
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: 8rDNiH9dIdMyv8JifbnqBA6d4QlcW2qsARos/tNd1hk=
Subject key identifier: 05:45:A7:22:36:3B:5B:B7:A5:92:B4:34:D6:DC:8E:65:87:00:CB:2C
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 019E1D59736979E8B58F5042C023361C533F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 02BB
Signing time: Tue 12 May 2026 18:01:01 +0000
Manifest this update: Tue 12 May 2026 18:01:01 +0000
Manifest next update: Wed 13 May 2026 18:01:01 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: gxaoQDAo02hTeEtkIHivArQ2rk/J023efdwbIZmoYtM=)
2: i757eDGPyWXy1WJ59_NsKxP9nBk.roa (hash: aclUO+YpHA3b3E++8LC8TZOgc8p99LqEe7lxYmVbjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:73:69:79:e8:b5:8f:50:42:c0:23:36:1c:53:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: May 12 18:01:01 2026 GMT
Not After : May 13 18:01:01 2026 GMT
Subject: CN=0545a722363b5bb7a592b434d6dc8e658700cb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:c2:98:44:ef:24:80:48:64:d2:be:9e:a5:
a8:b7:80:04:60:99:a9:10:b3:0b:6d:c0:24:ef:38:
3d:f1:5c:3f:bb:00:9f:08:13:d8:05:82:dc:0d:b0:
5d:88:9e:80:62:3b:f1:43:a1:e1:0a:3f:90:92:61:
65:88:0e:11:a1:55:d1:11:79:61:30:45:84:25:68:
c9:52:c8:ce:12:dc:0a:ed:43:07:d5:0a:7e:2c:fd:
47:c3:63:0a:7a:ce:25:37:07:07:5c:dc:23:5e:4f:
3e:33:6a:e6:e9:9c:41:9e:e0:16:6f:ac:a2:7c:c7:
9d:73:a9:b7:87:73:fe:59:42:89:d1:4a:cc:50:f2:
34:3f:fc:a1:68:0c:e5:fc:a4:5d:96:6d:69:3a:e0:
54:39:0e:f7:fc:c8:15:72:c7:a7:81:9a:52:65:bf:
b1:d8:54:fd:c8:a8:60:76:3e:9d:5b:c1:f5:48:4c:
a2:16:2e:e1:52:6e:4f:42:91:66:d0:a1:50:49:f1:
a4:07:d0:f7:d8:00:dc:45:d0:ed:03:4f:ad:2f:40:
60:24:fd:c1:cb:08:ca:26:84:83:39:f9:03:90:46:
90:f7:30:0d:ee:6d:34:d3:85:d8:a3:78:37:de:ab:
2e:36:2e:84:82:3e:d6:1a:77:61:06:d4:a1:a6:d5:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:45:A7:22:36:3B:5B:B7:A5:92:B4:34:D6:DC:8E:65:87:00:CB:2C
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:03:8f:d9:03:04:66:09:1f:54:99:39:83:1c:41:36:be:65:
90:d1:eb:1b:e0:e4:6c:1e:db:9f:63:42:18:96:47:73:4a:26:
c4:d4:ee:87:b9:50:73:fe:ee:55:67:11:b0:b2:13:8b:f9:c0:
b2:78:67:10:84:9a:ec:76:5c:35:c0:66:21:6c:3a:61:15:bf:
e5:d1:b5:1c:3a:19:81:cc:24:80:ef:02:d2:bf:95:47:9f:8e:
dc:b3:7a:fb:62:fd:93:df:d1:58:ad:ab:88:fd:30:11:18:83:
47:f0:2b:00:7e:86:51:91:57:35:b9:aa:1a:0a:be:1f:e2:31:
68:d1:ae:1f:ea:1a:6d:e0:28:08:d1:c3:85:59:80:57:6f:7a:
d8:fb:05:7a:7a:cd:05:ee:5d:c3:57:30:d8:95:31:9b:7e:9d:
f9:c4:eb:bc:ea:50:2e:ea:9e:61:0c:52:b8:13:68:38:97:69:
76:b4:16:44:c6:05:4a:03:dd:51:c2:3d:1d:e2:24:21:d8:6d:
97:3d:e6:18:f9:d0:49:b3:b9:bf:25:cb:d0:95:c4:f3:c3:34:
2d:68:b5:5c:4d:d1:51:46:e6:37:57:aa:21:96:24:d1:08:ef:
14:34:97:17:75:aa:e3:ab:eb:fc:f8:f5:1a:20:da:9d:61:db:
f1:8a:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:39 2026 by rpki-client