Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier: YjUWBD7k1bPfs6F8clt0n2mY3NUinNFbP1BwT9A6KVo=
Subject key identifier: 3B:B9:0B:B5:7A:86:3E:82:61:F7:DF:16:FB:65:8F:36:4D:0D:16:95
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 019E1D908EA4B10A5DFAB315C67B1B9E10F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number: 14B4
Signing time: Tue 12 May 2026 19:01:13 +0000
Manifest this update: Tue 12 May 2026 19:01:13 +0000
Manifest next update: Wed 13 May 2026 19:01:13 +0000
Files and hashes: 1: 0FXE-aMYDoHsJWIgYZ6p4cTAvIc.asa (hash: m9vFjKk2IkfNxMT1oBT/EqvBwRhxlH++eft+dvmvzfI=)
2: B1xlxtkgltJzqbUtpT-T2k7OjtI.roa (hash: qZlWNzGPdE+IKxAZlX53rTWx5ECKk+OZ5/kaPPhGDH4=)
3: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: 6PGbdHZmtEymt+EB9D5DGxDVKq+ty5dlgW9Wuz+tGvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:8e:a4:b1:0a:5d:fa:b3:15:c6:7b:1b:9e:10:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: May 12 19:01:13 2026 GMT
Not After : May 13 19:01:13 2026 GMT
Subject: CN=3bb90bb57a863e8261f7df16fb658f364d0d1695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:6c:bd:13:87:b9:76:97:ca:2c:31:19:62:
5f:a5:1f:1b:23:e0:ed:5d:06:ce:4b:91:88:6c:12:
87:b7:49:2f:7d:b7:7b:12:1d:c5:8f:56:61:b2:9e:
df:ee:da:11:4e:ae:cf:a0:f5:e6:7f:1d:9d:71:2b:
9c:52:73:66:c7:f5:35:74:d2:02:d7:e8:ff:05:7f:
c0:9a:6e:bd:fb:e4:b8:90:59:94:6b:49:97:70:5c:
8a:9f:b2:13:91:bc:01:ab:ba:a9:0c:fa:bb:27:0c:
66:ba:cd:5e:24:bd:f3:2d:53:e0:14:2c:7a:13:bc:
95:68:a2:d3:71:d9:25:60:e4:4b:3f:2b:b5:4d:df:
96:07:d3:9d:bd:a7:43:b1:6c:83:98:eb:b1:ad:6b:
55:c5:37:06:eb:64:a1:6e:67:85:cb:2c:14:0c:68:
2b:8a:60:95:ae:68:4e:0f:c3:95:6a:5f:29:d3:40:
66:15:fb:df:4a:ce:3f:80:97:df:b0:e6:9c:70:09:
9e:95:cc:62:5f:0b:c1:7e:ba:58:8f:44:09:99:23:
22:72:7c:1c:02:bd:38:d5:8b:fc:78:ac:e3:d5:90:
8f:d5:86:62:c5:ed:90:e6:72:d8:cb:e6:01:3a:33:
10:ce:92:15:14:c3:c0:9b:22:6c:8f:4a:47:30:4a:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B9:0B:B5:7A:86:3E:82:61:F7:DF:16:FB:65:8F:36:4D:0D:16:95
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:06:7f:66:b1:87:4b:b5:12:c6:ba:ac:43:fa:e7:c5:f7:dd:
0f:59:6a:83:b6:eb:e5:a5:50:72:de:16:a4:2d:80:ba:b8:b8:
f6:30:3f:68:0e:50:67:ea:c7:ae:dc:16:e9:57:94:d8:3e:63:
43:0a:20:0e:bb:b3:d5:0f:92:b9:bc:06:1e:a1:ef:e3:d9:3a:
62:63:f0:9d:24:38:c8:e7:59:e0:d3:c7:53:24:47:92:26:4d:
29:72:f8:b7:c4:9a:2a:f0:e4:c4:5a:93:3f:56:66:5b:36:b5:
21:4b:11:dd:22:f9:5b:97:f1:c8:5e:19:33:26:94:82:fb:68:
d2:3a:64:be:73:e4:18:de:06:6b:c8:9f:a5:e2:86:4b:64:69:
e2:15:0d:e4:ff:2d:13:72:52:9c:1f:11:37:e4:7e:95:d7:a2:
d8:de:6d:e5:be:5e:f9:c8:f7:33:2e:32:d7:db:16:2a:e2:e5:
29:a1:5d:1d:1e:f3:36:ea:51:e6:f3:1d:0f:4c:08:f7:3a:88:
29:a8:ee:52:d0:00:61:9b:db:a4:d9:78:fb:fd:b9:eb:25:3f:
9c:7c:0f:09:89:a4:e9:0f:af:b4:03:9f:07:1f:3e:a2:6f:43:
76:03:fa:55:1a:b0:4e:c4:4f:1e:68:b4:ab:e0:f5:a5:dd:7b:
22:7f:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:21:20 2026 by rpki-client