Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
File: yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json)
Hash identifier: riOsxII1JwOA9teLAzWfT8vIZ3oiD7r2j1xcP0//Vt0=
Subject key identifier: 06:FB:16:5B:97:E4:6D:AC:B0:8B:92:61:B2:F3:47:45:95:AD:29:A2
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 019FA9751A5AC31A3E56C49C2944630A00C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
Manifest number: 06A4
Signing time: Tue 28 Jul 2026 16:00:51 +0000
Manifest this update: Tue 28 Jul 2026 16:00:51 +0000
Manifest next update: Wed 29 Jul 2026 16:00:51 +0000
Files and hashes: 1: DHHudebUM3yKARxlaZ2YpDdj_10.roa (hash: 4IZZF7kG21QLytTXVu8J+ZgosQ4Y4zImjPdBHl+JNss=)
2: eCIxVJBlZJg4A1PAGkOvPg7aiUM.roa (hash: DjYNeiW4ymro6Kp8UT3pCBgwHWIhN9hxIR+IH3BcZMQ=)
3: i_xckZzjEkRw31aSrJAsV3dFCLE.roa (hash: autrGXMDWT9GWUylEMorom4KkZ2EMR11IzzFRFDlO9U=)
4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: 1V8L+eLGz0/audgkcw6ZNR4Br5cQhgYWqxYLdsUcOmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:1a:5a:c3:1a:3e:56:c4:9c:29:44:63:0a:00:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: Jul 28 16:00:51 2026 GMT
Not After : Jul 29 16:00:51 2026 GMT
Subject: CN=06fb165b97e46dacb08b9261b2f3474595ad29a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:d7:87:3d:a5:af:8b:ab:7c:06:fd:4a:b5:
b0:24:62:f4:05:be:88:ad:08:99:0c:d0:a3:09:25:
0a:43:af:3a:11:b9:df:fc:d0:eb:98:7e:81:85:49:
38:e6:fe:7f:4b:83:69:6a:d0:30:15:55:d8:a9:80:
09:d6:a6:a5:11:b2:0f:ed:59:da:ff:6d:8a:c6:2f:
a2:32:e3:fc:fc:30:50:f1:0d:0e:9c:51:0f:8c:41:
59:9c:76:b1:d5:c2:87:95:d0:3f:8d:6c:6f:62:b6:
74:1b:6d:6b:d0:fc:68:db:cd:39:6d:cd:24:dd:15:
40:c9:49:5e:6b:91:2a:c3:fb:96:6e:c6:2d:0d:e3:
54:4f:e5:ac:60:04:6b:5c:54:33:ae:66:b3:1e:d9:
3a:87:8e:7a:7e:2b:b7:5d:e9:b0:11:67:35:16:4f:
7d:ac:73:53:4f:2d:31:75:71:26:9a:b2:a5:18:e2:
92:16:2f:bf:75:ca:14:56:48:ad:c4:c9:85:b0:97:
33:20:cc:54:7a:6b:92:69:bc:2b:c4:eb:3d:50:dc:
bf:a0:82:27:a5:ae:99:75:8e:9c:70:55:5e:67:d5:
ec:05:3e:fe:09:8f:fe:46:f5:c3:1e:b0:ba:73:ec:
de:07:7a:4c:20:5b:66:66:70:ef:06:84:cb:45:f2:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FB:16:5B:97:E4:6D:AC:B0:8B:92:61:B2:F3:47:45:95:AD:29:A2
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f3:bf:f9:70:6b:ae:bb:74:1a:6e:d8:76:3c:be:d2:fb:0f:
