Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier: 1EZYcXYY+6kuVBwSoRowEZdj8/tQMDlZUhvSl6WR4N0=
Subject key identifier: 7A:11:DA:1A:82:E8:B9:04:DD:31:06:7A:EA:21:07:32:86:79:FA:A7
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 01A1DB384082A833DCA4174922BAEB61471F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number: 1B00
Signing time: Sat 14 Nov 2026 18:00:59 +0000
Manifest this update: Sat 14 Nov 2026 18:00:59 +0000
Manifest next update: Sun 15 Nov 2026 18:00:59 +0000
Files and hashes: 1: 1-CQYobvcQG21mAnMiaW7vyH7CXY.roa (hash: F30Qwwm1mnG4O3FtxSySy1RIR2PJUKOcNn6fyL1ZO8E=)
2: Q8ZPUdn-YmcTmBwAi_7GVX9YQUw.roa (hash: kBU03x/ocDiC2CPd5HE27yOrt08fP6gCbdih5TdOqEQ=)
3: Sy7wu7HbvDyeRA19AagewX8X6a8.roa (hash: 3GBSbUmpYJlg9KE6xgU1mWhmKjjwIsWji4O9OpkK8H8=)
4: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: QmlUprOoaQahYxDre3k2JGpkCmA6YGMnJkoRBF3TFW0=)
5: bdnGFt0hHzKvmqEY93Eh959DQNM.roa (hash: Uc8DaiaZyUQDwe1ODSCGoQeREP5FCzxxss2vrZnDmR0=)
6: lqsLALggP8BPfl8pdq3Xpv8eVgg.roa (hash: bdexZFMhJLX7gjQGkdBbU8UkKwrPdu12kMoaVc9RB3s=)
7: ruyO6zUfbaRsGVkfFZtSsnxMh1s.roa (hash: zoSCjiMf6V8kppFFwtfWmMhnEG6ujkudnMTWLbB1XSc=)
8: xkh0_qQROZrSh7wQT28dLg374SY.roa (hash: DYUAA1oa5//rqv0OvMnn2Z1Gp+Lzbo3Hx+khO/MXiMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:40:82:a8:33:dc:a4:17:49:22:ba:eb:61:47:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Nov 14 18:00:59 2026 GMT
Not After : Nov 15 18:00:59 2026 GMT
Subject: CN=7a11da1a82e8b904dd31067aea2107328679faa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:cc:db:aa:14:db:1e:31:34:e1:ab:3d:3a:
39:1a:94:0e:b9:08:2a:c0:ce:92:ab:a1:53:53:a7:
62:24:7c:2a:ae:c4:96:06:bb:a4:02:47:6e:d6:57:
82:af:78:30:d6:b1:41:83:79:a3:ff:c4:af:46:13:
52:4a:79:37:da:8b:cc:04:9c:c7:16:31:97:61:b8:
75:04:c8:c7:a4:62:4d:69:db:98:40:c4:95:3e:d1:
98:ad:64:9a:57:f3:1c:16:5e:94:28:b2:ce:df:a6:
08:35:cf:05:bd:b8:5b:a2:c1:02:16:3c:81:cd:c3:
56:b3:e7:de:7d:c7:a8:ec:2c:de:f9:c3:79:8d:ba:
ff:e9:83:02:75:b4:43:bc:dc:07:4f:2f:40:d9:79:
aa:83:d2:e9:97:5d:a2:e6:c0:44:a3:dd:a6:df:a1:
60:de:52:ab:2b:67:3c:ad:48:a6:00:f8:1c:2b:1d:
b0:8b:1c:ef:b4:85:d3:51:b1:6b:89:e9:39:58:cd:
05:3d:5c:0c:14:29:0d:6b:be:df:9e:23:17:f5:24:
3f:70:15:02:47:b1:c1:d1:b8:70:ba:09:aa:ea:e6:
64:b3:ee:ef:46:48:99:d4:08:aa:b4:90:56:d2:6c:
c0:f6:64:aa:97:f2:a9:00:33:33:8d:05:a5:8b:7c:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:11:DA:1A:82:E8:B9:04:DD:31:06:7A:EA:21:07:32:86:79:FA:A7
