Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: x9zIS3jQ23vOS6iijeDWoGA2FO9N2SDxLRUUdH2uld0=
Subject key identifier: 39:28:3F:2D:69:5D:05:14:FE:44:6B:7A:D7:03:7E:2E:E1:35:1F:EE
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 01A0BFC3952C4C597F3FBB217C88733EA1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 195A
Signing time: Sun 20 Sep 2026 17:01:00 +0000
Manifest this update: Sun 20 Sep 2026 17:01:00 +0000
Manifest next update: Mon 21 Sep 2026 17:01:00 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: hPfYlznFN5DvUYx5eU3Hg0EIB8ZYU5r9qCkiFHAJfPg=)
2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
3: z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (hash: lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:95:2c:4c:59:7f:3f:bb:21:7c:88:73:3e:a1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Sep 20 17:01:00 2026 GMT
Not After : Sep 21 17:01:00 2026 GMT
Subject: CN=39283f2d695d0514fe446b7ad7037e2ee1351fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:b6:3f:1a:16:17:ce:d4:6f:ec:b7:1b:32:
e2:69:b7:aa:c4:a3:d0:47:bb:e9:d1:57:71:82:f5:
ef:1a:c3:04:17:7e:cf:61:ad:17:8f:b6:fa:22:70:
17:13:d6:ba:4c:49:80:33:28:80:1c:c0:a6:29:77:
16:53:f7:6e:31:87:32:ab:da:c4:73:9d:f2:4b:a6:
5f:6e:51:e2:43:0a:c8:9d:ad:6a:6f:c1:f0:4a:06:
72:73:11:78:0e:a4:6d:6f:c5:80:1a:ab:4c:97:92:
98:84:6e:8c:c8:b2:4c:b2:bf:2f:84:64:78:3a:2e:
e1:11:f1:55:a4:33:6b:50:07:48:a3:81:bd:4c:83:
92:45:77:12:d6:ff:bc:9e:e1:3e:d9:8a:52:a9:4a:
4a:19:fd:ea:09:e4:84:76:44:ac:72:c9:65:d3:9a:
a3:96:e3:e3:a5:b2:99:90:d6:23:27:95:2c:4f:76:
60:79:7f:c3:89:14:41:94:38:90:e6:d5:e0:8d:8d:
26:f4:bf:d0:56:13:2c:13:fc:0b:8f:89:7f:97:3c:
bd:07:4c:2c:bb:a2:a2:e4:f5:cf:cd:5f:bc:ef:4d:
30:0e:dc:1f:c0:b7:05:73:0c:62:5d:78:59:98:ee:
0d:cf:f2:de:ad:a3:e5:12:d9:7b:23:d9:e2:d3:d6:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:28:3F:2D:69:5D:05:14:FE:44:6B:7A:D7:03:7E:2E:E1:35:1F:EE
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:4a:f6:ac:f7:52:58:1b:db:73:40:40:dd:4e:93:b9:18:d0:
df:d9:1f:94:02:77:c2:c4:6d:4f:0c:9f:92:fb:8a:84:20:51:
6c:13:ed:f6:01:74:73:82:5a:91:ea:2c:23:b6:25:8b:fe:f0:
53:5c:1d:8e:4c:e0:50:53:e0:d5:e5:a3:33:a0:33:fe:28:b4:
94:b7:00:79:f0:96:87:18:6f:58:aa:fe:5c:36:87:8e:88:06:
55:48:43:28:0b:d4:c9:7a:7b:11:f5:13:fb:b9:20:17:68:46:
bf:ec:1d:68:e9:11:ee:15:92:98:f1:11:63:00:1e:57:ba:d8:
b9:e9:92:53:24:58:73:51:e1:52:ff:9e:35:fd:8d:52:79:8d:
2a:30:61:fe:ca:eb:5d:cd:64:1d:56:5f:a4:c8:e7:06:62:eb:
41:1f:7b:07:0c:b4:18:a1:26:dd:94:d3:f6:ea:15:18:ab:83:
a3:23:25:2b:2b:06:08:dc:ea:ca:5c:3a:58:d2:43:9f:4e:0e:
c0:cb:c6:88:67:ec:97:44:a2:bc:3b:85:3d:a6:36:27:52:61:
24:27:a9:ac:79:ca:bf:e1:9e:50:85:b6:de:88:d2:97:6e:bc:
20:e4:27:1f:ef:83:27:cc:83:ca:2d:eb:9d:f3:9f:ea:19:61:
c6:34:67:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:25:41 2026 by rpki-client