjQGkdBbU8UkKwrPdu12kMoaVc9RB3s=)
7: ruyO6zUfbaRsGVkfFZtSsnxMh1s.roa (hash: zoSCjiMf6V8kppFFwtfWmMhnEG6ujkudnMTWLbB1XSc=)
8: xkh0_qQROZrSh7wQT28dLg374SY.roa (hash: DYUAA1oa5//rqv0OvMnn2Z1Gp+Lzbo3Hx+khO/MXiMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:67:01:88:42:85:be:46:ae:f8:be:10:e2:5c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Sep 21 09:00:55 2026 GMT
Not After : Sep 22 09:00:55 2026 GMT
Subject: CN=cb4f1aefbb22467a0d0d2ff27642a5956d25fb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:04:50:6d:45:b2:9c:c9:92:f3:7c:e5:29:
e6:5d:40:da:54:f0:20:00:30:4f:05:1a:1d:ac:06:
de:c8:94:88:b1:cd:8b:d5:8b:06:70:83:cd:01:57:
5a:b2:11:3b:1b:28:38:75:a2:3c:00:cb:f5:6a:aa:
ad:d6:45:34:73:2d:0b:6c:5b:7e:fe:2e:cd:48:a9:
8e:d7:dc:d2:70:01:fd:40:1d:a5:21:25:c1:cd:f1:
68:4a:fa:c9:1b:4a:c2:03:7d:f6:1d:d3:ba:d1:8a:
e6:54:5d:57:26:59:3c:45:fe:b0:c0:f3:e8:c7:ef:
5e:a2:dd:5e:e7:4d:0a:12:9c:97:42:4e:ac:ad:f7:
36:9f:6c:2d:ab:38:f9:20:3a:a2:49:dd:4a:e0:f4:
88:e4:81:89:d6:64:b2:4c:b6:c7:82:e0:5d:27:28:
23:84:94:21:6e:ef:35:49:6e:86:01:64:b0:ad:03:
be:91:20:fc:89:a0:9a:64:d6:7c:3c:e3:7b:4d:2c:
6b:ca:bb:7d:ca:0f:75:b9:bb:82:d9:f0:f4:2f:6e:
ed:09:5e:52:b0:05:1e:ff:c3:19:2a:79:f5:cc:15:
30:f7:a1:e8:87:a1:c2:c9:01:83:0a:1f:35:19:a7:
32:e8:e1:03:5f:89:bf:34:e4:f0:e7:55:ca:73:ea:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4F:1A:EF:BB:22:46:7A:0D:0D:2F:F2:76:42:A5:95:6D:25:FB:33
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:31:74:6d:45:b2:b7:9c:30:e9:01:5e:31:4f:b6:1a:1f:2f:
ec:45:c9:ca:0e:97:25:7a:a2:51:77:89:b5:c9:fd:d4:e4:89:
b4:40:62:40:ba:d3:47:18:ed:38:72:dd:c2:c7:6f:36:0d:71:
91:ef:ef:46:e4:88:ec:2b:60:8f:5c:a6:01:30:f7:94:93:3a:
f4:3c:06:0f:0c:59:a3:35:9c:62:3f:e0:45:d1:4a:bf:2e:9c:
df:e1:d2:38:a9:89:48:9f:7f:ae:ec:fb:da:b2:88:67:25:1c:
21:c6:d7:8d:d1:9c:cc:b2:9b:21:70:38:ec:9a:ac:82:6b:d4:
b1:fa:7d:7d:72:63:d8:f5:37:0e:99:df:29:37:3f:77:2a:f6:
6b:a6:71:e5:12:e8:d5:97:20:77:a6:7b:c0:eb:5b:89:fe:57:
99:9d:e4:db:1c:0e:43:4e:6e:fc:8e:fb:b9:0f:fc:ef:b1:7f:
72:ae:c6:93:90:24:7c:c4:e8:29:bb:95:42:95:63:4a:6d:34:
8a:33:5c:c2:a9:e0:69:de:66:56:3f:10:51:4e:3a:4a:4b:45:
97:d0:d5:4b:b0:0d:39:fa:7f:af:2a:c2:a2:71:90:ca:8e:5e:
46:5e:78:40:6b:ec:94:7d:1a:a3:6e:7f:a4:19:9e:2e:a2:e6:
84:03:dd:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMmcBiEKFvkau+L4Q4lxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTMxMDMwMjAxOGEzODdjNjkyMTQ2YTM1ZWZkMzNhNmVk
NmIxZWYwHhcNMjYwOTIxMDkwMDU1WhcNMjYwOTIyMDkwMDU1WjAzMTEwLwYDVQQD
EyhjYjRmMWFlZmJiMjI0NjdhMGQwZDJmZjI3NjQyYTU5NTZkMjVmYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXgEUG1FspzJkvN85SnmXUDaVPAg
ADBPBRodrAbeyJSIsc2L1YsGcIPNAVdashE7Gyg4daI8AMv1aqqt1kU0cy0LbFt+
/i7NSKmO19zScAH9QB2lISXBzfFoSvrJG0rCA332HdO60YrmVF1XJlk8Rf6wwPPo
x+9eot1e500KEpyXQk6srfc2n2wtqzj5IDqiSd1K4PSI5IGJ1mSyTLbHguBdJygj
hJQhbu81SW6GAWSwrQO+kSD8iaCaZNZ8PON7TSxryrt9yg91ubuC2fD0L27tCV5S
sAUe/8MZKnn1zBUw96Hoh6HCyQGDCh81Gacy6OEDX4m/NOTw51XKc+rurwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtPGu+7IkZ6DQ0v8nZCpZVtJfszMB8GA1UdIwQY
MBaAFGITEDAgGKOHxpIUajXv0zpu1rHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjIt
YmU1N2Q3ZGZhMGRlLzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjItYmU1N2Q3ZGZhMGRl
LzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejF0bUWy
t5ww6QFeMU+2Gh8v7EXJyg6XJXqiUXeJtcn91OSJtEBiQLrTRxjtOHLdwsdvNg1x
ke/vRuSI7Ctgj1ymATD3lJM69DwGDwxZozWcYj/gRdFKvy6c3+HSOKmJSJ9/ruz7
2rKIZyUcIcbXjdGczLKbIXA47JqsgmvUsfp9fXJj2PU3DpnfKTc/dyr2a6Zx5RLo
1Zcgd6Z7wOtbif5XmZ3k2xwOQ05u/I77uQ/877F/cq7Gk5AkfMToKbuVQpVjSm00
ijNcwqngad5mVj8QUU46SktFl9DVS7ANOfp/ryrConGQyo5eRl54QGvslH0ao25/
pBmeLqLmhAPdwg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:38:49 2026 by rpki-client