Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: 8rlaZtXL6WvwfUn3pNflaX3UYq3IiD8KYC0WiNUskk4=
Subject key identifier: F1:EC:F9:AE:0E:73:E7:1D:7B:AC:19:FD:2A:A5:AA:8B:8A:7B:B2:5D
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 01A03E60353F5F1D74B6E9759697CA1033F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 1917
Signing time: Wed 26 Aug 2026 14:01:27 +0000
Manifest this update: Wed 26 Aug 2026 14:01:27 +0000
Manifest next update: Thu 27 Aug 2026 14:01:27 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: DDTP8jNoH++0z0Aaju8Z5nglbfKCEPQySh9O6Xs7UfQ=)
2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
3: z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (hash: lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:60:35:3f:5f:1d:74:b6:e9:75:96:97:ca:10:33:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Aug 26 14:01:27 2026 GMT
Not After : Aug 27 14:01:27 2026 GMT
Subject: CN=f1ecf9ae0e73e71d7bac19fd2aa5aa8b8a7bb25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:ff:d9:19:7f:09:8f:f2:ea:c6:71:b4:1f:
32:c4:95:d8:8f:f2:b0:8e:ba:f2:5c:b9:7a:e1:88:
ed:9a:4c:aa:f2:0a:ee:c8:ac:65:c3:91:9a:c2:84:
d7:7f:07:f0:a6:1d:83:1a:4e:9e:f0:3a:63:2b:d9:
0e:9e:c3:f3:ef:77:15:db:c4:86:35:41:f9:cc:14:
e3:c2:ff:eb:e1:09:21:3d:5c:5c:7d:5e:10:2a:72:
ed:73:6a:9b:be:99:02:7e:c5:61:af:52:52:3a:f1:
bc:56:0f:d4:cc:68:8e:c0:10:d2:53:8a:b8:1f:80:
bf:c2:d2:4f:09:2c:b3:2a:c7:f1:53:38:e8:c7:4c:
88:c3:75:7b:2e:3a:1c:4d:c7:29:95:c1:bf:d6:af:
e2:7c:26:d9:55:9d:e0:4b:ac:d3:5c:a6:79:f8:6e:
07:36:7d:b2:be:f0:52:dc:48:c0:00:5a:88:5d:37:
6c:0c:c8:aa:82:33:48:08:1a:82:09:ad:97:bf:b5:
8b:e1:37:aa:02:fe:bc:eb:c1:5c:31:39:32:38:6e:
e9:9c:be:9f:af:24:4d:2b:73:c8:3d:90:b7:d8:bd:
d3:9f:09:29:16:7a:07:0f:36:e8:a3:d5:78:38:8b:
1e:43:a3:8e:bf:73:1b:1e:89:8e:a7:af:99:d2:4a:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EC:F9:AE:0E:73:E7:1D:7B:AC:19:FD:2A:A5:AA:8B:8A:7B:B2:5D
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:89:21:54:22:13:f4:e5:8e:63:2d:d8:f0:15:44:84:15:db:
50:97:69:2d:6b:bc:3b:1b:1a:e2:c0:08:44:a3:c9:25:bb:01:
5b:9f:7b:8b:4f:9d:f1:69:b2:99:eb:60:7b:25:f7:fb:0b:d7:
b3:14:d7:28:4d:a1:87:df:c5:ee:17:20:b2:78:0b:e5:90:af:
01:02:a5:ab:6b:ac:08:5b:5f:1d:7d:51:9f:69:01:c6:89:c9:
97:6d:da:d0:ef:f4:2d:9f:1e:ea:82:e7:29:00:13:9e:15:df:
8c:aa:68:87:40:28:c2:fa:5c:0f:cc:c2:37:89:ac:5a:ae:6e:
5e:f8:89:9e:23:e6:de:cd:c1:4b:9b:e9:7b:01:2f:a7:0e:b3:
1d:b6:6e:ac:b3:48:51:56:64:e7:93:3f:36:ad:73:f4:3b:95:
3f:5a:72:5b:14:b3:a3:de:1a:b3:48:68:b4:64:17:56:a7:2d:
82:dc:e6:39:83:e8:1e:a5:cb:64:d1:79:21:ad:c6:8e:86:f8:
bf:0e:db:9f:05:da:37:fe:aa:61:17:4e:e0:9b:48:fe:d7:98:
1e:7e:45:8a:e4:7a:d6:2b:8a:9a:4d:65:c8:fc:07:4c:1f:d3:
f4:64:55:19:bc:47:73:19:19:e8:c9:74:cb:e4:09:87:f2:19:
97:d3:05:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:17:04 2026 by rpki-client