Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: knOXgokLWjBFm+dksGlaxP06VdPK3ZV97Ecue47W9Zo=
Subject key identifier: BA:BB:7D:77:E2:12:8F:55:EC:CF:B7:BF:8E:08:EB:C5:51:4E:08:2D
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 019F8EA2B5B50EE843A25E36965C43123FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 18BC
Signing time: Thu 23 Jul 2026 11:00:55 +0000
Manifest this update: Thu 23 Jul 2026 11:00:55 +0000
Manifest next update: Fri 24 Jul 2026 11:00:55 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: bDac+rQ4Jf8U8qHJO3RIzg3dU+qoUxWyw8B6Db8BOWA=)
2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
3: z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (hash: lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:b5:b5:0e:e8:43:a2:5e:36:96:5c:43:12:3f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Jul 23 11:00:55 2026 GMT
Not After : Jul 24 11:00:55 2026 GMT
Subject: CN=babb7d77e2128f55eccfb7bf8e08ebc5514e082d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:25:4c:e7:de:c3:c0:cc:2b:d7:4f:ba:cb:
48:07:20:7c:74:06:ac:75:f0:55:49:d3:48:92:2f:
bd:31:fc:5a:8d:f0:23:22:09:7f:f2:81:68:e8:43:
f4:8f:39:ca:4d:5e:d9:09:f9:da:eb:6f:8c:7f:5c:
b1:17:7a:71:8c:f0:11:10:86:92:5d:5f:e8:2b:35:
72:a9:e6:53:8c:e7:aa:6a:61:6f:fa:b8:bf:ed:78:
70:da:55:1b:2d:1e:ce:6b:9e:03:22:4e:4f:3c:f1:
84:b1:29:bd:02:b3:69:a9:f5:52:05:92:25:57:9e:
f6:82:27:fb:32:35:a4:aa:89:25:19:dd:4b:69:03:
45:c2:1a:6a:e8:84:85:5a:9a:d0:27:ac:21:06:09:
e8:07:8c:77:7a:41:f0:7e:c2:9c:44:d2:33:9f:6c:
a3:6e:d5:55:b9:39:af:64:42:e3:19:b9:b1:9b:e3:
32:13:45:96:04:1d:31:98:8e:68:f7:e7:34:40:bc:
d7:d8:58:f0:1f:83:d7:ed:af:ea:8b:b5:8f:b4:59:
b1:a5:90:33:5b:7c:a3:be:05:c8:33:92:1c:20:95:
88:f1:32:7f:1f:43:83:ce:1e:0e:b6:85:bd:73:dd:
d7:cb:fa:be:ce:1e:07:44:94:3b:3b:26:0b:dd:25:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BB:7D:77:E2:12:8F:55:EC:CF:B7:BF:8E:08:EB:C5:51:4E:08:2D
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4a:59:fe:fe:63:f0:17:9c:c3:c6:c7:87:1a:6f:9c:ef:94:
11:df:7e:0c:4f:b0:38:65:20:3a:75:4f:ac:fb:5d:eb:db:55:
a3:71:e3:18:28:e2:ac:29:5a:86:a1:ce:c3:be:35:69:0f:c1:
30:69:70:a0:a8:e8:14:56:35:d3:05:8b:fb:de:fe:ae:02:03:
03:e8:11:90:76:f3:aa:f7:89:eb:1c:8a:ce:e7:5e:57:07:f2:
35:a7:d4:00:36:9a:bf:76:b9:ae:58:fd:78:ff:67:97:1d:1a:
2e:1f:29:c7:d5:4c:a4:fc:75:f7:62:3f:7a:60:9e:71:e8:e8:
3b:33:fe:2f:15:9b:50:0d:ce:76:6a:90:4b:90:a7:ce:c1:9a:
f3:6f:7d:45:73:28:58:4b:60:b9:90:b0:eb:9f:f2:4b:dd:69:
e2:7a:e7:0c:7d:3b:06:d0:a0:1b:b6:e5:82:ae:26:51:91:a5:
bd:cc:76:bb:fa:08:1c:2e:de:f4:5c:fa:68:81:f0:3f:6d:59:
88:56:72:36:cc:74:1b:9f:4e:5c:3d:89:ea:14:64:65:7b:33:
da:34:97:f7:cf:ba:4a:f2:a1:ad:9c:f2:ae:72:1b:75:ca:41:
fd:ff:5e:89:92:2b:3b:78:af:a5:8e:a8:b7:ff:5d:b6:d4:b1:
6e:02:9c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:25:47 2026 by rpki-client