Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
File: yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json)
Hash identifier: YgOgfZE4EItWJtoRwYf5cU0+ea3+KTHOTgyR2Lko97w=
Subject key identifier: 78:0A:2A:62:CA:49:89:5F:11:EC:AC:43:2D:E1:53:B7:2E:64:A1:FB
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 019CAAC6E5F1140DA96E3C749ABEAAA16F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
Manifest number: 0517
Signing time: Sun 01 Mar 2026 19:01:27 +0000
Manifest this update: Sun 01 Mar 2026 19:01:27 +0000
Manifest next update: Mon 02 Mar 2026 19:01:27 +0000
Files and hashes: 1: DHHudebUM3yKARxlaZ2YpDdj_10.roa (hash: 4IZZF7kG21QLytTXVu8J+ZgosQ4Y4zImjPdBHl+JNss=)
2: eCIxVJBlZJg4A1PAGkOvPg7aiUM.roa (hash: DjYNeiW4ymro6Kp8UT3pCBgwHWIhN9hxIR+IH3BcZMQ=)
3: i_xckZzjEkRw31aSrJAsV3dFCLE.roa (hash: autrGXMDWT9GWUylEMorom4KkZ2EMR11IzzFRFDlO9U=)
4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: 9JsvpUBJPMN/GbUm1EpUnZ6qw9tbNNSmx+zwQs3lTLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e5:f1:14:0d:a9:6e:3c:74:9a:be:aa:a1:6f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: Mar 1 19:01:27 2026 GMT
Not After : Mar 2 19:01:27 2026 GMT
Subject: CN=780a2a62ca49895f11ecac432de153b72e64a1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:45:f2:c3:56:06:3f:26:f7:b1:c2:d1:3e:
83:e4:e8:1d:06:b7:85:04:9e:b1:1a:e3:40:f8:7a:
88:23:37:84:72:80:22:16:e7:b2:6a:73:7a:d2:f4:
e5:aa:1d:45:35:f4:bc:20:1d:7c:24:6d:0c:7a:bc:
4c:43:46:fd:1a:c5:59:ac:10:fa:46:af:f4:0b:be:
c7:c6:0d:75:a7:59:97:c6:11:1c:24:46:e3:c7:5f:
e5:46:a9:7d:a6:ba:86:4a:f0:f3:72:96:39:85:52:
8a:7d:4c:f3:12:84:57:0e:24:9e:c3:04:e0:fa:d7:
6d:3c:c3:53:cb:3c:87:04:ab:91:26:cd:04:5d:6c:
f4:ac:8e:0d:97:4f:a5:5b:ea:d8:77:c7:a8:aa:66:
61:45:e7:e3:37:5a:e5:76:48:6a:3a:65:97:5a:74:
f9:7c:42:f9:e3:f9:09:51:72:29:48:82:fa:10:ee:
ed:19:9c:db:55:eb:af:a8:68:1e:c2:e6:69:18:76:
17:73:12:cc:3b:01:b7:4b:80:8a:76:95:24:c6:e3:
7e:e0:c0:29:da:9a:fe:c3:18:f9:6b:5e:75:05:1a:
ef:31:77:8c:1e:05:6d:24:67:5a:43:a5:60:8a:95:
df:8f:03:6f:70:c9:2d:dc:31:81:f3:da:20:5f:43:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0A:2A:62:CA:49:89:5F:11:EC:AC:43:2D:E1:53:B7:2E:64:A1:FB
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:89:33:74:b8:cd:2f:e6:0d:6b:3a:0f:8f:ae:11:60:f4:f7:
21:a9:8e:b8:b1:e8:06:e6:38:ec:c1:ee:b6:f2:8c:8d:6f:db:
8d:ca:b1:4a:3a:8e:12:f7:20:10:15:db:c1:86:fb:17:e1:0d:
2d:16:fb:8e:12:53:ca:04:6b:cf:e9:d1:db:5a:94:03:57:fa:
26:3e:26:88:2e:84:84:b9:69:2e:0e:e3:84:b1:f0:32:68:55:
fb:d7:ce:19:4b:72:bd:f7:e2:07:f9:fe:63:61:55:ac:c1:27:
f5:c3:ce:e3:18:55:62:b7:94:ab:a0:11:55:f9:7f:f4:5f:a9:
7f:d4:d4:bc:3f:7e:5c:d9:b4:4e:4e:59:ea:29:87:1e:f7:39:
f9:77:d4:c4:a2:e2:05:ab:09:6a:fc:7f:18:81:cc:fd:cf:fd:
40:c9:ea:99:89:b8:74:b9:24:ff:0d:9f:47:9b:b5:ec:a6:f3:
ba:c3:89:ad:e8:67:b0:4e:58:58:3c:30:72:ce:27:a5:e4:b0:
d5:c4:c4:44:d6:22:c6:b1:3c:5a:0d:64:98:86:fa:90:0b:93:
59:3a:56:06:e7:a9:68:ab:4f:15:dd:a8:f3:fc:4e:e1:24:38:
a3:c6:f4:4e:7a:f7:dd:cf:1b:6d:5e:12:63:96:98:14:0f:ca:
18:e2:a6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:20 2026 by rpki-client