Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: 1DBU++6+BnT2teduUi7Mrbw5tNaNEWTujvagGUvVeag=
Subject key identifier: 1F:FE:29:06:C4:3B:C2:63:74:7E:58:7A:C3:2E:3D:05:CF:FE:AB:E4
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 01A1AB5F03B8A7007903163A879F29BF8037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 19D4
Signing time: Thu 05 Nov 2026 11:01:33 +0000
Manifest this update: Thu 05 Nov 2026 11:01:33 +0000
Manifest next update: Fri 06 Nov 2026 11:01:33 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: lzXXFLdQf/KqEgFiazzO5JpLMaLySm8RVi+rv/JUAys=)
2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
3: z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (hash: lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:5f:03:b8:a7:00:79:03:16:3a:87:9f:29:bf:80:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Nov 5 11:01:33 2026 GMT
Not After : Nov 6 11:01:33 2026 GMT
Subject: CN=1ffe2906c43bc263747e587ac32e3d05cffeabe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:1b:00:b7:b9:36:23:a5:66:63:b4:e6:75:
6d:77:20:0c:f9:b3:84:9f:1d:70:b6:f2:0e:8c:ef:
ea:ee:26:a8:07:5c:90:0d:82:4d:68:0a:f8:f0:a9:
b9:0f:24:f8:31:6e:83:ab:6f:cd:ab:a4:90:7f:73:
30:9b:f6:a6:21:2e:0d:c1:aa:10:99:16:03:c5:61:
35:28:ac:26:76:a9:02:57:4d:3d:54:3f:27:ba:6f:
2a:a4:6d:03:72:fe:0e:43:f4:db:d7:eb:6c:30:0c:
ee:67:1b:42:64:1c:03:5a:6f:fd:72:81:7f:0a:d5:
f5:d5:e8:f5:b3:d1:4f:be:cb:46:82:0c:16:e2:ae:
91:ef:99:9c:76:46:eb:38:db:79:54:65:31:31:ca:
1a:ea:ff:bf:3b:65:ec:54:b2:4f:69:67:46:96:51:
e7:c2:7a:02:2f:b7:25:24:fc:90:f2:51:44:aa:30:
c3:36:71:55:96:7f:a8:90:0d:c6:7f:c8:fe:51:95:
4d:1d:d3:b1:2c:9c:72:7f:ad:40:8a:97:ff:d4:ed:
a6:bb:44:19:32:4b:92:7d:47:ad:d9:37:ac:5f:dd:
7a:06:e0:47:77:ee:27:d1:03:1c:56:43:4a:a5:42:
fe:0e:f9:3a:46:49:40:17:bf:92:dd:f6:27:87:13:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FE:29:06:C4:3B:C2:63:74:7E:58:7A:C3:2E:3D:05:CF:FE:AB:E4
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:26:97:4d:8d:42:ff:0f:24:10:ab:00:85:64:af:7e:fa:e6:
28:4a:1e:c9:d7:f0:57:e8:5b:08:83:7f:da:65:97:da:cc:46:
df:c6:1e:30:07:bf:a7:e3:a3:d7:56:49:5b:2b:63:1e:52:74:
67:17:83:51:89:7b:10:e0:0a:21:17:00:2f:71:6d:74:82:c5:
b4:aa:f2:ae:70:cf:db:4a:2c:0a:3a:4b:51:d8:ab:10:85:19:
cd:98:39:f7:3a:d1:e6:ac:c7:37:60:36:cf:a7:ae:32:0c:15:
de:e4:54:1d:c5:e4:e7:e3:b5:ca:fc:ba:ab:8a:d5:5f:95:7d:
56:b6:b3:f3:6f:55:ec:6c:53:ee:ba:56:69:4d:be:29:36:98:
bf:1b:c7:3d:fb:bb:15:35:ec:17:c9:36:fb:c4:01:54:72:06:
49:d7:ba:f0:ba:67:83:b0:d9:a1:1b:e3:55:73:11:89:ab:bb:
cd:1b:72:fb:3e:b3:72:c4:cf:77:49:1a:91:7c:fd:69:f1:f9:
29:8c:e2:bc:e4:1d:f5:37:c0:68:7d:9a:48:05:2d:76:41:5f:
bb:48:23:c1:02:1a:32:33:4f:74:21:29:96:03:ad:55:7d:f2:
b8:e6:d3:a9:3b:8c:3d:86:da:ba:ab:ea:76:db:1b:b5:34:a7:
1b:36:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:57:05 2026 by rpki-client