Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier: qmi9nOBjqcHBjo3d5SAPaGDb4KomYp0jaIbxNe0hR1M=
Subject key identifier: 5D:86:EF:81:42:06:64:40:4E:4C:E6:6E:7A:21:30:85:50:4F:5E:5C
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 019F10E4E56FE565D7BA361A21C3A3EA09F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number: 1532
Signing time: Mon 29 Jun 2026 01:01:04 +0000
Manifest this update: Mon 29 Jun 2026 01:01:04 +0000
Manifest next update: Tue 30 Jun 2026 01:01:04 +0000
Files and hashes: 1: 0FXE-aMYDoHsJWIgYZ6p4cTAvIc.asa (hash: m9vFjKk2IkfNxMT1oBT/EqvBwRhxlH++eft+dvmvzfI=)
2: B1xlxtkgltJzqbUtpT-T2k7OjtI.roa (hash: qZlWNzGPdE+IKxAZlX53rTWx5ECKk+OZ5/kaPPhGDH4=)
3: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: AOFdWbEhGb+ARxuGCR1p5xDGZw4h5jHvK10ugD8FPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:e5:6f:e5:65:d7:ba:36:1a:21:c3:a3:ea:09:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Jun 29 01:01:04 2026 GMT
Not After : Jun 30 01:01:04 2026 GMT
Subject: CN=5d86ef81420664404e4ce66e7a213085504f5e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:02:39:c0:a0:2d:8a:a5:e5:5e:2c:88:5b:
9f:fd:62:ea:8d:4a:c6:23:e3:8b:29:b8:1f:66:c4:
b0:1c:cd:10:b1:76:3d:d5:9b:ad:56:47:db:b1:62:
7c:ac:4c:bb:74:d8:30:f2:23:41:6a:3e:2a:5a:e2:
86:1d:b5:aa:44:70:a3:ab:54:94:b5:f4:81:a9:10:
f4:e2:cd:9a:92:44:1a:ec:ea:8f:48:ec:fc:12:ef:
41:95:53:ab:48:88:e8:89:2e:83:34:c4:1a:f2:e4:
ea:19:01:6b:7b:d5:19:ea:a0:6c:97:c0:2f:24:b7:
48:86:3a:04:6e:54:cf:d8:ac:a8:88:0f:86:de:9a:
56:77:6f:ef:74:f0:e2:94:5a:89:a4:01:1f:60:de:
04:3b:71:9e:10:ac:ff:b0:91:0b:d2:90:f3:93:c2:
80:08:db:56:c6:74:d7:06:f6:3e:9d:45:9a:7b:56:
ed:3d:d7:28:d1:ec:dd:17:63:f0:75:64:a7:81:83:
2d:33:57:67:d6:95:f3:e4:84:93:11:7f:34:a7:b6:
bd:56:62:fe:05:50:c9:95:4b:70:8e:17:e3:2c:52:
94:a0:56:a1:69:2a:0c:2f:f6:08:5b:6b:40:af:48:
d8:a4:cb:6f:f4:9f:18:b4:97:49:24:81:ba:ba:6e:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:86:EF:81:42:06:64:40:4E:4C:E6:6E:7A:21:30:85:50:4F:5E:5C
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b7:58:0d:18:e5:3b:9b:0e:30:cd:8b:ea:3f:80:47:be:fc:
aa:1c:2f:cd:c6:0f:87:23:ef:94:c1:b0:8c:66:4b:b8:a3:f7:
bd:68:ad:df:c3:14:e0:36:43:4d:4a:05:b3:cc:58:fe:be:54:
88:52:31:30:a3:99:b7:23:d1:25:f6:5b:c7:8e:e8:37:f8:c1:
40:10:e0:28:45:da:9a:3f:47:ad:fa:a4:fc:ae:60:d5:84:4d:
a5:f7:32:35:28:85:61:04:c5:20:05:d0:c6:08:b6:f4:b3:5f:
9e:6d:dc:98:8d:0c:4f:16:f6:35:d7:41:5e:2a:96:ed:0f:5c:
5c:6b:81:de:b8:26:db:94:f8:56:03:05:e1:69:53:b6:fe:ef:
b0:07:15:8b:7c:fd:ca:41:6c:4f:5e:78:10:e0:26:32:2d:0c:
0e:6c:ba:36:6f:35:9f:bd:7a:49:32:24:d5:25:06:d4:06:1b:
75:9c:b4:3c:7e:a6:37:12:cb:47:24:0c:34:6c:92:f6:95:a8:
85:af:7c:aa:7f:92:a0:a0:d5:83:1a:f7:1a:34:a8:c3:6d:f3:
09:ca:ef:2c:80:e1:87:3c:68:d1:53:7a:f1:61:a0:d6:28:28:
01:01:bd:66:41:59:f8:c6:46:b5:e7:08:0e:1e:86:57:4b:74:
21:bb:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:16 2026 by rpki-client