Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
File: Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft (raw, json)
Hash identifier: AffTNxmsxLhfq20+VtFMJv1orVGfTpUyu82PePg0YD0=
Subject key identifier: D8:EF:F0:DD:1E:25:FD:E4:25:D9:8F:06:BC:16:A8:B4:CC:36:EC:11
Authority key identifier: 62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
Certificate issuer: /CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Certificate serial: 01A1303396217D4180C11F1BBBC72A72BE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
Manifest number: 1A9B
Signing time: Mon 12 Oct 2026 13:00:49 +0000
Manifest this update: Mon 12 Oct 2026 13:00:49 +0000
Manifest next update: Tue 13 Oct 2026 13:00:49 +0000
Files and hashes: 1: 2gO3AZ0wf5H55So82hrCWwWbVuI.roa (hash: U66k5TcWQ7PD9bBki0lUlKhjoZI0ZIMVHk6yyW5wKeQ=)
2: Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl (hash: KBuR6CYJI3WQIDtNcjBdWzTqT8awpFFQ9j76o2Ar4BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:33:96:21:7d:41:80:c1:1f:1b:bb:c7:2a:72:be:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Validity
Not Before: Oct 12 13:00:49 2026 GMT
Not After : Oct 13 13:00:49 2026 GMT
Subject: CN=d8eff0dd1e25fde425d98f06bc16a8b4cc36ec11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:dc:65:c2:95:9e:9f:01:b4:2a:77:ff:06:
cd:ad:4a:2e:1e:21:c3:63:15:83:9a:e5:1e:ab:08:
e3:28:82:ef:f3:8e:4f:63:f4:de:96:ef:61:c9:70:
30:3f:e1:7a:db:61:6f:fb:8f:e5:3e:6c:9b:ba:0f:
f3:ab:f3:1f:e4:38:25:dd:f9:8d:58:2a:67:2f:34:
b6:8f:a1:e0:92:ce:be:b4:40:f5:ce:c7:a7:55:c7:
60:db:44:f1:80:cf:62:3a:00:3b:41:ce:27:92:7d:
10:33:c9:bc:8a:5b:c4:98:a1:1c:35:4c:8f:fe:75:
bc:b6:63:d7:9c:aa:d3:be:53:bf:a0:4a:3c:4b:c4:
74:75:29:94:d8:48:a3:16:4e:80:03:6b:c2:88:d3:
e3:ac:58:f5:f6:4c:99:b7:70:78:f1:b0:ea:d3:d2:
90:68:e8:4b:e9:c2:ed:e5:ad:1a:b6:5e:3b:c8:7d:
ee:0f:1f:9b:b8:69:bc:77:6d:43:44:4b:4f:4d:26:
cb:9a:48:8d:26:0d:a5:9b:97:41:e9:8a:40:3e:05:
50:d8:e4:ed:aa:cb:9c:3b:48:0e:de:f3:46:0a:ed:
85:eb:57:08:aa:58:69:87:cc:73:f0:2d:20:04:27:
89:48:bd:ed:42:33:69:14:8d:b7:5c:00:64:66:ce:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EF:F0:DD:1E:25:FD:E4:25:D9:8F:06:BC:16:A8:B4:CC:36:EC:11
X509v3 Authority Key Identifier:
keyid:62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:33:dd:72:7a:93:9f:cc:26:59:b9:a8:10:25:2d:8b:eb:7b:
e5:bd:a6:97:de:cc:29:a5:94:53:ee:0b:5e:4a:ca:9b:91:48:
1e:8b:48:1a:d6:d2:04:61:d0:58:bd:40:05:18:67:58:2f:f2:
c1:ab:c0:ed:96:72:ae:4c:30:1a:5b:cd:c1:ec:d2:87:df:c9:
4d:12:61:ff:49:5e:a4:2e:98:53:e8:01:8f:07:c4:a3:ac:75:
b8:dc:04:66:ad:3d:2b:fd:a6:dc:93:3f:4f:72:c6:5d:18:a9:
4c:27:20:01:4f:ca:b6:9d:c4:69:7d:06:7b:a8:37:ac:75:e0:
00:98:2a:ad:a9:8f:f6:70:ef:a6:3a:48:5c:c9:d9:72:24:34:
6d:3c:51:ce:84:3f:8e:f7:2c:14:d7:ba:30:58:dd:2c:63:3f:
fb:8f:a8:75:7a:bf:2e:02:df:75:71:6d:25:b7:98:e0:9e:73:
83:96:cd:03:fd:59:bf:36:87:6f:67:07:22:4e:78:d5:48:a8:
65:f7:07:f9:3d:4f:fb:3f:46:4a:c3:ff:2d:5d:de:82:2d:6a:
53:82:64:35:85:a4:37:73:28:af:68:0a:f5:95:ac:56:88:ec:
e7:ab:8e:66:50:bc:2f:74:97:3a:59:04:e7:36:28:bb:07:ca:
b0:af:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:44:08 2026 by rpki-client