Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: V1Xs5Xgp1RbH2roKqs5hzJU4PHsX5LCj8alaE3T4EmY=
Subject key identifier: A0:B3:73:C5:B8:8D:5D:D6:56:A9:18:F6:7D:BD:28:EC:21:67:8B:0C
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 01A1DF8340B93B1BE551B3796627F636679D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 19EF
Signing time: Sun 15 Nov 2026 14:01:23 +0000
Manifest this update: Sun 15 Nov 2026 14:01:23 +0000
Manifest next update: Mon 16 Nov 2026 14:01:23 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: +iExHKnN41g0kiepfOXxVJksoBxTZIr+NhxEGp2S0ME=)
2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
3: z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (hash: lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:40:b9:3b:1b:e5:51:b3:79:66:27:f6:36:67:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Nov 15 14:01:23 2026 GMT
Not After : Nov 16 14:01:23 2026 GMT
Subject: CN=a0b373c5b88d5dd656a918f67dbd28ec21678b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:2b:12:31:46:2d:78:43:c6:c7:41:e1:a1:
ad:48:41:ca:be:92:bf:e0:1a:c5:fd:ae:40:5e:68:
0a:5f:f0:88:9f:08:09:82:80:a8:df:2e:af:65:4b:
37:69:39:a9:d4:9f:03:f7:8a:54:4c:be:32:14:21:
27:c6:fc:a6:26:f3:22:68:a5:08:10:4c:b4:8c:2e:
20:fd:80:ce:17:e0:03:f7:7c:88:33:48:a5:5b:07:
16:d3:35:b0:0e:ca:6a:d3:93:cc:d7:a0:af:1a:2c:
29:8f:18:69:99:e2:bd:8f:16:ec:98:65:38:9f:33:
3c:75:93:48:76:57:ce:31:22:c9:6e:d9:11:78:5d:
09:51:1c:b4:fc:77:e8:be:a3:f8:f5:9d:d7:63:58:
bf:bc:39:51:0c:ce:8c:97:ac:d9:3f:65:99:3f:99:
83:56:af:16:65:f2:60:a4:47:32:5c:4c:6b:f8:6d:
6d:3b:aa:55:d1:dc:20:3a:0d:f4:23:0d:5d:cd:40:
ec:c3:0a:95:55:ec:87:da:f8:f2:71:86:2f:8e:cb:
2b:95:77:c3:44:da:39:e9:c5:5b:b5:49:17:0a:83:
b2:c8:c5:7d:e8:a6:55:a9:e8:61:35:06:93:1b:ec:
e5:17:9c:83:48:51:aa:73:6b:a1:9b:a4:e4:60:c2:
a1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B3:73:C5:B8:8D:5D:D6:56:A9:18:F6:7D:BD:28:EC:21:67:8B:0C
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:51:ef:77:74:e7:4b:4c:19:13:04:90:b0:e1:9b:54:9e:9b:
25:7d:ee:42:79:b6:b6:b0:be:58:0a:90:ad:3b:f1:c4:25:3e:
1a:00:2f:f2:47:ef:58:70:22:66:8e:8c:5a:6a:5b:72:d7:4c:
21:13:01:f9:c5:ea:84:e3:06:b9:02:6d:9f:7b:52:d0:93:cf:
19:05:7e:64:71:7b:aa:26:bf:1a:46:b1:51:29:6b:e4:36:5b:
9c:fd:74:d4:e9:7b:7e:f8:29:a3:92:56:4b:0a:d6:99:9d:0c:
31:1b:e9:29:71:bf:55:dc:ee:73:df:b1:f8:e8:83:c9:97:7d:
62:2b:9c:38:90:50:1e:1e:f2:ef:cd:ad:f8:bb:c3:b8:71:9e:
80:a4:b1:51:a6:a7:3a:17:20:50:8b:4b:20:85:69:f7:2d:ed:
6a:fe:98:c8:5c:11:a4:80:a3:38:df:77:1e:0b:55:ac:d2:54:
89:bf:c3:4c:54:9b:0b:0e:64:8d:95:61:7e:a4:2d:2e:76:2c:
8f:26:62:81:e1:06:4e:05:dc:e0:c3:33:bf:4d:9f:1c:16:68:
57:20:11:a4:4b:fc:8f:7f:67:f3:f4:ee:7a:87:dd:4e:65:05:
1d:5c:68:f7:40:94:19:92:18:2c:6e:9e:64:40:2d:78:e7:03:
cc:9a:c8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:30:18 2026 by rpki-client