Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
File: Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft (raw, json)
Hash identifier: +OGA8Dlel+M/IThOKdGZhluQJnlWKCyeq4+1VN8qLhY=
Subject key identifier: 24:A7:4C:C2:A6:B1:69:25:B6:A4:84:41:DC:08:BE:82:29:A7:01:BB
Authority key identifier: 62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
Certificate issuer: /CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Certificate serial: 019FAC07D64546E2F387FB747E1A5A48D16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 04:00:22 +0000
Manifest this update: Wed 29 Jul 2026 04:00:22 +0000
Manifest next update: Thu 30 Jul 2026 04:00:22 +0000
Files and hashes: 1: 2gO3AZ0wf5H55So82hrCWwWbVuI.roa (hash: U66k5TcWQ7PD9bBki0lUlKhjoZI0ZIMVHk6yyW5wKeQ=)
2: Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl (hash: /bqbcD32+2bp7D8r4jiVh/WpOpnuCy1uTLDgUJhKRB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:d6:45:46:e2:f3:87:fb:74:7e:1a:5a:48:d1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Validity
Not Before: Jul 29 04:00:22 2026 GMT
Not After : Jul 30 04:00:22 2026 GMT
Subject: CN=24a74cc2a6b16925b6a48441dc08be8229a701bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:72:c1:d6:98:ef:36:0b:1e:f8:c6:31:0d:
92:14:57:d8:58:f4:dc:f5:7d:5f:07:e1:e6:19:9f:
80:92:f7:35:3e:cd:28:02:2e:5b:67:f3:4c:ba:07:
46:44:82:08:da:61:54:6a:e6:c1:32:89:df:c3:67:
2f:94:f3:ab:4c:f8:a5:fd:a4:e3:95:d5:06:21:17:
1b:cc:b3:1c:c6:ea:eb:49:87:16:78:06:2d:44:78:
fd:f0:3f:62:57:1c:6e:a4:c3:5a:6e:ac:85:54:be:
a4:9e:46:a8:fc:11:29:ba:65:5a:e5:e9:38:7b:ca:
d5:f6:ad:84:fa:07:08:6a:4c:ab:7a:8e:93:ed:e2:
17:bf:41:b0:a1:6e:6f:b6:a0:57:0e:f6:8c:c7:0f:
d6:6e:a5:64:15:f5:e9:67:ba:24:04:2d:60:da:b6:
a9:6d:26:27:fd:53:15:b2:56:cb:6c:45:d1:2d:f3:
af:c2:f1:54:2f:f6:74:b8:d6:8b:07:cf:34:07:12:
ae:6b:0c:2a:fa:ca:d6:76:3c:59:19:36:39:4f:fb:
6b:7a:ad:93:f7:1f:a4:d8:28:49:19:b5:75:a9:f9:
84:95:4e:8b:70:eb:5b:30:48:fa:cf:df:2a:1d:25:
eb:97:38:3e:60:61:8d:78:38:cc:0b:cd:77:f3:d6:
63:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A7:4C:C2:A6:B1:69:25:B6:A4:84:41:DC:08:BE:82:29:A7:01:BB
X509v3 Authority Key Identifier:
keyid:62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:72:60:66:8c:44:8e:27:4f:1e:91:90:ce:3f:6f:42:63:67:
db:1c:1e:57:aa:2c:e8:31:ab:c5:a0:3e:cd:fb:75:3a:42:be:
4d:29:6e:33:c1:6a:fe:4c:da:b1:0a:f5:ac:1b:fa:91:1c:d7:
f2:f9:37:fc:ac:f0:bb:77:f1:bd:5c:b8:c1:53:e9:3e:c9:a0:
eb:dd:d9:c7:ff:2f:bc:70:09:9a:00:b7:db:dd:80:6c:8f:a9:
2c:d1:53:f3:8b:e8:c5:79:c6:1e:8f:a7:2a:11:a7:25:c8:c0:
62:70:f4:30:e2:b7:57:98:83:7c:a6:87:07:b2:c6:f6:ff:e7:
3a:a7:f9:18:46:74:7a:28:f1:31:c5:a4:d5:a7:b9:9a:49:df:
b0:4f:35:6d:c6:fe:e6:39:72:f0:2d:f3:a2:5f:3d:38:e7:c2:
23:4d:a3:a3:bc:c7:4f:d8:64:a2:9d:cb:83:ed:89:3e:6d:f7:
18:fb:e4:42:9a:62:73:b0:f8:7b:e4:74:d7:48:a9:14:f8:f3:
2b:ae:d7:bf:93:44:2a:93:4f:91:6d:66:86:6c:e7:aa:a8:b2:
36:2e:cc:18:65:e2:83:d1:69:fa:16:df:47:9e:4f:71:45:50:
2a:ea:cf:b2:f1:8f:7a:e8:b0:99:ac:d7:c3:ba:d1:a2:9c:c0:
af:b8:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:14:06 2026 by rpki-client