Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: ZRdFhWQKnMYZysFtL2k4tdygCWol9wyvbsgGcQEqV8w=
Subject key identifier: 21:26:4E:E2:F1:08:FD:D4:2B:D3:3F:3C:60:61:A3:84:4D:AB:BA:21
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 019E1C102E196C32CF097ADFACF06630A1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 17FC
Signing time: Tue 12 May 2026 12:01:22 +0000
Manifest this update: Tue 12 May 2026 12:01:22 +0000
Manifest next update: Wed 13 May 2026 12:01:22 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: ZNPfcmyb3pLsPGGvZl9QNjwpS33KM1PJH1msvzdzBpA=)
2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
3: z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (hash: lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:2e:19:6c:32:cf:09:7a:df:ac:f0:66:30:a1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: May 12 12:01:22 2026 GMT
Not After : May 13 12:01:22 2026 GMT
Subject: CN=21264ee2f108fdd42bd33f3c6061a3844dabba21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:fe:68:c1:9e:38:a1:64:0d:ed:a3:ed:23:
d1:5e:f1:fc:8c:97:cf:ca:6c:7a:4e:cd:f5:48:48:
0f:2c:e0:d5:b2:ff:f8:dd:98:ab:54:d8:3a:61:2e:
a3:ac:c7:d8:7f:d7:69:03:35:d1:be:83:3d:95:b6:
2f:4e:db:d6:79:72:79:9d:0d:2b:da:3b:8a:1d:94:
0a:dd:18:5e:50:e4:f2:9f:e5:e6:7e:f4:43:69:83:
9c:df:e9:b0:c4:0c:29:37:05:4b:8a:9f:6e:f3:b3:
28:84:ec:4b:fa:08:13:dd:a2:75:aa:3a:eb:c1:18:
c2:b0:9c:d9:89:fb:59:f9:d8:9d:c6:f8:95:1b:0d:
10:f2:9b:f0:ad:9f:17:c7:51:12:9f:f4:ca:f8:af:
07:39:ca:4b:a8:24:21:5c:9d:bb:e7:8b:2c:11:7e:
a1:5d:1e:1c:4c:2c:21:73:e3:0b:b7:df:a7:0d:39:
5d:90:ad:7f:81:b8:a8:1e:61:ff:94:1e:90:ab:40:
13:b9:66:4f:44:3d:d5:c6:b4:d8:a7:47:27:d3:4c:
f0:22:52:c7:c3:34:9e:84:8e:a1:47:40:96:56:be:
e2:a0:d8:95:c2:1e:2f:ec:ff:36:c4:04:e3:90:74:
a7:32:7c:91:72:69:0b:78:6e:85:58:98:65:5b:66:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:4E:E2:F1:08:FD:D4:2B:D3:3F:3C:60:61:A3:84:4D:AB:BA:21
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3e:e4:9e:ff:c2:34:9d:76:3b:d0:35:07:a6:b9:26:de:ac:
ad:c7:7f:0e:a6:00:5c:9b:5c:c8:58:df:54:d5:2a:7b:bb:be:
8a:27:e3:f1:d0:14:85:1c:a3:5f:3b:93:9c:ce:c2:b8:49:d5:
42:42:2a:78:4a:eb:9b:0a:2e:9e:f9:4c:97:97:50:50:3b:96:
97:30:27:66:e3:b4:4c:fe:27:3d:f8:01:5c:69:5b:84:e3:f8:
c7:cf:af:9a:94:62:6e:e5:40:cb:9d:21:36:ae:2f:67:4a:bf:
6a:65:f7:27:fd:71:56:92:03:e7:5c:be:87:8c:69:50:4d:f2:
ba:af:cf:81:9c:15:cd:43:b3:10:31:5e:f7:a9:5f:56:b3:93:
c0:ed:69:18:c3:cc:7c:b1:d4:f3:1a:0b:40:b1:1d:b3:23:cb:
c1:de:fe:22:76:4f:76:71:3f:b4:4e:e8:32:79:fc:14:bb:f6:
26:e6:33:33:93:40:3d:01:e7:54:15:51:d4:cf:22:3f:05:26:
9b:61:31:8a:a0:d0:4f:72:9f:d0:bd:d0:26:eb:e2:f0:64:e9:
fc:64:a5:b1:a7:43:ca:68:7d:ca:bc:ee:1d:d7:00:0b:d0:46:
58:a4:e6:6a:a9:a9:a1:98:84:28:63:96:e3:7e:8d:40:55:b2:
88:85:b8:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cEC4ZbDLPCXrfrPBmMKHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZGZlNTM4ODRiOTVhMDlmNjZhNDE2ZTE0ZjU2YzZiMGY3
ODlhZmMwHhcNMjYwNTEyMTIwMTIyWhcNMjYwNTEzMTIwMTIyWjAzMTEwLwYDVQQD
EygyMTI2NGVlMmYxMDhmZGQ0MmJkMzNmM2M2MDYxYTM4NDRkYWJiYTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq3+aMGeOKFkDe2j7SPRXvH8jJfP
ymx6Ts31SEgPLODVsv/43ZirVNg6YS6jrMfYf9dpAzXRvoM9lbYvTtvWeXJ5nQ0r
2juKHZQK3RheUOTyn+XmfvRDaYOc3+mwxAwpNwVLip9u87MohOxL+ggT3aJ1qjrr
wRjCsJzZiftZ+didxviVGw0Q8pvwrZ8Xx1ESn/TK+K8HOcpLqCQhXJ2754ssEX6h
XR4cTCwhc+MLt9+nDTldkK1/gbioHmH/lB6Qq0ATuWZPRD3VxrTYp0cn00zwIlLH
wzSehI6hR0CWVr7ioNiVwh4v7P82xATjkHSnMnyRcmkLeG6FWJhlW2ZAGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEmTuLxCP3UK9M/PGBho4RNq7ohMB8GA1UdIwQY
MBaAFGLf5TiEuVoJ9mpBbhT1bGsPeJr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmIt
MjkzNmFhMjI3NzY1LzEvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmItMjkzNmFhMjI3NzY1
LzEvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnD7knv/C
NJ12O9A1B6a5Jt6srcd/DqYAXJtcyFjfVNUqe7u+iifj8dAUhRyjXzuTnM7CuEnV
QkIqeErrmwounvlMl5dQUDuWlzAnZuO0TP4nPfgBXGlbhOP4x8+vmpRibuVAy50h
Nq4vZ0q/amX3J/1xVpID51y+h4xpUE3yuq/PgZwVzUOzEDFe96lfVrOTwO1pGMPM
fLHU8xoLQLEdsyPLwd7+InZPdnE/tE7oMnn8FLv2JuYzM5NAPQHnVBVR1M8iPwUm
m2ExiqDQT3Kf0L3QJuvi8GTp/GSlsadDymh9yrzuHdcAC9BGWKTmaqmpoZiEKGOW
436NQFWyiIW4HQ==
-----END CERTIFICATE-----
Generated at Tue May 12 22:08:51 2026 by rpki-client