Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier: UGCLAxcORlBrO3fm+HLRRN+1Elg7AS/+gEGkmQhx1d0=
Subject key identifier: D6:82:9A:1B:9D:03:FA:69:50:17:37:C0:01:6F:23:5E:93:9A:D8:F0
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 019D247167108DD52BAF9D0D9A62FD01B111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number: 1433
Signing time: Wed 25 Mar 2026 10:01:44 +0000
Manifest this update: Wed 25 Mar 2026 10:01:44 +0000
Manifest next update: Thu 26 Mar 2026 10:01:44 +0000
Files and hashes: 1: 0FXE-aMYDoHsJWIgYZ6p4cTAvIc.asa (hash: m9vFjKk2IkfNxMT1oBT/EqvBwRhxlH++eft+dvmvzfI=)
2: B1xlxtkgltJzqbUtpT-T2k7OjtI.roa (hash: qZlWNzGPdE+IKxAZlX53rTWx5ECKk+OZ5/kaPPhGDH4=)
3: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: NQoMa52L8eM/YEXcNsWXIISOJxOmuL5vHRlh0N13TQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:71:67:10:8d:d5:2b:af:9d:0d:9a:62:fd:01:b1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Mar 25 10:01:44 2026 GMT
Not After : Mar 26 10:01:44 2026 GMT
Subject: CN=d6829a1b9d03fa69501737c0016f235e939ad8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:95:63:56:ca:b5:4b:ba:de:7e:fe:57:11:
7a:3b:a5:17:99:42:0b:f3:01:84:a1:10:9f:d3:ea:
54:75:4c:32:b4:9e:cd:33:f2:91:a9:d3:f9:b4:68:
f9:74:ff:1a:1a:ad:ba:a4:26:db:ba:09:07:79:04:
2f:7a:8f:cc:c2:93:1f:c9:65:62:aa:76:28:d7:e6:
d8:47:c7:06:37:73:2b:98:a5:be:9c:38:c2:4a:f4:
7e:1d:04:28:ac:06:d6:1a:85:c0:cb:ac:ae:05:e1:
4c:ae:c0:82:86:6c:98:3f:92:dd:6d:7e:26:d4:53:
be:31:d7:e5:06:6e:d4:ab:48:38:fb:79:c9:ca:a0:
c5:15:24:48:0a:ff:55:7e:70:90:9a:2c:0f:8e:1e:
45:a9:7d:3e:af:d6:ca:b8:d1:56:74:61:1b:43:de:
97:40:8c:70:f0:e3:60:26:40:c0:bc:6a:79:9d:6f:
12:f5:00:53:e5:de:0e:0b:c4:44:ac:e5:89:05:06:
49:a4:e2:8f:ce:b4:ec:bd:2e:6d:a5:f2:3c:bf:45:
4d:a2:6a:62:92:5b:c3:a9:c8:72:86:75:35:9c:e4:
d2:23:d8:38:1a:bc:79:39:df:7d:57:77:e9:5d:b0:
c1:82:c7:d1:f4:72:7d:25:10:0c:6e:9e:15:a3:be:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:82:9A:1B:9D:03:FA:69:50:17:37:C0:01:6F:23:5E:93:9A:D8:F0
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3b:57:a7:aa:ce:ba:f6:10:26:83:40:7d:99:fc:4a:58:55:
30:37:6f:cb:d6:f3:3a:c4:0a:3b:fb:94:3d:c4:63:3c:48:c9:
21:48:14:90:ee:3c:1b:55:94:b7:d7:e1:5b:d7:8b:31:55:1f:
61:5f:13:2a:38:11:99:84:52:6d:14:d2:2c:52:25:3f:02:56:
54:f8:dd:b1:a4:04:bb:ac:a2:b3:65:08:10:c9:de:15:9c:58:
6b:30:85:28:59:3b:80:78:9d:55:54:ea:df:12:57:03:2c:2a:
32:9f:47:63:28:3a:fe:23:dd:e4:99:08:50:41:a6:23:2b:b7:
9d:9f:f2:ce:db:ce:eb:5c:32:b7:ee:b2:7c:b8:e9:17:bb:c5:
a1:57:33:c3:9e:76:48:72:4b:fc:41:13:cf:f6:3b:8c:0c:bf:
53:93:62:93:ab:0d:e0:e5:80:58:0a:53:3f:b7:4e:40:d2:8b:
c5:0f:cf:6f:01:a5:37:15:3b:38:93:14:93:88:af:85:0b:72:
34:ea:6e:ac:cc:d4:e6:94:28:dd:72:ba:d2:51:bf:20:f8:00:
a3:1f:cc:c3:2d:02:80:df:c3:6c:cb:13:a6:2a:9f:1d:00:4a:
a4:6d:4e:4b:54:79:ec:03:72:69:34:b5:d7:63:6b:e4:a7:6d:
a8:ab:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:57 2026 by rpki-client