Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
File: YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json)
Hash identifier: Z/v5n60tQR9PXjkkhRNufqaHh7RcxVbhRHFQif4xuCg=
Subject key identifier: B2:CF:9D:6C:63:A5:10:A2:D1:DB:D1:3D:83:DA:A9:E9:39:75:C4:EF
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial: 019E29CB7ED469A1CABFE8805101C0B0AA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
Manifest number: 0BB3
Signing time: Fri 15 May 2026 04:01:02 +0000
Manifest this update: Fri 15 May 2026 04:01:02 +0000
Manifest next update: Sat 16 May 2026 04:01:02 +0000
Files and hashes: 1: LE2eUeeMg2Dnp41TZCQ6QJb9-T4.roa (hash: R9/uF4yCT5OCiN9a2sdHn7TEtLNuAXR9YP7aIOCF+IE=)
2: Ol4huw7GYWpyqPfWm84CkYyLNA0.asa (hash: Z+czFmwTiCipnTfl3HeWp7PieMyklhhhE/b/q7rKaSg=)
3: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: IOtppjIecXj1/6GxOpBLzdXXjEP5OV5Jdz5uJWwRcxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cb:7e:d4:69:a1:ca:bf:e8:80:51:01:c0:b0:aa:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
Validity
Not Before: May 15 04:01:02 2026 GMT
Not After : May 16 04:01:02 2026 GMT
Subject: CN=b2cf9d6c63a510a2d1dbd13d83daa9e93975c4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:d6:31:b9:15:84:f0:e2:86:64:f8:56:45:
ba:69:b4:93:3d:bd:55:eb:74:4d:d9:99:9a:9e:98:
df:62:25:50:b6:17:1a:7b:2b:45:96:b5:27:8b:76:
b1:ed:59:3a:c9:0a:87:55:91:ab:3f:14:ab:df:5e:
38:b8:aa:62:79:2f:ce:90:49:85:f3:11:66:2d:18:
47:14:13:0d:23:0c:37:ad:74:31:06:51:c6:1d:d7:
f4:a3:04:a9:21:19:69:a3:61:3f:ec:36:f3:4a:1d:
dc:bd:7a:94:d4:85:3c:6a:30:f1:55:2c:9a:59:22:
46:b2:0b:5b:dd:82:5d:55:2d:6d:31:e3:21:12:d6:
7a:70:e5:eb:07:01:2c:46:b3:86:79:67:5f:cb:20:
0d:35:5b:22:bb:d6:e4:c1:50:c3:c5:a0:19:23:86:
96:94:92:21:b9:44:49:14:95:60:b6:54:23:36:fa:
df:f4:b8:96:f6:57:65:84:9c:43:10:aa:00:ac:dd:
78:ec:69:17:fb:10:85:ae:6f:65:20:d4:02:1c:32:
4a:21:78:1e:3d:10:5c:40:27:a8:94:a0:65:00:0c:
83:e4:7a:7b:e2:07:d0:14:78:80:f6:5d:8c:a2:ce:
ea:12:61:89:1d:42:8c:37:70:34:4d:fd:aa:70:2e:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CF:9D:6C:63:A5:10:A2:D1:DB:D1:3D:83:DA:A9:E9:39:75:C4:EF
X509v3 Authority Key Identifier:
keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0d:95:ec:bb:77:2e:c4:d9:9f:78:67:73:a3:76:14:f3:ec:
a1:47:e6:8d:d4:45:9f:0a:10:32:c2:fe:a7:05:42:ee:fe:58:
be:45:71:6e:28:85:30:29:ec:e9:d0:0d:43:31:ca:c4:20:8d:
59:e0:c6:c9:fa:f6:6d:31:2a:69:13:d1:dc:e9:83:3d:1b:7e:
5a:13:b5:cb:86:b4:68:17:b9:a8:c8:d7:5a:07:b6:8f:56:56:
4f:44:3e:f8:13:8a:7e:97:97:60:30:79:09:57:84:11:24:99:
02:91:af:26:c9:62:6e:5e:33:64:31:cc:37:0d:63:55:db:b4:
cc:c5:6e:8c:db:e0:b4:c2:17:2c:64:92:15:84:1b:64:38:7c:
e6:25:4a:e7:1f:1a:19:2c:5b:8e:96:9f:a8:87:c7:d8:d9:12:
ef:7e:9b:c1:f9:30:1e:9d:f8:53:18:c3:46:8b:f0:33:65:81:
84:19:cd:1e:f4:bf:9f:1d:eb:51:f7:ff:4d:04:41:a8:fc:7d:
ba:b6:71:d7:ec:a4:24:42:ae:fe:0f:06:fa:07:3e:2e:92:3c:
de:f7:61:e6:4c:da:0a:92:c4:a5:3e:18:5c:98:07:6c:4d:01:
54:d5:ef:e8:83:bd:98:f6:d5:45:61:c6:b9:27:b6:7b:6a:30:
d8:5f:4f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:15:59 2026 by rpki-client