Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier: VySokOLogzGdgHWJfYkhFZAFo+tBU0VlY2t+8+LGVgQ=
Subject key identifier: 4D:19:85:79:DE:77:BF:8B:F0:48:33:6A:AB:3F:13:62:E6:B0:15:A8
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 019D2816B930E71D5F4E3526486706CD6C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 03:01:10 +0000
Manifest this update: Thu 26 Mar 2026 03:01:10 +0000
Manifest next update: Fri 27 Mar 2026 03:01:10 +0000
Files and hashes: 1: 1-CQYobvcQG21mAnMiaW7vyH7CXY.roa (hash: F30Qwwm1mnG4O3FtxSySy1RIR2PJUKOcNn6fyL1ZO8E=)
2: Q8ZPUdn-YmcTmBwAi_7GVX9YQUw.roa (hash: kBU03x/ocDiC2CPd5HE27yOrt08fP6gCbdih5TdOqEQ=)
3: Sy7wu7HbvDyeRA19AagewX8X6a8.roa (hash: 3GBSbUmpYJlg9KE6xgU1mWhmKjjwIsWji4O9OpkK8H8=)
4: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: bpyMPpxK2jZ+ClZEwQCi75QHdqf96IRIDcBVxfmsV/g=)
5: bdnGFt0hHzKvmqEY93Eh959DQNM.roa (hash: Uc8DaiaZyUQDwe1ODSCGoQeREP5FCzxxss2vrZnDmR0=)
6: lqsLALggP8BPfl8pdq3Xpv8eVgg.roa (hash: bdexZFMhJLX7gjQGkdBbU8UkKwrPdu12kMoaVc9RB3s=)
7: ruyO6zUfbaRsGVkfFZtSsnxMh1s.roa (hash: zoSCjiMf6V8kppFFwtfWmMhnEG6ujkudnMTWLbB1XSc=)
8: xkh0_qQROZrSh7wQT28dLg374SY.roa (hash: DYUAA1oa5//rqv0OvMnn2Z1Gp+Lzbo3Hx+khO/MXiMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b9:30:e7:1d:5f:4e:35:26:48:67:06:cd:6c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Mar 26 03:01:10 2026 GMT
Not After : Mar 27 03:01:10 2026 GMT
Subject: CN=4d198579de77bf8bf048336aab3f1362e6b015a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:38:30:af:4f:38:67:a8:9e:17:b7:81:19:
27:35:4c:db:59:2f:4f:cc:ca:54:97:7c:a9:58:f4:
8e:5d:07:8e:21:e8:92:c5:c2:55:c4:bf:95:26:89:
95:c8:da:67:05:85:65:43:b6:81:22:cd:e2:54:d9:
b8:71:fa:8e:44:d7:b8:47:55:5f:26:32:a7:05:90:
9b:4c:a8:1f:9d:6d:4e:5b:b9:5c:87:13:e9:af:3f:
bd:f7:4c:de:cd:1e:ce:e8:51:e0:37:7b:61:b7:df:
ff:b1:c7:35:f5:f6:54:d4:85:32:fd:4e:9c:97:c1:
05:b7:a7:60:d0:56:19:b9:1d:44:9c:98:94:5e:82:
a1:97:32:36:11:a9:d9:52:b8:ec:75:af:4f:69:a9:
7d:fc:79:2a:d4:6d:a4:80:eb:99:f9:7a:dd:c1:ff:
b2:e0:37:b9:ff:6f:af:53:2e:8c:76:34:3a:f2:21:
6c:f6:84:de:a0:84:45:30:7d:51:7e:28:f9:63:89:
db:26:00:0f:5d:a4:f7:ac:9a:55:42:97:df:e2:1a:
00:40:32:22:49:cd:32:a1:75:08:b5:58:8e:14:9d:
e4:e3:77:28:c4:ce:0e:de:4e:c9:61:6e:42:f9:89:
1a:fd:f3:6d:79:b3:8b:c5:0c:a7:d8:cd:9f:02:c3:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:19:85:79:DE:77:BF:8B:F0:48:33:6A:AB:3F:13:62:E6:B0:15:A8
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5a:18:b6:f4:d6:32:13:e1:be:7f:6c:44:8c:49:65:e8:38:
b2:1c:31:34:e7:78:c7:7c:bc:5c:54:1f:aa:0d:37:83:94:2b:
66:72:99:a9:ea:e0:32:9d:3f:ea:82:72:29:ad:b5:a7:cf:e0:
be:c1:be:c2:95:64:86:0a:61:39:48:e9:95:ef:3f:60:39:b4:
88:a3:0d:48:9a:6b:44:09:55:6f:48:6f:65:e6:35:3e:c5:b8:
55:a9:77:99:e9:02:ad:d4:57:bd:94:06:9d:ea:47:c2:c1:2d:
31:cb:ab:69:85:75:eb:a0:c4:03:c8:ce:eb:e5:c0:33:93:40:
94:c2:7a:af:ff:9f:9f:ed:32:51:81:b8:92:fe:b6:d6:cc:32:
b1:2b:54:1a:e0:0b:9e:8d:4d:ff:70:9c:9f:17:a0:88:0c:95:
a8:5d:f5:37:91:f6:4f:75:90:eb:6b:e9:2e:10:c6:bf:df:72:
b1:9e:cc:2b:40:52:fc:72:4d:78:19:cd:85:96:15:e5:f4:79:
3f:75:ed:da:64:b8:8f:e2:59:27:f1:a9:b8:f4:33:8e:a6:1c:
62:43:f4:a9:8a:dd:e0:62:d3:58:5b:de:a2:7c:d0:e1:49:2a:
23:bc:d4:80:87:15:24:1e:14:81:a6:44:40:6e:96:bd:43:d1:
5f:59:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:54 2026 by rpki-client