Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: n3h7h5uip9IL0J6iQ4FygwlPSMfMNdRxGpZrlv0Im4A=
Subject key identifier: 02:BC:47:71:70:AA:3A:2B:42:FC:6B:A9:7B:92:FE:0B:5B:64:1B:FD
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 019D2A72415277519BC4F186EA556707C05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 14:00:23 +0000
Manifest this update: Thu 26 Mar 2026 14:00:23 +0000
Manifest next update: Fri 27 Mar 2026 14:00:23 +0000
Files and hashes: 1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: fz0/L579aKsprD6APW86YK5/nfhPMxNtvTXxpVbkaIM=)
3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:41:52:77:51:9b:c4:f1:86:ea:55:67:07:c0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Mar 26 14:00:23 2026 GMT
Not After : Mar 27 14:00:23 2026 GMT
Subject: CN=02bc477170aa3a2b42fc6ba97b92fe0b5b641bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:4b:66:83:43:31:ed:96:9c:6c:0e:ae:7d:
5e:1c:a2:cd:47:04:11:6b:41:ab:75:a7:da:f4:2a:
76:6e:44:64:a8:c9:f5:13:09:31:a9:3c:25:c8:19:
9f:72:3f:e2:b9:7a:66:33:e4:cc:d1:0d:ab:f8:aa:
22:40:86:c7:37:d8:8a:0c:a3:5b:76:17:41:73:34:
90:e2:cd:8f:e6:cb:38:35:12:af:f4:ae:e2:5c:7b:
c6:0e:ce:0c:24:8b:38:c5:14:b0:52:19:6d:ab:32:
47:45:07:47:01:2e:b5:0c:19:5d:78:27:47:8d:3b:
3e:07:63:5d:cb:8c:67:77:22:46:75:94:f4:1d:41:
59:c6:4d:13:8c:37:51:b7:31:26:28:2f:14:6b:f3:
92:4d:f0:5e:06:7c:c6:05:a2:ef:79:9e:33:0c:8f:
4d:fe:fc:c4:95:37:1c:66:66:85:9a:95:3f:81:b7:
99:b6:ef:87:2a:b0:e5:dc:9d:f0:dd:05:73:bb:33:
fc:81:a3:4b:0e:aa:df:5d:42:42:ae:4f:b6:2b:c6:
62:43:df:2a:a9:f5:97:b8:14:13:16:73:ac:cd:13:
e3:6c:39:13:f8:74:c9:af:09:1d:0c:7a:2c:cb:15:
37:7d:15:e4:d7:c6:c8:93:5e:dd:a5:18:26:db:c9:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BC:47:71:70:AA:3A:2B:42:FC:6B:A9:7B:92:FE:0B:5B:64:1B:FD
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d3:55:fa:77:87:d4:d2:d6:b6:3a:1b:9d:4f:cc:38:54:31:
2a:ae:49:fb:e5:d8:8d:85:6c:98:f1:6a:45:19:a4:71:fe:f2:
2d:7f:20:6b:45:df:fa:07:f0:cf:cb:e2:7a:8e:f9:5d:71:44:
fe:68:0e:46:c9:6e:46:89:d4:3d:0d:f5:c2:3b:07:e2:92:3d:
8d:b5:68:e2:80:e2:14:7c:78:97:c1:cb:02:2d:27:37:bf:ff:
d3:89:fc:d3:eb:0e:ef:57:9d:43:36:7a:7d:c3:2f:8f:06:f7:
17:1d:30:cf:00:19:53:18:13:34:dc:15:0d:24:16:82:ae:a8:
8a:bb:00:49:f0:d7:11:24:e2:62:13:c9:8f:d2:d9:9b:58:5f:
ab:81:22:c9:83:f9:da:01:63:86:8b:d2:a4:3c:05:81:e2:b7:
73:dd:fa:87:0b:b8:e6:ce:aa:1f:21:66:26:ca:5b:2b:d0:bb:
d5:42:66:94:b1:74:de:9a:2e:a3:7a:aa:f6:62:eb:3f:00:74:
50:71:ff:d6:01:b4:00:8b:93:e0:7b:81:8c:16:d2:1e:dd:4a:
88:8e:60:a8:94:d1:8e:cf:d4:0b:a0:93:d6:2a:04:66:8b:b2:
39:73:8a:44:9d:cb:de:39:9f:26:ce:41:71:56:79:d7:2e:33:
ee:62:af:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:34 2026 by rpki-client