Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: TwYdoCwD50vNxNvEHB/2yrbCNl2mfS/fO/D/Jh4riP0=
Subject key identifier: 4F:E0:30:98:42:C4:D9:9C:C1:4A:0C:C1:10:C1:51:B2:37:8C:0F:FF
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 019E1E6C4B5ACA2B4515EAFFE235037B3780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 174E
Signing time: Tue 12 May 2026 23:01:14 +0000
Manifest this update: Tue 12 May 2026 23:01:14 +0000
Manifest next update: Wed 13 May 2026 23:01:14 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: srsCHCkzOzFudXdNSLoNuh/7e9BvxCeSNXe+18Eeubc=)
2: tCO87qgLeHdiJcQ1IV_bd46Jvho.roa (hash: 2SSHDUuNwyIUrIbmZYF0QjOFxPKwxanOkPswUq79oUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:4b:5a:ca:2b:45:15:ea:ff:e2:35:03:7b:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: May 12 23:01:14 2026 GMT
Not After : May 13 23:01:14 2026 GMT
Subject: CN=4fe0309842c4d99cc14a0cc110c151b2378c0fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:15:56:2b:02:1c:59:ba:41:a9:ff:e5:6d:
b7:9b:58:6d:91:80:1a:75:0f:ef:23:1b:ed:13:c6:
c2:80:f2:c6:f4:bb:f8:c9:74:a9:b3:2f:14:4a:e8:
c7:09:d2:87:17:b7:11:48:8d:c2:7f:d9:ef:09:12:
0f:c7:ba:83:47:88:0c:e7:be:75:2c:d1:d5:08:15:
bb:f8:74:a5:e5:84:8f:fe:23:fc:8f:8d:07:07:41:
14:29:2c:21:38:50:6c:2d:e0:58:eb:ce:18:c7:ad:
d6:7f:1c:b5:8f:1a:34:2e:4d:70:37:35:14:51:76:
88:76:80:e0:8e:18:c5:8f:44:fd:4c:5c:26:61:a5:
b5:82:36:59:a1:10:9d:58:62:1c:60:21:d1:b3:c7:
ae:c3:8b:f3:09:4c:5c:1a:90:3e:2b:e6:79:09:56:
14:c0:75:ef:1a:b7:c5:5c:da:b6:30:1b:3f:d0:bf:
8e:09:19:6f:76:cc:b5:7e:6c:f0:7c:26:2d:45:d7:
4f:9a:5b:e2:ec:b5:e3:b9:e5:91:b3:0a:c7:35:2d:
d7:91:9e:30:f9:07:40:cc:3e:e0:9e:c4:97:20:ed:
07:b5:57:5a:9a:61:88:f9:7c:25:1f:6a:0f:cc:d5:
a3:a7:5a:3d:19:1a:53:6d:e7:f1:0c:32:76:65:da:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E0:30:98:42:C4:D9:9C:C1:4A:0C:C1:10:C1:51:B2:37:8C:0F:FF
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d6:36:73:7a:7d:3c:40:ae:89:1d:ff:3c:57:ed:93:7f:a1:
f1:23:37:c5:6c:6d:de:e4:3c:66:7f:ee:07:e7:b7:f3:1c:b7:
9d:ac:17:0f:81:72:2a:49:b9:3e:71:e5:bf:53:3a:e2:52:81:
78:30:e5:7e:39:e7:f3:c4:f9:07:eb:3d:68:d6:91:1e:5d:3f:
a7:e0:1d:22:42:1f:15:15:40:42:8b:91:11:41:a4:2b:25:c2:
0b:1a:3e:93:21:1c:a4:9e:9a:04:8f:53:42:72:b2:ab:8d:50:
8b:46:f7:e7:bc:73:51:7b:ac:25:30:2f:ff:9d:25:21:da:48:
17:8a:16:20:ac:40:c6:16:bb:97:91:25:af:b6:65:fd:f5:cc:
40:2e:b2:82:65:ff:88:bc:77:54:ba:0d:a2:1f:77:83:ac:87:
2f:8a:d7:0d:c4:81:fb:54:97:01:f2:db:d4:22:9c:b2:29:38:
db:46:44:f0:61:91:77:bb:f5:99:31:5d:a5:81:21:cc:78:76:
9b:22:ad:8d:c3:c4:6f:61:29:c1:ff:fc:31:fb:c2:d7:f8:ad:
d3:db:5a:07:df:11:e5:4d:ab:af:07:e0:7b:02:b5:e9:38:b5:
1e:46:d1:0f:be:e9:ed:d4:ea:c9:f9:9a:8d:a3:2f:49:cf:bc:
22:25:6a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:06 2026 by rpki-client