Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
File: YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json)
Hash identifier: iNw4SXQNLh1Tco0uG88uneSQEihVxFM5Hu7bsnjAQZA=
Subject key identifier: BC:F7:64:B3:B3:9E:36:29:85:EF:33:A9:B0:D9:A0:1D:D7:15:E7:3A
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Certificate issuer: /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial: 019D2816BBFCF438134A64032DBE2D197A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
Manifest number: 112C
Signing time: Thu 26 Mar 2026 03:01:11 +0000
Manifest this update: Thu 26 Mar 2026 03:01:11 +0000
Manifest next update: Fri 27 Mar 2026 03:01:11 +0000
Files and hashes: 1: 0821mhhu_dqdcqQbxajhPPTXDuU.roa (hash: ooSLPjcpcEvK3V7j97ECx3S8mqo+5KuosVxep9334Qg=)
2: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: GgGAWb2pfXorp6SQORXGlg4DQ1CAXyO6bOtHY9bn7eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:bb:fc:f4:38:13:4a:64:03:2d:be:2d:19:7a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
Validity
Not Before: Mar 26 03:01:11 2026 GMT
Not After : Mar 27 03:01:11 2026 GMT
Subject: CN=bcf764b3b39e362985ef33a9b0d9a01dd715e73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:28:2a:a5:7a:71:25:8d:07:da:21:0f:ad:
24:1c:3e:a7:aa:a9:b8:93:6d:74:5a:8c:4f:dc:e0:
32:c9:94:cc:ac:eb:ba:2d:64:48:63:bb:89:68:ca:
e1:fb:49:23:5c:88:db:aa:6d:f7:d7:3a:6d:a2:8e:
c3:2a:f3:38:b2:43:50:2b:ca:1e:f9:2d:fb:d6:91:
28:5a:97:80:08:90:ee:c8:70:84:c2:81:e1:73:e7:
6e:e5:ed:ca:35:35:9d:1c:a8:8f:c6:e7:84:ca:70:
b3:31:96:1c:ac:cd:15:c6:d7:6f:19:c4:77:93:5e:
0b:fc:d2:4c:da:a0:b0:cd:ae:a1:f3:0b:7e:15:36:
67:83:f6:7e:9c:c5:4b:07:a4:f6:59:72:ad:20:0f:
3a:64:96:fd:b9:64:68:81:2e:d8:4c:b2:cd:f7:bc:
4c:97:d8:12:c4:63:d0:be:24:9e:92:d5:85:70:d2:
d0:30:63:24:5c:d7:47:9e:51:0a:c3:67:f6:2c:73:
2b:c7:78:74:8a:20:aa:0e:25:a8:d9:93:ff:e5:33:
a2:be:74:6b:98:8a:cf:81:f4:f7:a7:5f:70:c1:20:
6d:71:82:c5:0f:28:64:77:fe:7b:51:fe:b5:8a:38:
02:89:c6:0b:96:d8:c3:a1:f8:91:d5:15:c3:5a:4c:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F7:64:B3:B3:9E:36:29:85:EF:33:A9:B0:D9:A0:1D:D7:15:E7:3A
X509v3 Authority Key Identifier:
keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:08:71:fa:a7:4b:db:52:6e:66:7a:e1:5f:e5:dc:57:f6:61:
53:fd:91:27:7d:c8:5c:4e:13:0e:20:8a:71:2d:b1:76:58:29:
c6:86:97:de:93:ba:ee:75:4e:db:8a:40:49:63:12:18:81:51:
d4:f7:37:72:ec:79:12:a0:e7:71:cf:4b:ae:0f:8f:c8:4b:3f:
5e:8f:6b:11:29:f8:6e:32:a2:b8:93:75:36:49:be:31:b6:e9:
92:2f:36:49:7a:29:05:a8:e2:ba:31:8a:99:f4:3b:46:64:27:
a6:7c:79:5f:1b:5e:c8:99:a5:fa:2c:fe:88:41:ff:74:8f:82:
ce:94:3c:88:12:db:ac:ff:d1:2d:cd:c6:3b:a9:3e:3c:48:4c:
af:ad:ab:b3:8e:9d:5c:3e:60:31:7d:61:58:8c:46:b9:1c:9c:
d4:ec:02:10:ac:8c:dd:fb:1a:2a:a8:59:e0:27:a2:f1:6a:2d:
3e:13:c2:ac:e1:fe:eb:18:fd:5a:70:92:86:ac:53:1d:29:bc:
8e:5e:b9:a1:0e:48:9a:61:93:0b:22:33:11:6b:af:77:98:a7:
8c:d0:c0:98:54:b2:48:b1:fb:8d:a0:87:a5:87:0f:30:3f:d3:
6c:17:1d:56:cb:46:4a:ca:48:18:de:f9:4b:ac:26:a5:bd:36:
cf:61:10:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFrv89DgTSmQDLb4tGXoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjg0MTczNjFjMWM0MDZhZTlhNzI1N2RhYTlmYjA2MjA3
ODJkMzUwHhcNMjYwMzI2MDMwMTExWhcNMjYwMzI3MDMwMTExWjAzMTEwLwYDVQQD
EyhiY2Y3NjRiM2IzOWUzNjI5ODVlZjMzYTliMGQ5YTAxZGQ3MTVlNzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPgoKqV6cSWNB9ohD60kHD6nqqm4
k210WoxP3OAyyZTMrOu6LWRIY7uJaMrh+0kjXIjbqm331zptoo7DKvM4skNQK8oe
+S371pEoWpeACJDuyHCEwoHhc+du5e3KNTWdHKiPxueEynCzMZYcrM0VxtdvGcR3
k14L/NJM2qCwza6h8wt+FTZng/Z+nMVLB6T2WXKtIA86ZJb9uWRogS7YTLLN97xM
l9gSxGPQviSektWFcNLQMGMkXNdHnlEKw2f2LHMrx3h0iiCqDiWo2ZP/5TOivnRr
mIrPgfT3p19wwSBtcYLFDyhkd/57Uf61ijgCicYLltjDofiR1RXDWkylnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLz3ZLOznjYphe8zqbDZoB3XFec6MB8GA1UdIwQY
MBaAFGIoQXNhwcQGrppyV9qp+wYgeC01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWloQmMySEJ4QWF1bW5KWDJxbjdCaUI0TFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MWYyZTgtYmQ4Ni00YzVlLTk1NTEt
NGQzYTU5Y2I5NDM5LzEvWWloQmMySEJ4QWF1bW5KWDJxbjdCaUI0TFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC83MWYyZTgtYmQ4Ni00YzVlLTk1NTEtNGQzYTU5Y2I5NDM5
LzEvWWloQmMySEJ4QWF1bW5KWDJxbjdCaUI0TFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAhx+qdL
21JuZnrhX+XcV/ZhU/2RJ33IXE4TDiCKcS2xdlgpxoaX3pO67nVO24pASWMSGIFR
1Pc3cux5EqDncc9Lrg+PyEs/Xo9rESn4bjKiuJN1Nkm+Mbbpki82SXopBajiujGK
mfQ7RmQnpnx5XxteyJml+iz+iEH/dI+CzpQ8iBLbrP/RLc3GO6k+PEhMr62rs46d
XD5gMX1hWIxGuRyc1OwCEKyM3fsaKqhZ4Cei8WotPhPCrOH+6xj9WnCShqxTHSm8
jl65oQ5ImmGTCyIzEWuvd5injNDAmFSySLH7jaCHpYcPMD/TbBcdVstGSspIGN75
S6wmpb02z2EQZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:39 2026 by rpki-client