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:27:37:da:ef:e5:aa:39:0a:86:f0:12:81:7c:ff:fa:9a:35:
56:f5:2b:f7:3c:6f:57:b6:ff:af:bb:1c:d6:24:f8:fa:1d:58:
6f:b7:e1:2c:92:66:3e:7c:1a:4e:9a:b0:7b:3b:dd:25:02:d4:
8e:52:47:b3:5b:67:3c:35:aa:b6:ba:09:6f:89:4a:6b:d7:bf:
03:22:54:a2:e5:1a:d9:6c:00:07:ff:88:88:3a:36:01:dc:60:
60:e2:40:ec:22:b7:5b:36:11:f4:37:f8:ff:22:92:63:0e:ba:
0b:25:4d:01:4e:22:4d:e3:b3:92:df:ea:99:02:b2:4f:c9:89:
fa:b6:64:d4:f4:76:55:a7:69:fd:41:54:3c:4c:c8:2e:34:73:
e8:35:67:8d:92:4f:e4:9f:0a:f0:2a:63:16:ea:6d:ab:5a:2b:
0c:f9:70:89:59:65:43:b6:4a:af:a5:07:1d:77:9b:64:7d:c4:
68:34:6f:52:b0:2d:b0:2f:ba:0b:17:6a:1c:86:8b:6d:72:1f:
47:e6:11:8f:b8:96:48:03:2c:24:bc:08:d5:9e:d1:ff:d4:7b:
9b:05:bb:41:46:c0:12:99:d8:b3:de:f3:74:0e:a1:45:1f:ac:
91:bf:ce:91:f3:48:ea:cc:06:9d:7b:ce:64:d5:4f:43:5c:d3:
bc:c4:3d:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbOECCqDPcpBdJIrrrYUcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTMxMDMwMjAxOGEzODdjNjkyMTQ2YTM1ZWZkMzNhNmVk
NmIxZWYwHhcNMjYxMTE0MTgwMDU5WhcNMjYxMTE1MTgwMDU5WjAzMTEwLwYDVQQD
Eyg3YTExZGExYTgyZThiOTA0ZGQzMTA2N2FlYTIxMDczMjg2NzlmYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmHM26oU2x4xNOGrPTo5GpQOuQgq
wM6Sq6FTU6diJHwqrsSWBrukAkdu1leCr3gw1rFBg3mj/8SvRhNSSnk32ovMBJzH
FjGXYbh1BMjHpGJNaduYQMSVPtGYrWSaV/McFl6UKLLO36YINc8FvbhbosECFjyB
zcNWs+fefceo7Cze+cN5jbr/6YMCdbRDvNwHTy9A2Xmqg9Lpl12i5sBEo92m36Fg
3lKrK2c8rUimAPgcKx2wixzvtIXTUbFriek5WM0FPVwMFCkNa77fniMX9SQ/cBUC
R7HB0bhwugmq6uZks+7vRkiZ1AiqtJBW0mzA9mSql/KpADMzjQWli3yEEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoR2hqC6LkE3TEGeuohBzKGefqnMB8GA1UdIwQY
MBaAFGITEDAgGKOHxpIUajXv0zpu1rHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjIt
YmU1N2Q3ZGZhMGRlLzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjItYmU1N2Q3ZGZhMGRl
LzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSc32u/l
qjkKhvASgXz/+po1VvUr9zxvV7b/r7sc1iT4+h1Yb7fhLJJmPnwaTpqwezvdJQLU
jlJHs1tnPDWqtroJb4lKa9e/AyJUouUa2WwAB/+IiDo2AdxgYOJA7CK3WzYR9Df4
/yKSYw66CyVNAU4iTeOzkt/qmQKyT8mJ+rZk1PR2Vadp/UFUPEzILjRz6DVnjZJP
5J8K8CpjFuptq1orDPlwiVllQ7ZKr6UHHXebZH3EaDRvUrAtsC+6CxdqHIaLbXIf
R+YRj7iWSAMsJLwI1Z7R/9R7mwW7QUbAEpnYs97zdA6hRR+skb/OkfNI6swGnXvO
ZNVPQ1zTvMQ93g==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:24:43 2026 by rpki-client