Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File: yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier: i2hucpGi2RSO5FyEsCWWW9bi+ERVtYKIcpjh51IEAXg=
Subject key identifier: 21:F8:9C:6B:85:A7:25:96:E5:79:30:FE:52:A3:78:D6:BA:77:2F:F5
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 019DCDBDF1C6A6AE45496A8410639143F82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number: 0BD9
Signing time: Mon 27 Apr 2026 07:01:10 +0000
Manifest this update: Mon 27 Apr 2026 07:01:10 +0000
Manifest next update: Tue 28 Apr 2026 07:01:10 +0000
Files and hashes: 1: 714jAkRfYNSFRWD00Ttnn_8kshU.roa (hash: Qwe2Q2afQjCXeJnI6CuGzTdKEtcUpiC/k2FP9kdrGD4=)
2: 8dEAYi52_22zUX_SiXzKUWNxBaw.roa (hash: xFQLvjgZzeqcV2os4NMEXXqLMmXWf96ISePDLbOs/n4=)
3: AMWGdVJy6j1Lous_3W0Dp8ga5BI.roa (hash: YHKQlEMTRKZ44Ezw9Vkv/ST4kDSY/aZ7S8Y4/+4q0FA=)
4: FzsVJPIrsEyHqExyGhlWZtGTTjY.roa (hash: +Pd3PneLFWSwpSYwbblYDY0Nhc65YzGQwcvoKLnitm4=)
5: L4LAQO4VcvKCv24QKmqbiEkYgfw.roa (hash: 1I8k1k9yQTnnGWoQ4DNv1fL4gSGoExl590fVU6xPg8Y=)
6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: s0BvSp2oHtUBPE2hwlobFtlIEZQ2gKx6p9YSG3o3WJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:f1:c6:a6:ae:45:49:6a:84:10:63:91:43:f8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Apr 27 07:01:10 2026 GMT
Not After : Apr 28 07:01:10 2026 GMT
Subject: CN=21f89c6b85a72596e57930fe52a378d6ba772ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d1:c9:1a:69:53:ea:b3:af:d5:21:fd:2f:a0:
0a:68:97:e1:96:57:2e:fe:1f:12:02:7d:19:a9:2d:
ed:d2:ce:a6:06:4b:f9:34:17:2a:d2:c6:d4:8a:c1:
35:c4:d1:13:37:24:de:38:dd:6d:7b:f6:1e:d1:bd:
a9:b4:a4:5c:8d:d0:e9:01:e5:73:b6:45:00:7e:57:
04:41:c5:0b:14:68:c7:89:75:7d:27:27:c1:8c:8b:
35:20:6d:73:3f:f0:6a:1b:80:8a:35:b7:4c:f1:62:
94:36:ab:1c:b9:b8:b9:26:b9:ca:a7:a4:92:e4:85:
c7:35:67:c5:3c:a0:73:6c:ff:4b:e1:57:fe:b2:da:
88:72:65:31:20:94:97:81:f1:09:01:4a:f8:28:d8:
d6:c7:e5:8d:87:17:f4:5c:36:49:f8:e8:e1:d2:80:
73:b9:b4:b2:ce:63:41:75:35:dc:4f:2a:dd:76:bd:
d6:64:9c:49:25:20:fb:24:47:a7:01:ec:3a:eb:c0:
67:0f:ee:45:95:58:3d:b8:ce:97:a8:87:f7:b8:a8:
e7:ed:5d:0d:b4:a6:70:9c:07:40:32:aa:9b:d2:e8:
64:23:03:e1:62:a3:33:c7:3c:70:84:5f:de:84:1a:
97:41:7b:1a:98:de:86:91:4f:0a:59:b6:79:a9:62:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F8:9C:6B:85:A7:25:96:E5:79:30:FE:52:A3:78:D6:BA:77:2F:F5
