Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: hjQWG9KDk60yhU02FXKX22g1F8TkC1Ybgzro++0vhgQ=
Subject key identifier: 11:9A:F1:24:70:84:B3:48:65:A3:49:CB:2B:D7:F3:6C:D9:3B:B2:79
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 019D382E89C3F54B3D81154623EA7AD7D9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 1786
Signing time: Sun 29 Mar 2026 06:01:07 +0000
Manifest this update: Sun 29 Mar 2026 06:01:07 +0000
Manifest next update: Mon 30 Mar 2026 06:01:07 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: cX56HpTc32emA2h7Z5yKvXF6zhmTiv6UI3WYQa6R0jM=)
2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
3: z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (hash: lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:89:c3:f5:4b:3d:81:15:46:23:ea:7a:d7:d9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Mar 29 06:01:07 2026 GMT
Not After : Mar 30 06:01:07 2026 GMT
Subject: CN=119af1247084b34865a349cb2bd7f36cd93bb279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:6e:2b:ee:f6:16:bc:72:48:dc:67:c5:06:
27:fa:86:d5:64:32:9d:6c:a5:1a:1b:9e:a3:03:2f:
48:11:6c:4c:44:30:d4:2b:b0:16:2a:16:56:93:8c:
13:c8:97:28:01:09:af:9f:f9:92:14:ac:fd:3a:66:
0c:0d:78:69:25:e0:e3:cc:08:8f:dc:d9:f8:1c:89:
41:e4:e6:9d:52:a5:47:cd:63:c3:73:b0:d4:96:82:
08:92:65:1e:f4:40:6a:88:04:c8:0d:12:df:2a:7d:
f0:2d:f0:7e:d4:52:2e:c5:9e:40:1e:f9:c8:81:94:
30:3c:df:8f:0e:71:c2:91:ba:ae:bc:75:b5:c1:43:
ca:7e:c3:4e:29:e3:a7:06:0e:b8:a6:a8:78:56:d4:
13:5d:dc:95:b1:46:6d:e6:48:28:f0:67:7b:4a:6f:
31:74:5d:fe:b4:12:35:50:d5:da:7f:af:78:64:83:
a6:98:5a:ab:c1:ad:2d:a2:02:26:43:dd:26:73:6a:
ff:ef:0e:43:e0:51:72:ff:c6:4d:c7:88:7f:6f:db:
29:bc:5d:57:ce:ff:01:81:8e:ae:4b:59:9a:af:76:
39:2c:65:85:78:6b:16:24:c4:82:1d:b6:e1:ba:9c:
74:5f:ff:b4:18:56:d9:e6:d0:c5:c1:6f:63:bb:1b:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9A:F1:24:70:84:B3:48:65:A3:49:CB:2B:D7:F3:6C:D9:3B:B2:79
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e9:8c:07:51:96:86:f7:13:d4:1e:61:a4:69:d5:de:22:02:
fd:8e:aa:a1:54:cf:92:ea:16:4d:51:f3:9c:74:0b:ff:be:3e:
8e:83:19:c8:4a:18:14:d5:a4:85:85:66:c0:d7:64:49:d3:7e:
5a:18:6a:a5:76:0f:43:4f:94:98:3d:4e:54:45:b9:54:55:f3:
86:79:47:4a:7c:4e:a9:d9:0e:5b:03:5e:58:ee:b4:d8:2e:7c:
ba:3a:c7:92:a5:26:9d:06:35:ca:a3:ce:66:ae:9f:97:3d:c0:
96:9c:11:81:12:a4:f1:6e:74:5b:a6:50:14:9d:e5:3d:a6:1a:
c7:a5:bb:06:63:00:f8:67:20:6e:58:b9:0e:f4:ee:c0:4a:8b:
ba:85:e1:8e:8e:9e:0c:81:7c:56:02:e5:e7:0c:78:aa:a2:80:
32:11:65:d1:ce:8a:c0:ad:36:46:48:de:8c:b5:ac:97:35:cc:
3b:05:1b:ce:a3:f4:e5:6c:89:b4:f5:ff:fa:96:62:4c:d1:14:
19:7b:25:ff:e5:e9:4d:12:14:63:aa:4a:9d:89:c7:57:02:de:
49:8b:13:ac:b1:a5:84:b4:25:70:29:b1:c0:2e:30:e3:fa:3c:
c6:0c:9d:15:c0:ab:0d:2d:fc:89:6e:16:3b:76:71:75:a7:5d:
c5:b6:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:38 2026 by rpki-client