Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
File: YictaPs4lesim2j41DNBJLlnxw4.mft (raw, json)
Hash identifier: jThTNioN19B9glbGjDuGQwCsXoJkqyS7cY0fhw4Ny+A=
Subject key identifier: 7C:1E:81:68:0E:A0:50:2E:72:AA:73:9E:4F:51:78:B8:3A:4F:4B:51
Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Certificate issuer: /CN=62272d68fb3895eb229b68f8d4334124b967c70e
Certificate serial: 019D37F76F8D86AF0FD70838BE1DAFFAAB38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
Manifest number: 12FF
Signing time: Sun 29 Mar 2026 05:00:55 +0000
Manifest this update: Sun 29 Mar 2026 05:00:55 +0000
Manifest next update: Mon 30 Mar 2026 05:00:55 +0000
Files and hashes: 1: 33i2qqWu0X5QxMYwp4hgjABiqq4.roa (hash: 1hHMiIhJSj+gJrD8TbC5dlRZ8I3xR9/+D7WQxWbZlNU=)
2: YictaPs4lesim2j41DNBJLlnxw4.crl (hash: KxNoMCbDBzYDdsciDEgo9tC0oivfN4nik7AAbCE8JbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6f:8d:86:af:0f:d7:08:38:be:1d:af:fa:ab:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e
Validity
Not Before: Mar 29 05:00:55 2026 GMT
Not After : Mar 30 05:00:55 2026 GMT
Subject: CN=7c1e81680ea0502e72aa739e4f5178b83a4f4b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:54:92:ef:0d:6d:16:12:13:40:a7:be:a8:
7e:a7:1a:b7:3f:ba:27:aa:62:10:32:ef:a0:ab:f5:
02:da:d8:5d:47:28:15:ce:ad:33:a7:88:70:9f:1f:
2c:10:1f:07:70:33:6d:4c:7d:7a:fd:f4:f0:6c:5c:
9e:56:3d:f7:0f:a1:5d:c0:35:da:89:82:ab:b3:8b:
99:ce:69:c6:eb:95:0e:c2:b0:30:92:ed:1e:9b:16:
1f:08:b4:d2:ab:61:dd:ae:1e:66:5d:49:97:99:f6:
24:8a:02:5e:46:53:2f:86:a9:d6:a7:01:f5:c8:d1:
a7:c1:b8:89:51:6f:c6:b1:38:7f:63:38:49:16:5f:
ee:78:f5:79:24:1d:66:7d:53:1e:41:fb:06:8a:fb:
e2:99:96:fd:e9:96:34:67:32:ec:e5:5a:f4:3f:2e:
87:b1:74:60:01:df:bb:4a:e0:2c:f1:59:db:3d:44:
e7:55:51:c8:8e:fd:ba:07:91:bd:63:5c:a3:b7:60:
36:f7:c1:c3:f9:2f:b4:cb:b7:1a:47:d9:3f:5c:bd:
b1:f1:c6:aa:9b:87:74:29:25:da:a6:fb:d0:f9:44:
11:67:a6:d2:da:97:5e:0e:97:37:1d:e3:7c:b2:4f:
34:cc:2c:b2:29:34:d2:42:b7:f0:0a:ad:35:65:c0:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1E:81:68:0E:A0:50:2E:72:AA:73:9E:4F:51:78:B8:3A:4F:4B:51
X509v3 Authority Key Identifier:
keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f9:08:93:e8:ba:33:12:e2:56:ba:56:4b:75:c3:83:96:b3:
12:99:cb:a5:3c:df:00:ef:9d:0f:c4:65:f0:04:ba:48:39:d5:
50:dc:b7:71:96:d6:60:f8:50:60:04:c6:ab:d7:ab:26:b8:89:
0e:89:89:97:d8:dc:12:49:b9:c3:f4:ff:8f:21:7e:79:42:c1:
7e:02:f5:5c:8c:cf:76:c0:f5:5d:6b:36:37:4f:e7:7a:48:63:
0e:81:34:4a:b1:04:6a:0f:e9:83:62:69:f4:a9:1f:f9:71:dd:
8b:57:ae:1f:ca:b1:9a:be:fe:dd:50:58:c3:cf:de:86:ea:b9:
fa:b0:44:97:82:d8:1e:3e:8a:a8:db:cb:d7:3a:dd:a5:c8:79:
cc:15:b3:6f:e4:4e:6c:3d:40:7b:2d:db:88:e6:42:01:b0:c3:
69:76:fd:ed:fe:58:40:d2:4f:80:1e:11:f1:4f:76:72:ac:e5:
c6:13:85:b8:97:ab:8b:5e:c6:a5:18:0c:7d:81:42:79:6f:6f:
19:a1:82:fd:2f:7e:25:e5:bb:4e:72:0a:c6:4f:e4:5d:20:35:
2e:9f:1e:51:3f:ad:4d:9a:e2:d4:a6:3f:83:9c:0c:72:b3:20:
05:0b:50:be:77:de:3e:27:1d:4a:6e:7c:12:9b:43:64:f6:20:
4c:53:c5:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392+Nhq8P1wg4vh2v+qs4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjcyZDY4ZmIzODk1ZWIyMjliNjhmOGQ0MzM0MTI0Yjk2
N2M3MGUwHhcNMjYwMzI5MDUwMDU1WhcNMjYwMzMwMDUwMDU1WjAzMTEwLwYDVQQD
Eyg3YzFlODE2ODBlYTA1MDJlNzJhYTczOWU0ZjUxNzhiODNhNGY0YjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ANUku8NbRYSE0Cnvqh+pxq3P7on
qmIQMu+gq/UC2thdRygVzq0zp4hwnx8sEB8HcDNtTH16/fTwbFyeVj33D6FdwDXa
iYKrs4uZzmnG65UOwrAwku0emxYfCLTSq2Hdrh5mXUmXmfYkigJeRlMvhqnWpwH1
yNGnwbiJUW/GsTh/YzhJFl/uePV5JB1mfVMeQfsGivvimZb96ZY0ZzLs5Vr0Py6H
sXRgAd+7SuAs8VnbPUTnVVHIjv26B5G9Y1yjt2A298HD+S+0y7caR9k/XL2x8caq
m4d0KSXapvvQ+UQRZ6bS2pdeDpc3HeN8sk80zCyyKTTSQrfwCq01ZcB0TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwegWgOoFAucqpznk9ReLg6T0tRMB8GA1UdIwQY
MBaAFGInLWj7OJXrIpto+NQzQSS5Z8cOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTct
OTdmZDc2YjgwODI3LzEvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTctOTdmZDc2YjgwODI3
LzEvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/kIk+i6
MxLiVrpWS3XDg5azEpnLpTzfAO+dD8Rl8AS6SDnVUNy3cZbWYPhQYATGq9erJriJ
DomJl9jcEkm5w/T/jyF+eULBfgL1XIzPdsD1XWs2N0/nekhjDoE0SrEEag/pg2Jp
9Kkf+XHdi1euH8qxmr7+3VBYw8/ehuq5+rBEl4LYHj6KqNvL1zrdpch5zBWzb+RO
bD1Aey3biOZCAbDDaXb97f5YQNJPgB4R8U92cqzlxhOFuJeri17GpRgMfYFCeW9v
GaGC/S9+JeW7TnIKxk/kXSA1Lp8eUT+tTZri1KY/g5wMcrMgBQtQvnfePicdSm58
EptDZPYgTFPFcw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:40 2026 by rpki-client