Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier: pwQwsI5HlQJKn/fNSXjutC3RkSwWATsO3Cc3Dm9QJsA=
Subject key identifier: BA:99:BA:52:E4:F1:E1:CE:D6:D9:A0:58:D6:FE:1F:21:2A:E9:5A:EC
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial: 019CAD597C1913217488D6C70BFA199C775C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number: 1450
Signing time: Mon 02 Mar 2026 07:00:48 +0000
Manifest this update: Mon 02 Mar 2026 07:00:48 +0000
Manifest next update: Tue 03 Mar 2026 07:00:48 +0000
Files and hashes: 1: Ciy2fNIQW721fMsDhCb-VtXGBFw.roa (hash: XXBlf4gWy3TZJvapRvU6gO8Rcd2sHCwCt2ib04wAeps=)
2: Wldr-eNyg4Fo_ylLob-Hp7fcw88.roa (hash: wf6Ot6Ex/s7myo+jesSKrN1q9D7ZqoW374UIQ9ocJss=)
3: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: xSs6JDeEBpQJlsVuFqxuCMj7lH4joL4tqWHfc/26sMg=)
4: mYGac8UdKtYiejjIP-FXgbBItOo.roa (hash: zhSZcg/Pm9sDKqIKNxnWpvUr1PBvScF8Xahp3flsYl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:7c:19:13:21:74:88:d6:c7:0b:fa:19:9c:77:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
Validity
Not Before: Mar 2 07:00:48 2026 GMT
Not After : Mar 3 07:00:48 2026 GMT
Subject: CN=ba99ba52e4f1e1ced6d9a058d6fe1f212ae95aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:a8:2b:f4:51:19:a6:5b:c2:c8:ec:37:a9:
ff:23:02:61:db:2b:96:87:2b:7e:b7:c1:85:9f:dd:
72:b8:03:49:4b:e3:3a:9c:20:b5:bc:0f:a3:67:44:
71:4b:7b:73:26:24:f1:50:ae:8f:e8:fc:77:b6:0e:
29:87:56:1f:0e:0c:32:b3:24:47:f2:c0:7e:69:a0:
62:97:df:8e:1e:d3:2b:dd:e9:fa:af:f9:3f:f9:36:
14:87:49:00:5b:98:96:3c:6a:d1:6a:81:d5:45:48:
7f:cc:86:c0:a3:38:71:6c:34:23:f5:2a:ee:45:74:
50:6b:70:7b:ac:18:60:7d:48:b3:23:05:c1:85:cb:
e7:39:65:de:a9:f8:5a:89:9b:9a:78:32:ca:cd:5e:
fb:6a:fd:83:90:2a:00:16:76:e8:2a:df:52:3c:2e:
86:aa:af:23:dd:9e:c4:cb:ac:9e:9a:0f:ad:01:d3:
e0:ca:af:9a:52:ed:13:c3:f1:bf:b2:b8:18:9f:18:
db:eb:5f:3a:d4:2e:50:0c:aa:de:68:8b:b7:5f:1b:
d7:3a:61:9f:a4:fc:f6:42:02:ca:55:72:29:4e:8b:
83:9d:2c:e6:64:cd:f0:12:64:c3:aa:42:ea:ff:59:
ad:6e:19:88:78:78:62:28:4a:3b:84:c7:fe:38:8b:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:BA:52:E4:F1:E1:CE:D6:D9:A0:58:D6:FE:1F:21:2A:E9:5A:EC
X509v3 Authority Key Identifier:
keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1c:89:2d:15:c6:0a:13:08:73:4a:25:90:11:25:5d:b9:e1:
d9:f3:09:01:ec:ce:71:84:76:a6:8c:e5:19:a4:73:7c:26:29:
ec:2a:85:9d:b5:1e:8f:4a:9a:0b:eb:cb:b8:68:53:02:d7:af:
4d:fc:44:1e:99:5b:cb:65:e6:70:c9:f2:5d:2a:8d:a2:bf:f2:
a4:c6:1e:f8:ae:b0:41:ee:10:7f:78:58:a1:b8:77:86:3c:02:
74:75:73:94:06:ca:e5:53:8c:39:c8:72:df:83:fe:60:6e:29:
f0:bb:89:f9:70:33:72:0d:2f:9c:6d:66:c3:cb:c1:a6:3a:15:
52:be:d1:ab:91:27:23:ac:a2:ce:de:c7:50:4f:15:2f:9b:26:
74:b6:4d:b6:69:62:51:ab:c8:a2:88:04:5a:62:4c:3e:38:8f:
a2:90:05:34:f1:2c:e7:13:1d:6f:ad:9c:13:2e:90:63:44:75:
40:42:ce:d3:8c:50:de:51:76:4c:84:d6:c4:87:f9:83:c7:ed:
ae:2f:92:65:28:7e:7e:39:b9:ca:f8:51:d8:9c:61:53:a1:0a:
5f:71:b1:b6:80:5e:46:14:36:ab:79:1d:34:f4:48:b7:56:2e:
12:92:3b:74:d1:00:5e:59:78:ce:fa:a2:b4:d9:ba:3e:4e:ba:
f9:95:17:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:22 2026 by rpki-client