Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: Tw9fZIFNPx5it3IjE8rT9ZkTIqY0geHS33tuKCUBJcY=
Subject key identifier: D0:DA:D6:1F:94:CF:FB:E0:30:9F:AC:BF:70:F8:31:77:3E:3D:61:9D
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 019FA7BD835DFDDF42EC9168FF1CC3B52CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 18C9
Signing time: Tue 28 Jul 2026 08:00:42 +0000
Manifest this update: Tue 28 Jul 2026 08:00:42 +0000
Manifest next update: Wed 29 Jul 2026 08:00:42 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: 6jT+5moWdY2nK0ovA6PSqBTSHjp7spyS8WojrTFMmT8=)
2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
3: z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (hash: lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:83:5d:fd:df:42:ec:91:68:ff:1c:c3:b5:2c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Jul 28 08:00:42 2026 GMT
Not After : Jul 29 08:00:42 2026 GMT
Subject: CN=d0dad61f94cffbe0309facbf70f831773e3d619d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:26:21:d8:b3:c7:da:48:b5:2e:f7:d7:fa:
17:c6:67:a0:9d:a6:b4:55:a5:e4:29:e2:f0:8d:3a:
9c:03:1a:d4:67:a1:11:ce:b7:1a:62:7f:cf:fd:86:
58:89:69:28:7f:4d:00:90:ed:9b:28:9d:86:19:c9:
f5:b8:15:a9:d1:41:77:87:08:42:0f:19:b4:21:25:
1b:cf:a8:a7:2f:e9:b9:10:43:83:ee:d3:92:71:37:
24:76:58:ca:63:09:8c:be:d0:8f:a3:b2:e5:37:68:
86:ab:e8:e5:2e:b6:78:bb:8c:41:c5:aa:88:de:3e:
42:3d:06:b6:17:ad:8d:e3:bc:63:6c:d6:1e:75:fc:
9a:08:c9:37:66:59:10:8c:91:a7:9a:24:90:d7:2d:
49:f7:e9:b1:66:af:7f:81:0c:21:d0:01:e4:00:fb:
c2:9f:8c:bd:c5:ba:83:98:6c:d2:e5:1c:33:14:96:
04:5d:62:35:7b:6c:b0:9c:50:14:c0:3f:94:b6:37:
d4:38:cb:26:fc:c7:cc:2c:8b:6c:b5:f5:17:2f:60:
29:c6:dd:04:85:c4:3c:ed:0f:72:d9:c4:ab:7f:00:
88:c2:5d:ce:b8:b7:73:a6:9d:a3:26:86:25:56:f2:
a9:05:1b:55:c9:9b:93:0a:a9:7f:7f:18:1c:b4:e2:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DA:D6:1F:94:CF:FB:E0:30:9F:AC:BF:70:F8:31:77:3E:3D:61:9D
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:73:11:88:e4:51:9d:06:2c:54:0c:90:ee:01:ae:5d:05:c5:
02:9a:31:ff:36:12:26:57:a1:cb:f9:43:3e:5a:7b:cb:ac:b5:
df:ad:70:69:86:1e:55:52:3f:5c:42:56:dc:eb:35:3b:d9:84:
85:10:99:1d:31:98:40:3a:20:59:1c:44:f6:06:d2:07:92:4c:
22:9c:65:99:80:f4:21:9e:1e:3f:45:42:26:4c:1c:14:1a:9a:
80:44:b2:f6:61:c4:56:6e:fd:e1:d6:3e:df:20:7b:62:f9:cf:
3c:16:72:94:43:af:19:9a:b3:67:7d:bc:0d:b9:60:c5:9b:f5:
f9:a8:e9:5d:0f:f4:c4:d3:4b:4c:5f:0e:b1:60:7e:1b:f7:40:
2a:da:1c:2a:2e:36:23:17:3c:34:cd:77:49:ed:de:76:fa:93:
b1:cb:80:5d:e9:df:cf:b4:8a:ac:25:b8:8c:29:17:f5:47:44:
ce:45:2d:0f:89:6a:b9:cd:e7:fd:87:f9:32:35:46:d8:82:17:
87:e8:35:11:c2:47:6a:1c:1d:70:a2:bf:4d:0c:c2:57:6e:15:
43:f2:08:d7:e5:59:53:f2:b3:cf:2a:04:37:c2:38:ce:21:1a:
93:71:07:04:47:cf:d2:89:7a:c4:28:09:00:65:03:8f:cd:6f:
3d:77:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:44:24 2026 by rpki-client