
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
File: YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json)
Hash identifier: KyCvZzMebLWEdo5edww0PPVDu94EIOsjyI7dcijLAdA=
Subject key identifier: 5C:4E:D1:90:D6:D6:C2:33:BA:0A:E4:70:B9:98:1D:D5:66:64:2E:F5
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Certificate issuer: /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial: 01A06E39649E7C8BB6A5E19B852F49AF3E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
Manifest number: 12DE
Signing time: Fri 04 Sep 2026 21:00:50 +0000
Manifest this update: Fri 04 Sep 2026 21:00:50 +0000
Manifest next update: Sat 05 Sep 2026 21:00:50 +0000
Files and hashes: 1: 0821mhhu_dqdcqQbxajhPPTXDuU.roa (hash: ooSLPjcpcEvK3V7j97ECx3S8mqo+5KuosVxep9334Qg=)
2: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: EKXXEIl3w+3DEQ91GxUrg+te5+AdTrwXNzlR6vVsVYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:64:9e:7c:8b:b6:a5:e1:9b:85:2f:49:af:3e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
Validity
Not Before: Sep 4 21:00:50 2026 GMT
Not After : Sep 5 21:00:50 2026 GMT
Subject: CN=5c4ed190d6d6c233ba0ae470b9981dd566642ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:d9:5d:2e:ba:41:5f:01:73:fc:cd:9d:25:
88:49:9a:e4:63:3f:27:1c:49:6e:5d:12:bf:20:82:
02:1b:b3:f0:d3:d0:96:36:e9:e6:b1:40:4e:ac:b4:
93:4b:78:be:aa:d3:8d:16:09:98:a0:f4:d2:a9:60:
9d:83:90:b8:c3:a4:50:6e:b0:88:b2:b8:7b:ca:54:
26:c9:ae:f5:63:30:24:b7:9b:fb:fe:a1:a0:0c:24:
48:a4:4d:20:5c:98:e6:30:90:b6:04:5f:b3:89:c9:
4c:7e:b2:d3:16:3d:01:d9:37:2e:02:f5:60:d4:48:
76:25:01:26:14:e8:a6:dd:36:83:f5:cf:a1:76:9c:
74:be:3c:ee:73:47:46:63:0e:56:4a:bc:4c:f5:ed:
77:49:b6:11:b3:02:21:ec:8c:6c:f2:06:71:61:3f:
f7:cc:4f:e2:f2:91:ae:01:64:3a:10:53:72:00:48:
1d:6a:32:8e:b6:49:49:57:b5:5d:bb:59:7e:f8:58:
2e:50:8f:43:4c:a4:e0:e4:06:df:f4:53:d8:d8:3c:
cf:36:0f:39:07:f5:26:78:97:14:46:b3:7a:1b:13:
e4:8c:16:ba:64:97:d6:ff:4f:d9:1a:71:f6:50:14:
6a:22:01:e5:d6:72:b5:e5:07:d2:ed:f6:6f:0e:28:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4E:D1:90:D6:D6:C2:33:BA:0A:E4:70:B9:98:1D:D5:66:64:2E:F5
X509v3 Authority Key Identifier:
keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:96:70:fb:d4:9f:27:8a:52:5f:53:65:e8:80:39:a1:d7:cc:
39:8f:6f:ee:69:03:e7:fd:db:32:c3:43:36:14:f2:0b:0a:dc:
20:82:1e:b0:fe:52:fe:61:5b:31:bf:97:2c:bd:fb:19:50:e6:
f1:35:49:97:e1:a0:53:2e:5d:26:86:fb:34:35:3d:51:fd:3d:
6d:29:19:c4:c7:a0:82:ac:f1:28:94:8f:1a:2d:bb:31:69:fd:
ee:cc:4c:29:92:c4:72:6d:11:38:20:19:eb:fc:ae:99:ad:69:
15:f3:a5:49:b2:0f:af:3d:d2:a5:d0:08:04:84:e0:13:7e:61:
6d:02:18:30:f2:54:94:8f:4a:45:1f:f4:f6:0b:e4:31:bb:4e:
13:07:53:9f:e4:d3:48:f7:38:15:92:6e:65:3e:7a:c4:74:e0:
69:f8:f0:31:db:11:48:86:38:ba:46:de:34:6a:ac:05:09:29:
47:2e:41:f6:3f:af:26:51:86:60:88:46:3f:28:27:8d:5d:fe:
fe:7a:c8:81:01:65:62:92:a4:6a:0c:7c:f1:05:d0:5a:12:dd:
d5:f7:a1:1d:60:ca:2a:df:f0:99:08:bc:b7:e4:d9:a4:5f:85:
67:7f:68:1c:60:b5:f2:70:d0:7f:dd:be:43:67:59:39:4a:e5:
88:cc:b6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:40:56 2026 by rpki-client