Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier: tiAjfsEPoHkN3lCa7Z/rXKvZr3A+dYEXagI+iE3ReAM=
Subject key identifier: 59:F5:27:FE:6E:8D:DF:FC:9A:E7:E0:FD:02:9C:63:34:3D:97:E6:C6
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 01A0C143CF2699AD954AAAA5B501DE24E4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number: 088C
Signing time: Mon 21 Sep 2026 00:00:41 +0000
Manifest this update: Mon 21 Sep 2026 00:00:41 +0000
Manifest next update: Tue 22 Sep 2026 00:00:41 +0000
Files and hashes: 1: Rmbqki6sfeVONmSCUKVbSwnLV2w.roa (hash: m02OGs1ERDq2Tep5VBBDirUwK9M85zv/SGcl5/T9Gng=)
2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: E+KwpsyUrfMTEzWNBesSaJ9VTg7Gbrw7P2PCEg905Y0=)
3: YrjDjaI3_Q6KPQ90f8RoYBEvTqI.roa (hash: VmD17BnA3G7W1dMkZraFPy0h1sdRJ/jQerJj3HVgUI8=)
4: mEMBpqCiAZX-66IM2v28OLBYmaU.roa (hash: D0q/tQQJTMQWefAkqZBJ1Tlw8AdCPKqxL86ZtoZ1fgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:cf:26:99:ad:95:4a:aa:a5:b5:01:de:24:e4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Sep 21 00:00:41 2026 GMT
Not After : Sep 22 00:00:41 2026 GMT
Subject: CN=59f527fe6e8ddffc9ae7e0fd029c63343d97e6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:dc:7f:e7:dd:9b:99:a5:2a:9d:2a:a1:be:
5f:c0:7c:62:b4:7b:6c:8c:eb:48:af:b7:f1:dd:79:
7e:a5:a2:1e:43:71:3b:20:2e:f3:f1:7c:c6:1c:e4:
e0:53:eb:01:07:31:d0:73:22:d0:a7:16:b5:ba:af:
03:35:7f:cf:cf:72:a1:ca:5d:c2:91:ea:6c:17:e8:
f9:1a:dc:d6:b3:e3:99:b1:75:60:43:04:85:23:8b:
0a:18:1a:3d:e5:ac:9f:84:18:cf:3f:09:52:6d:8e:
a5:54:9d:36:03:d3:58:7b:51:d7:b6:2b:41:0d:a3:
ff:6f:26:45:31:e3:f9:76:c2:a1:ac:10:c9:c3:86:
7f:d8:6a:99:9d:02:38:d2:d2:5d:61:df:6c:21:90:
c2:d6:34:ac:8c:8a:9a:dd:cd:f3:87:c0:28:98:82:
63:74:ef:c2:9b:c4:cb:da:74:b0:b1:2c:6f:c5:bf:
03:67:13:48:9e:03:1b:7b:d2:c6:73:ce:a9:d2:2b:
bd:a0:67:1b:3b:79:5e:72:0a:60:3b:17:a7:db:62:
4b:9f:c5:11:47:d8:2c:13:71:25:53:da:06:1f:f2:
1c:29:a9:c5:54:d4:b4:f1:13:85:52:e3:4b:31:e9:
80:62:b7:79:e5:ed:b3:d9:1e:af:6f:cb:c7:8d:b5:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F5:27:FE:6E:8D:DF:FC:9A:E7:E0:FD:02:9C:63:34:3D:97:E6:C6
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fc:0f:4c:9e:ee:9e:47:1b:80:f7:ec:ad:16:e3:ef:e9:b5:
34:55:16:67:e4:20:d4:72:a8:5b:39:a8:fd:ae:9a:63:be:43:
e3:48:75:9f:66:50:91:33:43:08:fe:40:dd:47:ad:9b:c1:46:
df:0d:ab:a6:82:9d:cd:bf:7a:41:b7:f5:24:fc:d5:32:ec:1d:
79:3e:42:ac:3b:94:6a:9d:48:a0:ca:93:88:c4:66:c9:bb:4f:
42:ba:18:b3:65:24:8c:a5:8b:a1:00:a9:0b:bc:85:78:c9:d9:
b7:42:57:0f:ff:e6:58:e6:9d:8a:9b:d7:55:5c:4a:8f:7c:e0:
b8:b3:7b:e1:c4:ae:ca:d5:42:25:ee:e4:56:30:23:c0:a6:39:
00:a4:fe:ea:bf:e7:2c:55:ba:fe:37:09:51:d5:0e:70:29:5d:
cf:37:c4:32:93:cd:c7:59:98:b8:e1:3f:a7:f1:cf:eb:46:82:
0c:36:64:b4:2a:c1:17:58:fb:4f:d6:b2:a2:92:db:ab:9e:64:
85:12:5e:a7:b6:3e:3c:2b:55:a7:44:75:3d:60:d2:f6:80:0b:
a6:3c:25:76:ff:ec:13:07:5c:f9:6a:9e:ab:0e:8c:05:aa:3a:
e1:6c:38:3e:98:e9:ee:8e:7d:5d:26:90:a1:ef:42:0b:2d:b2:
8e:43:cc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:11:25 2026 by rpki-client