Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: ts3delWAO8EOjW2vmMHAyXhi3xrFRy0cmUfLM90V3pY=
Subject key identifier: 2A:7E:B3:D2:22:EC:1D:30:69:92:67:DE:99:85:58:2A:63:3E:57:93
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 019F946D71526364207D93A4BDE20F70A5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 14:00:28 +0000
Manifest this update: Fri 24 Jul 2026 14:00:28 +0000
Manifest next update: Sat 25 Jul 2026 14:00:28 +0000
Files and hashes: 1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: 6FrRg4yIA5tPVhsLuyeUqgm/BLsF2Wlak7eXt8BPlbg=)
3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:71:52:63:64:20:7d:93:a4:bd:e2:0f:70:a5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Jul 24 14:00:28 2026 GMT
Not After : Jul 25 14:00:28 2026 GMT
Subject: CN=2a7eb3d222ec1d30699267de9985582a633e5793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:0c:7c:14:4c:26:a6:c3:7e:4b:7a:06:c4:
7c:17:38:cd:10:b7:3e:b9:a8:56:d0:7c:1f:7a:7d:
d0:51:93:73:72:4b:f4:da:06:5c:1e:93:d3:6b:91:
c8:2f:3d:56:c3:59:05:13:89:b3:43:2d:04:fc:91:
a5:76:66:79:5e:df:31:ed:7b:bb:a2:38:ef:2f:4f:
84:ab:e2:00:1d:66:57:6a:44:30:5a:ea:93:34:7e:
52:b7:ea:e9:b2:34:56:2f:db:9e:37:cc:a6:44:eb:
ca:b9:0f:82:86:27:20:10:54:e3:4e:e5:1d:8b:a7:
80:3b:25:bb:e8:19:1e:8b:db:9e:12:b1:03:63:41:
ab:a6:75:0d:1e:10:be:b3:26:68:0f:1a:0c:5b:69:
0d:18:09:a8:17:83:cf:aa:5d:e7:5e:8a:bd:9f:4d:
08:72:3c:95:97:f8:4b:bd:40:5e:d8:d4:6b:d2:53:
5f:7f:22:8f:c8:8e:0e:06:b5:ed:d7:a0:4f:d2:7d:
fd:fd:6e:d4:fc:dd:aa:c8:5b:b0:ac:7a:14:68:56:
0d:42:ac:2e:43:47:10:cd:30:b0:07:9d:aa:22:54:
89:cd:14:44:7d:77:39:3b:fd:ec:76:09:42:13:87:
2a:10:07:40:41:84:94:6f:62:6d:ad:55:57:7c:ae:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7E:B3:D2:22:EC:1D:30:69:92:67:DE:99:85:58:2A:63:3E:57:93
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d6:0a:ef:f6:ac:50:42:ae:1f:65:e8:05:52:a6:08:79:6c:
9e:91:3d:61:d2:63:49:cc:e2:6b:8a:2b:9b:ce:b1:da:c6:e8:
0f:19:b7:68:7c:d5:28:79:cd:54:68:fc:14:86:b5:cf:d1:b0:
7c:fe:b0:be:8a:fa:81:58:9a:c2:fc:ee:0f:e9:c6:07:8c:64:
11:22:64:9d:8d:ac:a0:78:0e:1b:ae:ae:69:d4:3f:45:03:83:
6b:8b:6b:b5:e5:0c:86:38:b9:8d:18:55:58:4e:32:fc:85:04:
17:b0:25:31:b1:ba:25:b9:ed:bd:09:35:11:2a:2b:c8:65:8d:
5a:46:a6:33:d9:db:db:aa:7b:cb:1c:7d:91:a6:67:0b:c6:ec:
b2:4e:60:34:f3:40:35:ec:06:32:f4:68:a3:48:be:88:cf:e9:
4c:80:82:3b:38:ff:88:35:20:e3:0f:56:4d:4f:42:74:1a:65:
f3:c7:4b:d2:ab:95:f3:33:83:e2:ad:c2:1b:f6:7c:94:f7:fd:
a3:f8:1d:6b:8f:22:e4:5f:27:e8:3f:0a:ce:26:76:f9:30:03:
bc:29:a6:ce:de:60:c3:dd:a7:6e:b7:ea:b3:f0:a5:1c:ed:f8:
a6:81:62:3a:5c:f5:28:55:a3:36:6e:f0:f1:0e:b1:76:4b:31:
40:ca:e3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:53 2026 by rpki-client