Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier: j9DUaUBYVtumWuWFB7DJsVMa0GndwiXcAaGmgattXPI=
Subject key identifier: 75:D8:26:A8:F7:49:15:2D:16:C4:1E:12:80:D7:4C:7E:1F:5D:35:D8
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 019FA74F9BF4898C1748D9D16EECAC7AA5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number: 19DC
Signing time: Tue 28 Jul 2026 06:00:40 +0000
Manifest this update: Tue 28 Jul 2026 06:00:40 +0000
Manifest next update: Wed 29 Jul 2026 06:00:40 +0000
Files and hashes: 1: 1-CQYobvcQG21mAnMiaW7vyH7CXY.roa (hash: F30Qwwm1mnG4O3FtxSySy1RIR2PJUKOcNn6fyL1ZO8E=)
2: Q8ZPUdn-YmcTmBwAi_7GVX9YQUw.roa (hash: kBU03x/ocDiC2CPd5HE27yOrt08fP6gCbdih5TdOqEQ=)
3: Sy7wu7HbvDyeRA19AagewX8X6a8.roa (hash: 3GBSbUmpYJlg9KE6xgU1mWhmKjjwIsWji4O9OpkK8H8=)
4: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: 1hy8tqIbledBWG5ag2/KEqRAC5MVQXkV+FDpyOwYP94=)
5: bdnGFt0hHzKvmqEY93Eh959DQNM.roa (hash: Uc8DaiaZyUQDwe1ODSCGoQeREP5FCzxxss2vrZnDmR0=)
6: lqsLALggP8BPfl8pdq3Xpv8eVgg.roa (hash: bdexZFMhJLX7gjQGkdBbU8UkKwrPdu12kMoaVc9RB3s=)
7: ruyO6zUfbaRsGVkfFZtSsnxMh1s.roa (hash: zoSCjiMf6V8kppFFwtfWmMhnEG6ujkudnMTWLbB1XSc=)
8: xkh0_qQROZrSh7wQT28dLg374SY.roa (hash: DYUAA1oa5//rqv0OvMnn2Z1Gp+Lzbo3Hx+khO/MXiMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:9b:f4:89:8c:17:48:d9:d1:6e:ec:ac:7a:a5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Jul 28 06:00:40 2026 GMT
Not After : Jul 29 06:00:40 2026 GMT
Subject: CN=75d826a8f749152d16c41e1280d74c7e1f5d35d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:d1:64:6e:34:9d:1d:95:6a:d4:3f:b7:fc:
2d:cb:2d:71:74:e4:c8:9c:f6:04:b0:e0:6c:a8:a2:
81:89:25:14:a6:98:9c:4a:14:69:a7:15:b1:d9:d5:
d3:32:f6:18:13:2e:dd:e1:f7:de:6e:a4:64:76:da:
48:d8:3c:70:08:cb:ba:ec:c3:47:67:92:b1:0c:6c:
cf:d4:c4:db:26:f2:94:35:f0:32:ba:b1:bf:69:24:
71:7f:bb:a0:f9:05:45:dc:05:dd:e1:1f:ac:99:d0:
5b:0e:bc:1d:27:58:e1:f1:f5:4c:1a:a3:74:1e:32:
1c:86:20:c3:52:ea:e7:2e:90:9d:31:46:2f:dc:e9:
17:bd:e9:01:be:d6:68:bd:88:53:94:03:30:7b:1b:
e5:72:c4:2d:79:08:91:fe:b6:31:c7:e1:db:cb:ef:
ae:33:8d:66:95:a8:d0:c9:42:d0:af:3d:96:41:4e:
05:23:95:a0:83:71:0c:c7:1e:a5:36:69:92:33:d6:
81:56:5d:ce:d6:2a:f5:69:57:80:fd:77:16:47:21:
de:a7:ba:2a:dc:54:4b:bf:36:38:28:b8:e2:9a:f6:
c0:10:f5:5c:04:34:ca:cc:fe:0e:de:4e:e6:d5:97:
84:f8:74:ef:8b:1c:ae:35:7e:73:e9:20:8c:40:20:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D8:26:A8:F7:49:15:2D:16:C4:1E:12:80:D7:4C:7E:1F:5D:35:D8
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9e:3e:77:ca:2c:35:87:02:7b:43:d2:78:72:c3:51:4c:37:
f4:f3:b5:cd:82:f4:0a:b8:d8:1c:9a:22:2d:01:79:68:d1:9c:
7e:f9:e1:77:75:f1:aa:c2:27:d6:6a:de:4a:ed:c5:c2:28:f8:
b4:f0:15:0e:ea:c7:aa:32:cc:61:81:0d:e0:1a:28:d5:9c:94:
83:55:ae:fb:99:df:61:be:dd:cf:89:b8:91:2c:2e:57:9c:ed:
57:87:0c:39:0a:61:04:cf:ce:22:00:5a:49:f9:60:29:9d:e2:
ea:fc:14:e3:e3:a3:0a:04:08:19:ab:ba:a0:36:5d:40:d4:ae:
ab:c2:4a:48:57:d0:12:2c:ec:08:f0:44:7a:df:e8:2c:61:ed:
25:8e:fc:57:10:09:61:36:f6:90:da:57:d4:4d:c7:b8:34:a4:
f7:e0:d7:9f:ae:75:e2:61:40:8a:6d:a0:6c:a3:d4:71:d8:a3:
35:6c:06:cb:34:2c:21:e6:bd:2e:51:2e:6a:84:04:c6:b8:72:
00:ef:83:7a:3e:2d:6f:e5:08:8e:c5:20:4b:d6:b9:f4:ff:e0:
79:19:f7:79:c4:f5:63:1f:76:85:55:9e:d5:35:4a:16:28:17:
f2:b2:18:bd:f4:c0:ab:49:c4:10:1b:dc:b6:ca:38:34:7c:43:
e3:8e:b6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:02:25 2026 by rpki-client