Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: lib9nyRTV86Zem2p5tlFmavfaI+FgfH/kb22NPLtAXY=
Subject key identifier: 92:88:3D:70:3A:D3:B4:28:FA:A4:B4:60:43:45:13:0F:72:F3:7D:F9
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 019E1FB59D8ECAE05EF5E07FECFAFBD647E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 05:00:56 +0000
Manifest this update: Wed 13 May 2026 05:00:56 +0000
Manifest next update: Thu 14 May 2026 05:00:56 +0000
Files and hashes: 1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: f9shgKhnvDyCJtFH5W3qzIMT+Iw93keAxYrp9S8Qg0U=)
3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:9d:8e:ca:e0:5e:f5:e0:7f:ec:fa:fb:d6:47:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: May 13 05:00:56 2026 GMT
Not After : May 14 05:00:56 2026 GMT
Subject: CN=92883d703ad3b428faa4b4604345130f72f37df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:c3:b5:f7:15:73:1d:d4:e9:79:23:e5:19:
44:bd:97:1d:a7:7f:fc:e8:91:3c:57:e3:d7:0e:79:
68:9d:b0:57:5d:23:99:a0:b2:f6:0b:be:0b:8d:27:
cd:76:68:fe:09:5c:f3:2d:d8:e4:5a:96:99:df:63:
f9:3f:b2:2b:11:dd:65:e6:4d:c9:53:fb:4e:1a:1d:
c6:2f:c3:06:78:a4:db:50:50:c7:63:ef:38:3e:05:
45:02:0a:9e:1d:31:67:5f:99:6a:34:27:c6:04:46:
dc:c7:d7:ac:46:39:85:16:f5:f4:59:32:08:a7:91:
d7:0b:26:7a:7b:18:ef:87:d6:b8:a7:cf:55:35:3a:
3b:9f:b0:0c:8a:b9:de:d7:ef:90:8d:b6:72:b6:64:
1b:0a:74:a9:fc:a7:75:0c:8a:25:38:2b:01:44:f1:
ed:6f:53:e9:14:e0:b3:fe:bc:d0:1a:f7:5b:e0:0f:
b2:f5:d1:81:86:d4:59:6f:e1:4d:3a:ea:42:fb:ba:
28:31:a5:e7:85:28:d3:4d:09:4b:c4:a8:1f:f3:1d:
b4:73:0f:8b:22:9a:51:e7:f7:4d:18:fa:58:ba:bd:
fe:f6:e0:46:87:d6:b2:70:96:55:46:1d:4c:0f:87:
3b:50:10:73:e9:0d:09:c6:ef:31:63:b9:fe:ce:a4:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:88:3D:70:3A:D3:B4:28:FA:A4:B4:60:43:45:13:0F:72:F3:7D:F9
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f8:13:a7:16:f9:5f:48:63:cb:71:9d:8c:a1:2c:e9:53:06:
e6:dd:c6:0e:a0:2c:d4:ef:c4:e0:71:49:c7:47:35:5a:35:f4:
a6:6a:87:2d:7c:a2:94:89:9e:32:e7:af:0a:f7:0b:58:6e:1b:
df:0b:20:a4:13:79:75:fd:77:2b:62:40:99:d8:2a:ac:91:1c:
ad:7e:59:f8:bf:99:fb:5c:a6:22:73:6b:02:92:04:02:b3:7b:
67:2a:9c:e5:25:e0:3d:a1:d0:1c:f9:e4:4d:a5:64:2e:e6:87:
6d:9d:46:de:8c:81:e0:65:b4:26:85:2b:33:e7:91:db:3c:9c:
0c:cf:ef:3c:71:92:24:0a:e0:92:dd:62:4e:3d:5d:d6:32:53:
05:8a:7c:7d:10:56:69:1e:01:da:20:40:a2:e3:16:be:43:6f:
7a:6e:a8:5d:0b:fb:07:bc:59:f8:87:9a:91:26:50:da:20:92:
d7:f6:3c:21:47:89:39:1d:43:bb:ba:81:e2:ef:af:f4:a6:e6:
d3:6a:59:13:26:36:b3:53:f5:e9:3a:bb:cc:12:9b:58:a0:0a:
4f:cc:7c:9c:64:82:4f:15:70:2a:f0:97:e9:4d:04:27:63:35:
be:49:d4:53:af:61:67:59:4d:b0:60:a1:4a:1b:3a:c1:f8:37:
de:cf:4f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:31 2026 by rpki-client