Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
File: YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json)
Hash identifier: hUNBI4W/y9xpwjVueYQ8Lgo6sa6l+6Odzpn0XFRvt0U=
Subject key identifier: 1B:AA:49:EA:B4:A6:9B:10:DE:2B:8A:29:1E:2E:72:08:72:7D:8B:E3
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Certificate issuer: /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial: 019D9818B96B6836A186F8473970666CA548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
Manifest number: 1166
Signing time: Thu 16 Apr 2026 21:00:50 +0000
Manifest this update: Thu 16 Apr 2026 21:00:50 +0000
Manifest next update: Fri 17 Apr 2026 21:00:50 +0000
Files and hashes: 1: 0821mhhu_dqdcqQbxajhPPTXDuU.roa (hash: ooSLPjcpcEvK3V7j97ECx3S8mqo+5KuosVxep9334Qg=)
2: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: WiHWob45IzayZT9LUOppnu/ibVAcwokXxfCtK6yViWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:b9:6b:68:36:a1:86:f8:47:39:70:66:6c:a5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
Validity
Not Before: Apr 16 21:00:50 2026 GMT
Not After : Apr 17 21:00:50 2026 GMT
Subject: CN=1baa49eab4a69b10de2b8a291e2e7208727d8be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:85:94:c2:4b:4b:58:c4:4b:6b:50:74:6f:80:
be:44:b8:67:3b:fb:32:1d:d3:05:02:c4:7e:39:a4:
80:b5:b1:9d:37:a2:03:e2:ed:74:f9:f9:eb:78:c8:
ba:62:1d:1c:7e:22:33:76:9b:ec:e2:b8:d9:76:a1:
fd:61:f0:c5:a7:04:b1:b6:59:e4:66:e2:8c:37:72:
47:d6:7f:13:bd:9b:04:94:1f:64:34:25:61:cc:49:
fe:fe:68:df:50:33:0c:4a:75:a4:86:38:da:8a:68:
12:3c:b4:60:6c:a1:52:5b:9b:4b:95:96:da:ab:75:
78:b8:a2:6c:f5:7b:a7:c5:a3:ba:02:4d:3a:53:d9:
fb:fb:1b:cb:a7:c0:58:e4:7b:ce:af:3c:14:d5:84:
5d:5d:5e:4a:ec:cc:4b:fe:9d:15:df:b0:fd:00:7d:
8d:8c:40:a9:b8:dc:ba:a5:38:2b:18:86:52:b1:7b:
94:ad:b5:53:4d:51:af:0a:fd:38:6b:cb:3e:ae:67:
ef:f0:76:7c:9b:9a:81:0b:12:11:0e:72:17:da:cd:
bd:1f:d6:b8:ad:11:e6:d1:a4:cf:e9:16:99:5c:f3:
6f:98:6f:fa:ee:63:ab:de:c6:e0:34:14:29:de:9f:
f9:2e:31:16:20:16:6e:e8:6a:fa:a7:02:5e:96:c7:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AA:49:EA:B4:A6:9B:10:DE:2B:8A:29:1E:2E:72:08:72:7D:8B:E3
X509v3 Authority Key Identifier:
keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1e:75:b4:9b:7c:45:70:13:ab:c2:3d:94:d3:6a:a1:ad:ad:
33:07:ef:60:30:d7:b8:09:09:2e:df:e2:b4:30:65:82:0c:4a:
ab:6d:67:69:89:45:a6:ff:b1:da:c9:e9:4d:1f:32:42:84:d2:
ec:50:22:11:db:c6:89:e8:8d:e6:37:2f:e1:f8:7d:f8:52:86:
10:16:fa:d7:a0:e3:c6:b2:83:f9:25:8a:df:51:19:a4:41:f6:
ed:95:77:63:08:59:59:9b:dd:09:ea:2c:00:9a:1e:03:ee:5e:
cf:94:c3:0c:87:6c:d6:12:17:18:94:55:ee:b7:ce:48:a2:ba:
62:42:4e:f5:52:85:04:55:e1:8b:58:92:f3:f4:59:0c:f5:c4:
19:fc:95:ce:5b:b7:0a:c8:e3:8d:9e:02:fb:41:07:09:cf:ad:
31:88:f2:6b:0c:6c:b7:f0:fb:ae:4b:9e:b2:14:eb:8e:14:aa:
a3:da:19:2f:26:c9:d4:da:57:38:97:2f:ee:0e:8d:65:01:49:
b9:9a:61:3b:08:3e:9d:08:3b:a7:08:f8:32:44:4c:86:ef:33:
83:02:9d:84:02:b8:3f:41:da:d6:65:de:d2:c4:b6:64:5e:fb:
8f:6c:24:67:36:d6:ad:2d:e9:4d:eb:5e:d5:eb:96:e6:8a:3c:
8e:63:ac:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:52 2026 by rpki-client