
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
File: YictaPs4lesim2j41DNBJLlnxw4.mft (raw, json)
Hash identifier: /zVs9EsI0T1r00kbtXzCPX3w31nfYY0H8uU0ZWUX7FY=
Subject key identifier: 2A:C0:07:61:74:B2:6B:24:64:BC:2B:DB:75:B6:DE:E0:CE:E7:E6:71
Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Certificate issuer: /CN=62272d68fb3895eb229b68f8d4334124b967c70e
Certificate serial: 019D28846D40CF4FACA8ACAC8C06B97EE9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
Manifest number: 12F7
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: 33i2qqWu0X5QxMYwp4hgjABiqq4.roa (hash: 1hHMiIhJSj+gJrD8TbC5dlRZ8I3xR9/+D7WQxWbZlNU=)
2: YictaPs4lesim2j41DNBJLlnxw4.crl (hash: Tv2wLZpqAnVoxd/HxM0oXrVrvchoOg52uyoAtWp4Gfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6d:40:cf:4f:ac:a8:ac:ac:8c:06:b9:7e:e9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=2ac0076174b26b2464bc2bdb75b6dee0cee7e671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:88:83:a6:96:fd:80:38:57:54:e0:df:55:
73:01:9b:1a:68:f8:c7:48:2e:4c:51:d3:51:f2:fb:
77:bc:15:f4:87:24:96:57:c6:48:1b:ca:8e:60:50:
e4:6e:7b:58:11:6d:ac:14:46:eb:31:ee:25:d2:3b:
b4:fa:21:ec:5d:b8:24:f6:dd:6c:6b:49:bc:dc:c0:
4b:c8:c9:18:8a:0c:fd:b2:26:13:cb:ce:de:5e:0d:
c4:48:e3:20:d2:79:06:7c:a5:cc:5e:ad:08:e7:28:
96:4c:a9:2a:c0:2a:e2:7f:29:aa:da:7e:7b:68:44:
1f:02:c0:54:d4:03:6a:5a:4b:71:97:17:58:18:c3:
4c:de:4c:6a:0f:b5:d4:71:6b:77:27:cb:b3:8b:76:
cf:bb:9e:18:12:31:d7:1e:c1:89:35:53:cf:92:2c:
eb:99:e2:c4:ce:92:bd:21:77:ad:79:6e:d1:a3:17:
22:cb:96:94:c3:fc:6a:a8:83:e5:5e:00:87:d6:00:
03:71:1f:65:d1:71:97:29:00:c9:2d:be:70:2a:ec:
e8:39:14:10:41:59:ec:ef:9e:46:87:89:5a:ca:f9:
99:bd:0e:22:66:30:09:fb:51:24:18:8a:2e:66:71:
39:a1:30:79:7d:1d:a5:1e:dd:8c:86:49:71:b5:a6:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C0:07:61:74:B2:6B:24:64:BC:2B:DB:75:B6:DE:E0:CE:E7:E6:71
X509v3 Authority Key Identifier:
keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ee:2d:11:ab:77:57:71:b8:d1:02:0f:b0:a7:e1:25:8d:0d:
05:12:93:ec:50:fe:1a:90:ac:64:bf:44:ad:09:ed:66:ae:be:
22:4e:4c:ff:50:db:26:11:c2:a5:88:c0:3a:9e:41:ab:f3:4c:
73:2f:be:25:e9:94:d4:11:a3:7d:a1:f8:bd:4c:39:e4:e0:d6:
7e:da:29:17:40:45:36:90:09:b9:89:3c:2e:8e:01:6b:00:9d:
84:22:5d:24:7d:23:b3:0a:33:dc:1a:30:12:24:3a:ac:5c:fa:
31:6e:58:1d:02:fb:aa:78:1d:b8:6e:26:c4:91:23:73:dc:7c:
b3:a8:76:ce:69:73:30:5d:9a:b2:c4:c6:da:8d:0d:40:dc:d1:
10:de:7e:f7:79:e9:4a:13:ae:40:8f:8d:da:49:cd:a3:e5:6c:
60:3a:ae:ac:ca:ac:cf:ba:df:2b:cb:e2:1e:f2:d0:62:44:5a:
10:46:2f:4e:18:9a:f5:00:68:69:e6:27:ab:ef:4e:eb:22:c2:
16:26:2d:4a:64:97:d8:4e:1f:2e:6e:8b:ad:b0:a8:da:e3:b5:
78:05:cb:14:34:07:a3:1f:bc:51:d7:08:9d:8d:e5:89:aa:22:
35:92:16:75:d7:db:f2:8c:7d:2f:fd:63:b6:6d:b8:fa:f9:ea:
65:74:98:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohG1Az0+sqKysjAa5fun2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjcyZDY4ZmIzODk1ZWIyMjliNjhmOGQ0MzM0MTI0Yjk2
N2M3MGUwHhcNMjYwMzI2MDUwMTAwWhcNMjYwMzI3MDUwMTAwWjAzMTEwLwYDVQQD
EygyYWMwMDc2MTc0YjI2YjI0NjRiYzJiZGI3NWI2ZGVlMGNlZTdlNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n+Ig6aW/YA4V1Tg31VzAZsaaPjH
SC5MUdNR8vt3vBX0hySWV8ZIG8qOYFDkbntYEW2sFEbrMe4l0ju0+iHsXbgk9t1s
a0m83MBLyMkYigz9siYTy87eXg3ESOMg0nkGfKXMXq0I5yiWTKkqwCrifymq2n57
aEQfAsBU1ANqWktxlxdYGMNM3kxqD7XUcWt3J8uzi3bPu54YEjHXHsGJNVPPkizr
meLEzpK9IXeteW7Roxciy5aUw/xqqIPlXgCH1gADcR9l0XGXKQDJLb5wKuzoORQQ
QVns755Gh4layvmZvQ4iZjAJ+1EkGIouZnE5oTB5fR2lHt2MhklxtaYO+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrAB2F0smskZLwr23W23uDO5+ZxMB8GA1UdIwQY
MBaAFGInLWj7OJXrIpto+NQzQSS5Z8cOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTct
OTdmZDc2YjgwODI3LzEvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTctOTdmZDc2YjgwODI3
LzEvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+4tEat3
V3G40QIPsKfhJY0NBRKT7FD+GpCsZL9ErQntZq6+Ik5M/1DbJhHCpYjAOp5Bq/NM
cy++JemU1BGjfaH4vUw55ODWftopF0BFNpAJuYk8Lo4BawCdhCJdJH0jswoz3Bow
EiQ6rFz6MW5YHQL7qngduG4mxJEjc9x8s6h2zmlzMF2assTG2o0NQNzREN5+93np
ShOuQI+N2knNo+VsYDqurMqsz7rfK8viHvLQYkRaEEYvThia9QBoaeYnq+9O6yLC
FiYtSmSX2E4fLm6LrbCo2uO1eAXLFDQHox+8UdcInY3liaoiNZIWddfb8ox9L/1j
tm24+vnqZXSYGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:50 2026 by rpki-client