Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier: 7EmDkX9W9v9JyNdCcevBXDRaKfzIybH3to457SeQIi4=
Subject key identifier: 76:41:8C:99:7B:A9:B7:01:53:BC:10:82:85:4B:AB:8B:AC:AB:C0:AC
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 01A1AAF02F6695EA7DA06370747D9CCBF55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number: 0905
Signing time: Thu 05 Nov 2026 09:00:29 +0000
Manifest this update: Thu 05 Nov 2026 09:00:29 +0000
Manifest next update: Fri 06 Nov 2026 09:00:29 +0000
Files and hashes: 1: Rmbqki6sfeVONmSCUKVbSwnLV2w.roa (hash: m02OGs1ERDq2Tep5VBBDirUwK9M85zv/SGcl5/T9Gng=)
2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: 12B1Ni5ECuyNdsGrbng8BXZVMh7V6x42kV9Lopv8oAo=)
3: YrjDjaI3_Q6KPQ90f8RoYBEvTqI.roa (hash: VmD17BnA3G7W1dMkZraFPy0h1sdRJ/jQerJj3HVgUI8=)
4: mEMBpqCiAZX-66IM2v28OLBYmaU.roa (hash: D0q/tQQJTMQWefAkqZBJ1Tlw8AdCPKqxL86ZtoZ1fgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:f0:2f:66:95:ea:7d:a0:63:70:74:7d:9c:cb:f5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Nov 5 09:00:29 2026 GMT
Not After : Nov 6 09:00:29 2026 GMT
Subject: CN=76418c997ba9b70153bc1082854bab8bacabc0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:47:bf:d9:31:b7:e1:f4:18:6c:ca:47:92:
3f:17:d5:09:5f:72:e1:32:f4:ca:10:a6:01:f5:43:
5d:60:b8:64:e1:6a:c9:75:e9:af:2d:45:b0:51:89:
f3:7c:fb:9d:6f:d6:6d:d2:87:32:f2:64:e7:d2:ca:
4b:8d:74:b9:41:cc:ad:78:88:2f:a0:f4:2f:6d:d4:
35:3a:17:4e:aa:d3:fc:28:a3:99:72:e3:aa:b6:bc:
4a:d0:8e:59:87:2b:c7:f9:ca:2a:ef:fb:4a:68:f7:
57:4b:84:c9:3c:fd:69:09:12:84:bc:99:17:30:2b:
76:d9:f5:5d:ab:5b:80:75:fe:7d:d3:ba:2b:a3:73:
40:16:ef:a7:b8:2b:21:46:23:b1:77:70:b4:99:95:
e5:0e:b8:75:5f:c0:6c:48:15:0f:e0:78:be:e2:50:
77:70:25:b3:5d:49:6a:fe:b6:13:d7:4f:24:60:a9:
fd:0c:6d:fc:2b:e2:c8:30:f4:be:03:b9:f6:39:3c:
06:c0:be:55:0c:c9:6d:17:f1:24:06:bc:6e:a0:13:
ac:2e:d5:20:c9:24:3a:24:9f:07:f1:7b:2d:d5:8c:
e5:f4:6a:ad:56:57:c3:34:45:17:f1:d1:39:12:c2:
e6:a7:11:a8:f4:79:7e:9e:48:aa:5e:76:53:2a:87:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:41:8C:99:7B:A9:B7:01:53:BC:10:82:85:4B:AB:8B:AC:AB:C0:AC
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9d:0e:04:42:d2:ba:77:a7:17:b9:e2:a1:33:4e:dd:73:6f:
de:40:44:4c:ec:46:c2:c5:ca:0d:6b:86:1e:09:d2:89:9e:9f:
37:f4:1a:b5:e3:0a:1a:d4:5c:cf:37:b0:4f:9b:89:44:68:30:
8d:a4:e2:02:e2:f0:57:72:50:02:ae:83:c2:97:a4:83:44:1b:
13:1b:df:0e:9e:e7:03:7b:72:34:c5:7b:23:23:2b:39:d4:d0:
bc:12:6f:72:5b:a7:ca:82:8f:0b:7f:a8:21:6c:60:ca:65:76:
79:eb:e8:02:62:fa:3d:ba:af:a1:12:2b:5b:05:d0:1d:86:8c:
ae:93:08:47:81:36:ee:6c:76:b7:83:52:bb:8d:be:0f:00:72:
8a:58:4a:9f:c5:54:db:ca:c5:b2:69:fe:d6:07:a9:ba:a5:6c:
b2:07:e6:59:c2:64:c1:6b:07:5e:76:37:92:2f:3a:db:f0:5c:
76:b3:ff:d0:b1:69:54:fe:5d:1e:6c:3c:b6:7c:9c:75:ad:cb:
27:37:25:6b:a0:b0:fe:59:19:05:c4:4d:4e:f3:e9:9f:2c:34:
84:c8:e4:e5:d9:6e:e6:7d:a6:3b:68:6c:5e:79:74:ea:72:fe:
9f:60:b5:77:a2:d1:b5:dc:1f:f2:17:9d:1f:92:2e:01:3a:ba:
d9:a2:3b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:25:33 2026 by rpki-client