Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
File: Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft (raw, json)
Hash identifier: LLtPOzritT0QDg1u68yJQqkj1hqe6Hy7ZaMgdnXYmSE=
Subject key identifier: 70:A3:13:46:4E:D9:4F:84:84:DF:AD:02:2F:EA:A2:B1:36:1F:18:B6
Authority key identifier: 62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
Certificate issuer: /CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Certificate serial: 019FA44E5A2E1FEF542A14ECDA581226F507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 16:00:26 +0000
Manifest this update: Mon 27 Jul 2026 16:00:26 +0000
Manifest next update: Tue 28 Jul 2026 16:00:26 +0000
Files and hashes: 1: 2gO3AZ0wf5H55So82hrCWwWbVuI.roa (hash: U66k5TcWQ7PD9bBki0lUlKhjoZI0ZIMVHk6yyW5wKeQ=)
2: Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl (hash: v0xwcVPhpsDFp8lBZ3Iyxa1MKqTrV8/Zi/GygSN1GKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4e:5a:2e:1f:ef:54:2a:14:ec:da:58:12:26:f5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Validity
Not Before: Jul 27 16:00:26 2026 GMT
Not After : Jul 28 16:00:26 2026 GMT
Subject: CN=70a313464ed94f8484dfad022feaa2b1361f18b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:b6:0a:76:ed:40:32:f2:31:c6:62:29:e4:
1c:41:7a:ad:ce:1f:d4:c5:58:65:2b:d5:0b:ad:50:
30:4e:87:60:b0:cb:c6:a2:db:62:aa:a5:11:d7:cf:
74:4b:e7:39:42:b2:fd:29:5c:60:09:0a:20:b0:e6:
ec:0a:ce:b7:14:f6:43:cb:32:51:67:fb:05:4a:78:
f4:3d:65:b2:0e:ee:fd:44:81:42:f3:11:4c:8f:4d:
69:16:06:31:2f:07:de:47:b8:fc:c8:80:2f:4e:eb:
93:b8:1a:61:a0:2f:06:ec:48:5c:c5:1c:45:e2:d6:
d9:01:ee:1d:2b:d6:f3:df:03:79:72:1a:d5:f1:6f:
be:61:95:75:d1:6e:80:b5:af:7b:b3:78:06:96:34:
ee:59:c6:c1:f6:2f:80:5c:c2:82:43:f0:04:f7:10:
ab:39:4a:c9:a8:09:d6:d2:cc:86:89:34:57:6f:60:
18:21:4f:ce:be:8a:d6:e0:ca:24:fa:cd:b0:e7:87:
6e:7c:c3:68:d9:0a:f0:e1:38:dd:5f:e0:28:2c:97:
87:0a:c0:96:d8:55:8e:aa:26:e3:10:66:99:69:31:
d4:eb:ec:d9:11:85:ce:6a:0f:c3:20:7d:5e:24:f8:
84:f9:07:de:cd:a7:64:2b:91:cb:bf:99:4f:3a:2d:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A3:13:46:4E:D9:4F:84:84:DF:AD:02:2F:EA:A2:B1:36:1F:18:B6
X509v3 Authority Key Identifier:
keyid:62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:67:06:1c:73:a5:d5:ad:bf:8c:79:32:47:60:dc:e0:e5:ba:
16:a2:de:d5:33:c7:24:99:13:e5:5f:86:97:13:0e:2a:03:d8:
32:c7:80:d4:11:f1:54:dd:59:29:a4:19:cf:24:26:ad:f8:cf:
f4:28:22:9d:01:9e:61:d5:23:63:7b:67:5d:d6:d2:7a:c5:b0:
f3:fe:58:34:10:6d:c1:56:1a:5e:10:52:cd:62:ff:6f:00:86:
52:a8:c7:24:af:b0:cd:cd:e9:cf:40:fd:d7:56:da:51:2e:44:
e5:0e:b7:d0:62:29:97:00:0f:aa:eb:87:d9:11:6f:6b:82:52:
e3:7f:35:3d:b1:67:a8:8b:88:8b:47:88:86:7b:78:fd:3f:4b:
21:7f:da:e3:dd:c3:66:4b:76:35:a7:d9:3e:70:51:5c:3a:fb:
20:da:b3:0d:de:60:e5:2a:93:93:d1:10:da:26:9b:b0:3d:5e:
38:df:4d:d1:04:99:cb:d6:d9:b4:db:96:20:f4:93:ad:c1:fd:
83:32:c7:2c:c6:d4:2d:27:39:37:7b:4f:82:8d:a1:0d:8d:70:
48:2c:c3:f7:65:e1:3f:57:0b:98:8e:90:8a:c2:71:73:97:1a:
01:4b:90:31:91:d0:10:b8:cc:b7:0c:a8:11:15:65:d1:9a:da:
06:ab:94:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:41:57 2026 by rpki-client