Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: eEXxaVNTSzuNN+VBjSO60rbnysh55IQCWbmahaUA8W8=
Subject key identifier: AA:27:6F:89:F3:4B:5A:AC:43:ED:34:C9:A3:76:23:23:46:45:59:E0
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 01A0D12469588D7E9B95DDDFC1B6F1EDD590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 1963
Signing time: Thu 24 Sep 2026 02:00:19 +0000
Manifest this update: Thu 24 Sep 2026 02:00:19 +0000
Manifest next update: Fri 25 Sep 2026 02:00:19 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: rLeLORWW8bkwoCshFQ0Qseh3VvkhKROYa6mqqyc8x60=)
2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
3: z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (hash: lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:69:58:8d:7e:9b:95:dd:df:c1:b6:f1:ed:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Sep 24 02:00:19 2026 GMT
Not After : Sep 25 02:00:19 2026 GMT
Subject: CN=aa276f89f34b5aac43ed34c9a3762323464559e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:df:06:c8:91:81:f5:0f:7c:1d:a6:df:1b:
b3:87:f4:0a:fc:a5:53:c4:dc:5f:fb:d4:e0:45:e1:
bb:44:f2:e7:3e:af:28:65:89:1f:96:64:3a:c1:d6:
45:38:97:08:39:14:c0:44:32:fd:85:ef:3e:00:3f:
d5:2d:04:7e:02:ca:f1:60:e8:ad:e5:a2:6e:71:71:
93:64:85:e7:9a:16:d2:bc:48:e3:0a:67:2f:c8:d0:
f5:5a:b3:ca:ca:b5:8a:99:bb:ad:22:a7:c4:71:a0:
0a:ff:fa:f1:66:fc:8d:39:f1:c7:fb:01:d6:be:94:
e3:91:b4:4d:83:a8:d2:12:63:6f:82:31:b0:85:93:
12:b1:fe:e3:c5:93:db:94:c2:20:7f:95:dc:a2:38:
ee:89:51:91:e3:e0:f8:8a:e4:76:84:0c:3e:6a:4e:
f1:40:8a:8f:aa:93:54:35:1f:4e:dd:e7:19:0f:f6:
c2:bd:37:1b:b6:53:81:49:c2:bd:eb:fc:8c:51:92:
fe:a3:ae:cc:e8:11:5d:43:82:ff:53:3a:05:5c:4e:
c6:5e:b3:ac:08:84:41:62:f0:42:7b:a4:53:70:bc:
c8:68:be:b7:62:27:79:23:26:49:38:7a:ff:8a:8c:
e9:43:d8:a3:85:86:83:22:20:fc:e9:47:0c:f7:f5:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:27:6F:89:F3:4B:5A:AC:43:ED:34:C9:A3:76:23:23:46:45:59:E0
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:48:ad:fd:5d:86:fb:f5:60:86:99:cc:4d:41:06:7a:60:e5:
a4:c0:27:bd:fb:e7:e1:79:0a:2e:1e:3d:70:a9:ec:ed:ff:88:
9a:02:2f:f9:23:66:2d:c1:02:af:9c:c7:22:43:47:3c:1e:ff:
a4:4c:1f:2d:f2:30:ac:64:36:5c:44:ee:cd:03:81:23:73:09:
7d:0d:0a:59:ef:6f:7d:dc:fe:bd:cf:90:39:12:13:67:cc:1a:
f8:e4:a8:49:92:9c:12:f6:bc:eb:38:a5:b4:f9:25:31:1e:be:
64:6a:80:30:f0:93:62:3c:06:ce:de:e1:a5:21:73:0b:e5:f8:
88:c6:82:42:ab:52:c1:81:cd:84:87:a8:03:fa:8d:b4:00:3a:
37:2f:2f:03:09:76:7a:cf:92:bf:b3:53:65:a3:1a:c5:05:2b:
b1:f8:a9:88:34:bd:c2:50:53:90:40:b6:52:2b:01:9e:3e:09:
75:0b:b4:3c:ea:61:79:e0:61:e2:cd:b6:af:40:54:e6:a0:3f:
ba:24:40:4e:09:1a:06:80:db:bd:9c:37:21:db:6a:d6:30:ae:
fd:f6:f3:80:ac:55:f9:5d:2d:ff:89:a8:5f:85:80:87:8b:94:
c2:22:54:0e:43:a4:1e:34:d6:f4:4c:9a:8c:8f:c9:3b:88:22:
ec:35:54:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:47:52 2026 by rpki-client