Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier: /I2YyU6n9Uj5ZP/FI/nHFBZsbjnH0dn1W5pVlppPqYM=
Subject key identifier: E2:2F:22:1A:1A:A2:F0:87:69:31:FA:5B:55:74:1F:72:F2:AC:53:90
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 019D37C068E909242689A1A41D62994B5F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number: 143D
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: 0FXE-aMYDoHsJWIgYZ6p4cTAvIc.asa (hash: m9vFjKk2IkfNxMT1oBT/EqvBwRhxlH++eft+dvmvzfI=)
2: B1xlxtkgltJzqbUtpT-T2k7OjtI.roa (hash: qZlWNzGPdE+IKxAZlX53rTWx5ECKk+OZ5/kaPPhGDH4=)
3: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: XIh8JP8uSUeEORRZYk9MXV34I1MgMBSwQEnJ6+xv9ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:68:e9:09:24:26:89:a1:a4:1d:62:99:4b:5f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=e22f221a1aa2f0876931fa5b55741f72f2ac5390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:7b:c4:52:e5:ec:c0:7e:15:8f:4b:5d:3b:
b7:0f:2d:ef:3d:31:5f:a0:c4:42:3b:01:84:bd:13:
17:0e:03:d9:96:5c:a5:42:24:3d:51:2e:ab:f6:55:
3a:16:52:3c:2a:07:58:95:75:06:80:81:54:3d:7c:
0f:9b:0c:b5:68:fd:f7:80:3f:44:d5:7b:c1:3a:73:
01:a5:fd:58:d9:42:27:90:bf:e5:9a:05:66:f7:9a:
66:ef:a7:2c:8b:5b:13:12:0a:49:ce:af:49:15:e5:
b8:aa:21:a3:71:15:a3:56:a2:d8:fd:e7:27:88:93:
c9:c3:c7:9c:8f:f9:67:22:db:a1:67:5e:3c:5f:fd:
14:62:3b:ca:09:b8:f6:4e:c9:44:c2:ac:ef:13:ed:
fa:98:d7:43:d5:c6:9b:ed:8d:ec:04:94:0e:41:62:
c1:69:ff:b7:91:cf:3f:bf:39:8f:38:9f:00:22:0e:
ab:9d:6d:83:e1:2b:81:56:09:4e:0d:fc:b0:c6:db:
eb:8a:8d:d5:a3:a5:8e:ae:46:bc:42:3e:4a:2b:76:
c8:21:f2:43:fd:f8:8c:0d:f2:9e:5f:ad:74:f0:5f:
2e:95:80:5d:b5:55:e4:06:8c:4d:2f:e1:a4:af:2f:
5a:82:2b:13:eb:e7:b8:32:bd:45:0c:20:dc:35:7f:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2F:22:1A:1A:A2:F0:87:69:31:FA:5B:55:74:1F:72:F2:AC:53:90
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:77:79:77:34:fe:7f:34:61:60:3a:80:5a:2b:fa:22:0f:e4:
66:a4:a1:19:f6:3a:70:6b:0d:c4:88:ee:87:be:d2:85:63:5b:
77:dc:92:20:70:0b:88:24:b5:d6:98:53:36:c7:d7:a5:40:93:
6b:3a:b6:2d:96:b8:a2:58:86:62:38:e6:dc:cd:42:33:d7:ee:
06:ae:e1:9c:3a:4c:91:b6:fc:35:d8:a7:97:1e:b3:c2:e4:c4:
97:00:1e:84:77:92:c2:81:ec:72:52:f5:b2:4e:aa:36:c0:b5:
99:c1:95:ec:ea:8a:56:1e:46:3c:81:31:a4:23:02:f8:b7:fc:
a9:e7:8b:35:73:4f:62:3c:c8:15:0f:83:cf:60:75:71:b7:18:
23:e9:ba:b2:82:d5:0b:ea:88:d7:4d:58:55:ec:b7:c4:14:d9:
7e:0a:fc:e0:51:21:ac:23:2e:87:78:92:de:d7:2f:d4:0f:5d:
9e:85:16:4a:4c:3c:20:4b:c5:2f:d0:b5:fb:af:36:cb:57:84:
22:25:d2:e5:84:56:e2:2f:7b:ed:6d:b9:23:1e:f6:d5:6a:56:
b6:41:db:f5:0c:f3:c2:8d:f0:d7:c6:4d:2d:d7:56:f7:a2:3f:
64:90:ea:ac:fd:ce:87:9e:19:3e:9c:11:6c:7d:eb:d1:d3:6d:
ad:4f:9e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:44 2026 by rpki-client