Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
File: Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft (raw, json)
Hash identifier: OtE8NBZVgFx/+VMedlXRXhg3pDSytJGEw5Pg0ujl0T8=
Subject key identifier: AB:0A:8B:E1:DB:26:C6:F3:51:C5:27:CC:9C:0A:27:59:8A:93:90:21
Authority key identifier: 62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
Certificate issuer: /CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Certificate serial: 019D28F29439EA9398EE925EFC43E6BD1D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 07:01:19 +0000
Manifest this update: Thu 26 Mar 2026 07:01:19 +0000
Manifest next update: Fri 27 Mar 2026 07:01:19 +0000
Files and hashes: 1: 2gO3AZ0wf5H55So82hrCWwWbVuI.roa (hash: U66k5TcWQ7PD9bBki0lUlKhjoZI0ZIMVHk6yyW5wKeQ=)
2: Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl (hash: kWkz/zv/fZ/nIJGBsAvpnHmvgcRmX3eN63aRPRWonJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:94:39:ea:93:98:ee:92:5e:fc:43:e6:bd:1d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Validity
Not Before: Mar 26 07:01:19 2026 GMT
Not After : Mar 27 07:01:19 2026 GMT
Subject: CN=ab0a8be1db26c6f351c527cc9c0a27598a939021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:e9:c3:f7:69:12:52:2c:5a:9b:1e:90:fa:
61:54:bc:1e:61:98:96:be:3b:6f:9a:ab:22:9f:40:
10:d9:fe:77:5f:50:17:e8:01:94:66:72:56:ee:c9:
5d:fe:4b:37:4a:2a:7e:cb:22:bb:99:14:43:0b:f2:
03:04:fa:33:34:43:af:20:2b:62:fc:f8:3d:74:15:
ce:b9:6a:7e:f5:ff:be:05:1d:03:be:e8:97:ee:d9:
41:d9:d8:d7:72:14:8e:3d:b3:9a:72:d3:e3:8d:12:
10:aa:49:ef:52:be:0f:7a:97:95:c4:f2:ec:c4:19:
1f:c1:f5:14:3e:cb:53:5c:96:ee:08:34:e8:fa:98:
88:ce:ad:93:6d:60:17:d1:bc:6a:55:dd:4f:23:d4:
f8:d1:6d:25:23:b4:5a:b3:2f:e5:39:2f:aa:21:5a:
8f:d4:b0:4c:64:c7:32:ce:7d:fb:8d:d9:62:64:cb:
05:55:20:41:0e:25:29:cb:3d:a6:d2:ce:b8:c0:4a:
bd:4e:7d:bd:77:e1:a9:00:b3:94:32:e0:67:68:d2:
7f:97:aa:17:6f:50:cf:50:8b:85:0f:f8:d7:da:2f:
26:7e:c5:0e:d9:d6:eb:af:67:eb:09:1c:b2:59:a7:
3d:ba:37:f3:4e:00:60:26:aa:b8:ff:13:f5:9f:d4:
bd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0A:8B:E1:DB:26:C6:F3:51:C5:27:CC:9C:0A:27:59:8A:93:90:21
X509v3 Authority Key Identifier:
keyid:62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4d:ec:ea:72:40:1f:68:bb:6a:34:d6:0c:9e:4f:03:3f:d7:
48:9d:cb:29:44:d3:14:93:b6:91:cb:3d:0d:86:77:a7:6d:8d:
bc:ea:96:4f:fd:a3:78:aa:a2:70:a6:43:43:5e:ee:84:c6:5e:
17:01:57:1e:10:32:a5:d0:da:40:98:b7:08:d1:84:c4:0c:cb:
e4:df:10:ed:76:7e:20:77:9e:a3:ea:4a:02:90:ae:20:bf:40:
95:7b:01:93:01:45:24:9d:ea:44:78:79:bc:3a:25:b4:72:8d:
59:7e:e4:71:11:e3:bc:11:7c:da:fd:dc:a9:64:c6:9e:41:d9:
ef:58:07:0c:45:df:7e:ac:8c:bb:13:36:cd:33:d2:a8:d5:7b:
dd:ba:18:30:3e:00:dd:68:ab:e6:45:28:52:f0:92:ee:01:05:
86:af:6c:73:a9:6a:6e:c4:e4:01:41:cd:75:66:40:d0:c0:63:
65:e8:9f:97:27:97:b4:96:d4:d0:90:5e:17:d0:ae:29:c4:ec:
58:bc:03:6f:e2:92:70:2d:c5:d7:dc:d1:f3:83:06:d0:85:73:
b0:62:b4:ee:7c:6b:a3:9c:4c:a2:04:58:c2:cf:40:8f:e5:f5:
cf:cc:0c:2b:b5:9c:8f:98:4e:e3:ae:f0:35:e1:07:11:7c:58:
53:45:cd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:33 2026 by rpki-client