Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: lr5lMPBy/yydKKZxnlwM2YCfibXG54YkVbiAT9/SLHk=
Subject key identifier: 3F:E1:A1:0A:56:18:04:62:A2:73:09:CA:08:ED:04:CD:43:17:EA:DD
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 01A0404DF980D697D2534A92FF586C3A7EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 1918
Signing time: Wed 26 Aug 2026 23:00:47 +0000
Manifest this update: Wed 26 Aug 2026 23:00:47 +0000
Manifest next update: Thu 27 Aug 2026 23:00:47 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: 7cgM7qseocO4Y6wvJJnkrNiqT0OlurdvTsF+CR7xVaQ=)
2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
3: z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (hash: lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:f9:80:d6:97:d2:53:4a:92:ff:58:6c:3a:7e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Aug 26 23:00:47 2026 GMT
Not After : Aug 27 23:00:47 2026 GMT
Subject: CN=3fe1a10a56180462a27309ca08ed04cd4317eadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:c7:94:45:d8:34:e6:7a:b5:f8:ae:ca:8c:
93:9c:c2:79:38:0c:1e:5a:7a:30:4d:88:e9:e3:b2:
91:a2:84:dd:1f:d4:dd:07:76:db:24:1b:65:cd:75:
90:da:b4:e9:3d:c5:41:f0:80:a0:7c:81:43:a9:33:
c3:4a:23:e4:6c:cd:41:e5:23:f2:b1:61:2e:b7:44:
f6:64:9c:88:16:c6:c1:29:63:e1:42:e3:52:97:16:
72:20:f6:a0:3c:a9:d4:2a:31:99:e9:7c:bc:96:c0:
5a:1c:cd:7b:b4:b2:f8:dc:04:54:9a:82:e3:8b:76:
de:66:84:97:cf:75:4c:da:b9:22:b2:7e:f8:c9:25:
b2:a9:b7:a8:66:1b:15:d2:04:06:6c:81:7c:51:dd:
74:5f:c6:0d:d9:3b:7c:7f:73:6d:3a:44:38:e8:e8:
ec:ad:48:90:28:a8:0f:b5:1d:94:22:83:63:1b:c5:
cf:26:05:ec:86:25:46:0e:62:c8:fc:ae:19:fa:6d:
e8:99:8b:8a:31:12:c1:16:92:3a:6c:a7:4a:b0:5c:
49:3c:5b:64:2e:6f:7f:c2:e5:f7:90:91:66:ae:b0:
0b:9a:65:ac:a2:a7:9f:a8:01:80:e8:0f:95:e4:d9:
7c:70:03:5e:87:55:35:ab:07:40:e5:16:c5:18:60:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E1:A1:0A:56:18:04:62:A2:73:09:CA:08:ED:04:CD:43:17:EA:DD
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7c:04:69:2d:5b:eb:b0:db:09:b6:c5:8e:34:f4:17:ea:b6:
0b:47:7d:85:88:80:e9:9c:d6:85:1c:ec:2c:52:5c:e5:82:11:
9d:ea:aa:33:8f:41:fc:27:85:67:b6:d1:07:0b:76:14:26:87:
d1:f1:1a:0c:7f:cb:63:80:b9:6f:53:29:f5:e9:ac:16:88:e6:
17:ca:8a:48:c2:0d:cf:ef:86:a0:a4:72:72:91:9f:3b:29:e6:
b7:dc:6f:9d:35:17:8d:7f:d6:14:03:ef:c2:3a:8e:69:51:2e:
87:1b:2e:cf:0b:89:d0:c8:3a:82:20:47:fd:3b:29:61:41:9a:
77:c7:df:db:6d:f0:0b:08:ad:c0:bf:3e:e4:09:61:99:5c:06:
c4:ec:a9:60:4a:97:25:3f:48:38:88:41:ac:91:c2:8e:bf:e1:
a1:b3:f4:e5:a0:87:52:70:bb:8e:7c:14:c6:fc:38:d0:ad:e5:
52:5a:66:04:73:1b:0f:ad:16:13:6a:b7:21:c8:b4:62:99:d2:
b0:49:88:05:68:25:8d:94:0f:f1:01:f0:90:4e:5d:1a:55:75:
b4:0a:83:f4:fa:94:d0:bb:ed:5a:27:f4:db:3b:91:b3:26:51:
29:24:9d:36:ba:76:dd:35:e8:c6:9d:1c:34:65:02:6f:8a:df:
fe:fb:e0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:00:59 2026 by rpki-client