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:99:46:ee:41:78:07:29:ec:42:76:d5:15:69:57:f5:3c:1e:
f8:4d:09:c4:06:1a:6f:ce:fe:58:f8:cc:fb:08:72:b7:31:de:
ed:b1:57:7b:45:85:40:be:e3:ba:bc:97:70:dc:53:88:ce:8d:
96:68:59:57:51:99:58:b9:a1:82:d3:46:52:08:1c:a1:65:ad:
63:5a:4b:14:0c:88:ae:6d:05:31:04:5f:8a:d8:ea:16:b5:32:
54:dc:1b:ac:06:47:2b:9c:3f:0b:af:d4:d7:e1:d2:d1:8a:27:
2b:c5:17:06:2e:db:65:bb:97:00:a4:ae:9a:aa:8b:03:31:e5:
4f:de:53:95:4a:68:cb:d4:cb:a1:c0:d5:f0:c1:c6:87:f9:80:
9b:23:19:13:83:25:86:50:bf:83:b0:cf:b7:7e:ec:4e:f0:0b:
a9:dc:e0:ae:dc:d8:af:a6:16:fe:f7:07:ee:33:49:77:1f:a8:
d8:b2:24:65:cc:33:1f:b6:35:8f:a1:4a:a6:d7:a9:3a:1c:40:
c6:a8:db:60:7e:9d:0d:cc:29:38:5a:e8:cd:54:61:1a:a4:6d:
da:a1:42:b5:8a:7b:19:89:94:36:94:ad:56:97:0c:f3:7d:fe:
b6:e4:5d:b3:6e:13:9b:5a:b9:4e:18:1a:b7:11:64:40:cb:98:
06:04:db:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NvfHGpq5FSWqEEGORQ/gtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj
M2M1MmMwHhcNMjYwNDI3MDcwMTEwWhcNMjYwNDI4MDcwMTEwWjAzMTEwLwYDVQQD
EygyMWY4OWM2Yjg1YTcyNTk2ZTU3OTMwZmU1MmEzNzhkNmJhNzcyZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NHJGmlT6rOv1SH9L6AKaJfhllcu
/h8SAn0ZqS3t0s6mBkv5NBcq0sbUisE1xNETNyTeON1te/Ye0b2ptKRcjdDpAeVz
tkUAflcEQcULFGjHiXV9JyfBjIs1IG1zP/BqG4CKNbdM8WKUNqscubi5JrnKp6SS
5IXHNWfFPKBzbP9L4Vf+stqIcmUxIJSXgfEJAUr4KNjWx+WNhxf0XDZJ+Ojh0oBz
ubSyzmNBdTXcTyrddr3WZJxJJSD7JEenAew668BnD+5FlVg9uM6XqIf3uKjn7V0N
tKZwnAdAMqqb0uhkIwPhYqMzxzxwhF/ehBqXQXsamN6GkU8KWbZ5qWIoZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCH4nGuFpyWW5Xkw/lKjeNa6dy/1MB8GA1UdIwQY
MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt
Yjc2MmMwMTc1ZjI3LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3
LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5lG7kF4
BynsQnbVFWlX9Twe+E0JxAYab87+WPjM+whytzHe7bFXe0WFQL7juryXcNxTiM6N
lmhZV1GZWLmhgtNGUggcoWWtY1pLFAyIrm0FMQRfitjqFrUyVNwbrAZHK5w/C6/U
1+HS0YonK8UXBi7bZbuXAKSumqqLAzHlT95TlUpoy9TLocDV8MHGh/mAmyMZE4Ml
hlC/g7DPt37sTvALqdzgrtzYr6YW/vcH7jNJdx+o2LIkZcwzH7Y1j6FKptepOhxA
xqjbYH6dDcwpOFrozVRhGqRt2qFCtYp7GYmUNpStVpcM833+tuRds24Tm1q5Thga
txFkQMuYBgTbuQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:36:24 2026 by rpki-client