c1:f4:28:16:66:82:60:06:30:b2:0a:d2:77:5f:81:c5:83:7e:
3b:c3:9f:e7:88:ca:09:98:ad:70:34:a7:ed:96:98:da:a8:dc:
af:52:2b:f8:68:f5:66:5a:9f:6f:12:a4:d6:15:cd:82:8f:ac:
a5:07:53:96:5a:14:7a:20:82:ff:38:c0:e8:2b:c5:19:ba:3d:
4d:b6:1a:a7:84:10:34:0a:ce:69:bd:db:90:d7:65:3c:3c:16:
83:7a:38:36:88:4e:fb:16:70:df:3a:c7:60:13:18:79:44:69:
11:76:8d:b2:c6:e5:d4:6c:73:3b:3c:2e:65:68:1c:b1:19:01:
d1:aa:0b:fa:14:e0:0c:0c:39:a8:f4:4d:14:63:7e:44:61:27:
70:b3:87:9a:cb:da:f6:b1:68:95:74:b4:21:52:36:c0:a2:32:
2d:ed:1f:a0:01:ab:e2:3f:53:c1:c4:7d:d3:b9:ac:6c:3c:a9:
1a:85:51:c7:d2:1f:7a:4c:2c:03:5d:1d:f1:00:6e:5d:39:8c:
59:aa:4d:6a:d4:31:65:74:eb:11:d6:1e:0b:79:b5:19:ec:ea:
69:01:3c:80:30:32:73:52:e4:88:b7:ed:43:02:c6:e6:5e:7f:
d2:45:4a:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdRpawxo+VsScKURjCgDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzQxMzJjMTJmODY5OTVmZTI4OTNlNGRlYTcyNjM4ZDI2
MDEwNzkwHhcNMjYwNzI4MTYwMDUxWhcNMjYwNzI5MTYwMDUxWjAzMTEwLwYDVQQD
EygwNmZiMTY1Yjk3ZTQ2ZGFjYjA4YjkyNjFiMmYzNDc0NTk1YWQyOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMvXhz2lr4urfAb9SrWwJGL0Bb6I
rQiZDNCjCSUKQ686Ebnf/NDrmH6BhUk45v5/S4NpatAwFVXYqYAJ1qalEbIP7Vna
/22Kxi+iMuP8/DBQ8Q0OnFEPjEFZnHax1cKHldA/jWxvYrZ0G21r0Pxo2805bc0k
3RVAyUlea5Eqw/uWbsYtDeNUT+WsYARrXFQzrmazHtk6h456fiu3XemwEWc1Fk99
rHNTTy0xdXEmmrKlGOKSFi+/dcoUVkitxMmFsJczIMxUemuSabwrxOs9UNy/oIIn
pa6ZdY6ccFVeZ9XsBT7+CY/+RvXDHrC6c+zeB3pMIFtmZnDvBoTLRfJ2pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb7FluX5G2ssIuSYbLzR0WVrSmiMB8GA1UdIwQY
MBaAFMh0EywS+GmV/iiT5N6nJjjSYBB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84OWNlNzQtOTM4MC00Y2NmLWE2MTUt
NGMwOGI0YWEyMGZlLzEveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84OWNlNzQtOTM4MC00Y2NmLWE2MTUtNGMwOGI0YWEyMGZl
LzEveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfO/+XBr
rrt0Gm7Ydjy+0vsPwfQoFmaCYAYwsgrSd1+BxYN+O8Of54jKCZitcDSn7ZaY2qjc
r1Ir+Gj1ZlqfbxKk1hXNgo+spQdTlloUeiCC/zjA6CvFGbo9TbYap4QQNArOab3b
kNdlPDwWg3o4NohO+xZw3zrHYBMYeURpEXaNssbl1GxzOzwuZWgcsRkB0aoL+hTg
DAw5qPRNFGN+RGEncLOHmsva9rFolXS0IVI2wKIyLe0foAGr4j9TwcR907msbDyp
GoVRx9IfekwsA10d8QBuXTmMWapNatQxZXTrEdYeC3m1GezqaQE8gDAyc1LkiLft
QwLG5l5/0kVKkA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:43:30 2026 by rpki-client