Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
File: YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json)
Hash identifier: sOO3rPmQnyXpU1b1KFHMU2Hu0v10pbsZc7YAzRK4tJU=
Subject key identifier: 89:93:A1:0A:3F:EE:45:C2:B5:7C:E2:D9:7B:51:30:2A:BC:CD:1B:FA
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial: 019E1C468C7C8D2763B8BE05ACF2E67BE818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
Manifest number: 0BAC
Signing time: Tue 12 May 2026 13:00:45 +0000
Manifest this update: Tue 12 May 2026 13:00:45 +0000
Manifest next update: Wed 13 May 2026 13:00:45 +0000
Files and hashes: 1: LE2eUeeMg2Dnp41TZCQ6QJb9-T4.roa (hash: R9/uF4yCT5OCiN9a2sdHn7TEtLNuAXR9YP7aIOCF+IE=)
2: Ol4huw7GYWpyqPfWm84CkYyLNA0.asa (hash: Z+czFmwTiCipnTfl3HeWp7PieMyklhhhE/b/q7rKaSg=)
3: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: yhjcL5MUD7VAqRMCX/+dk3veHwa+fDk+Ky6+Vj5JWP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:8c:7c:8d:27:63:b8:be:05:ac:f2:e6:7b:e8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
Validity
Not Before: May 12 13:00:45 2026 GMT
Not After : May 13 13:00:45 2026 GMT
Subject: CN=8993a10a3fee45c2b57ce2d97b51302abccd1bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:63:ce:fd:5f:18:93:a0:9f:34:74:e4:3a:
7d:2b:39:af:49:22:98:aa:6c:09:eb:f2:c4:bf:f5:
af:84:8c:74:52:21:e5:8c:f7:b7:69:e3:c5:fd:b7:
5f:1e:3e:b4:b6:88:f1:98:9b:38:b8:ba:15:aa:61:
d3:ad:4b:9f:3d:70:01:15:73:d0:ed:93:8f:12:7d:
c0:f1:b6:9f:25:31:62:5a:98:79:bf:ac:aa:ed:c0:
54:2b:c9:c6:a4:a7:07:5f:a8:f4:46:db:2c:fd:5a:
18:46:68:4b:78:dc:1d:35:3e:10:92:86:18:c0:8c:
f3:a4:6d:10:61:e1:a2:eb:45:f0:2c:87:07:ec:bd:
9c:82:10:4c:1f:d5:0a:85:97:89:a4:ce:6f:41:b9:
32:aa:fa:5a:89:8e:79:d6:93:e9:77:fb:bf:2a:ce:
7e:62:24:ab:16:4a:1f:ce:99:13:ac:3c:9a:91:ce:
a5:11:5b:50:42:d8:97:b5:27:46:0e:84:5b:09:4f:
2f:49:99:06:a6:e4:9e:b1:5d:14:57:4a:82:94:d4:
03:43:06:9e:34:a0:0c:4c:2b:29:f4:a5:67:3c:85:
e3:a9:16:1d:6a:ad:c6:f1:90:84:f8:a2:d8:da:81:
58:d2:3b:ca:fa:18:bc:75:e4:af:7f:0d:2c:d9:89:
f7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:93:A1:0A:3F:EE:45:C2:B5:7C:E2:D9:7B:51:30:2A:BC:CD:1B:FA
X509v3 Authority Key Identifier:
keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0a:6a:9a:f7:a9:c2:6e:1e:0c:61:be:8f:1e:13:ca:63:06:
ec:0e:e0:ce:aa:ae:58:06:84:9e:47:02:71:0b:b0:ef:6c:f4:
cb:64:3f:36:74:e8:5b:17:67:fe:17:3e:2c:c3:75:3d:c3:66:
d6:de:95:56:14:e5:3d:ab:11:69:07:b4:51:84:a4:d7:76:2d:
78:9f:c2:b5:9c:81:d9:40:12:43:ed:c8:b1:60:0c:15:79:f9:
ab:a6:30:80:f7:08:bc:21:61:86:fe:92:b1:49:1c:ac:9d:ca:
c8:e4:fd:b2:8f:2d:2d:17:8c:5a:9d:fb:67:42:2e:61:3d:41:
9d:f8:4c:86:dd:6d:0a:1a:cb:64:6d:08:20:38:61:c5:e6:02:
72:2b:26:41:e9:fd:08:83:54:ee:98:8b:d4:15:2c:d3:10:32:
66:75:fa:96:4f:6b:2e:dc:7a:ff:71:70:ba:c8:f9:87:d0:e8:
09:c2:d2:45:84:36:b7:8d:99:b0:fe:2b:ea:9f:ae:49:16:0f:
d8:c1:8f:1e:bb:63:c5:ed:b1:de:bb:cb:f5:b5:ed:e0:43:ef:
2c:e0:b4:52:d2:c7:f2:83:73:aa:dc:11:da:9f:7d:16:a0:5f:
88:e4:d0:75:6a:83:fa:db:de:f0:20:1d:71:a2:ea:fa:cc:55:
ca:32:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:21 2026 by rpki-client