Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: 1bHo64e8UzH5ODTeCnqk/QtLEyF3L1TO/HlrGy69q3g=
Subject key identifier: EC:66:B9:A6:1A:A4:B5:78:92:E6:38:D2:FD:2F:5A:5F:F7:D5:B7:7C
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 01A1C28B0401077F5B6E9FDDC8582023B81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 19E0
Signing time: Mon 09 Nov 2026 23:00:52 +0000
Manifest this update: Mon 09 Nov 2026 23:00:52 +0000
Manifest next update: Tue 10 Nov 2026 23:00:52 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: 3dkmiBRneNW/2YxtFuIiAG9o0Fb3ooXmlTyRcPe2nBs=)
2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
3: z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (hash: lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:8b:04:01:07:7f:5b:6e:9f:dd:c8:58:20:23:b8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Nov 9 23:00:52 2026 GMT
Not After : Nov 10 23:00:52 2026 GMT
Subject: CN=ec66b9a61aa4b57892e638d2fd2f5a5ff7d5b77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:fc:fc:3a:0e:54:4e:d4:4b:37:01:cb:54:
ad:87:79:5b:cc:81:b4:63:fe:40:68:64:d6:09:c8:
63:8a:67:e6:2c:34:19:31:11:7b:20:75:7c:a6:00:
2e:a5:65:fa:3c:8c:9b:63:5f:a8:30:97:b1:fd:c7:
0e:85:b4:ae:44:ba:5f:6a:ea:71:9a:58:5d:47:7c:
06:40:5e:24:f0:c3:85:95:2c:20:c9:a4:55:26:8d:
d4:11:54:62:90:2e:f2:01:84:71:3b:db:7c:d5:9b:
d2:66:ad:b6:97:fe:09:04:da:d7:8a:89:c8:b0:95:
18:64:48:a5:44:40:ed:fb:12:93:2a:0e:c4:22:08:
7f:ea:82:22:0c:c8:51:01:83:d7:b7:29:fc:52:83:
e9:8c:de:25:cc:13:a7:25:af:f1:97:54:cf:2e:7d:
10:9f:81:db:11:e9:4c:b6:d4:f1:6d:a1:66:40:ef:
15:16:2b:63:88:f5:7c:1c:0b:13:79:f1:3b:e6:66:
ec:6d:c5:e2:b8:18:ac:3a:ca:5b:2c:d8:14:ac:04:
13:97:09:2a:a0:66:fb:b6:45:93:8e:1d:76:8c:ff:
3c:ae:8f:fb:a3:d3:70:4c:4a:ca:e0:28:52:e8:b7:
6d:f4:81:71:7b:56:ee:ed:a7:2b:bb:41:2d:30:2f:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:66:B9:A6:1A:A4:B5:78:92:E6:38:D2:FD:2F:5A:5F:F7:D5:B7:7C
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b5:27:ca:2e:2f:b8:80:b3:8d:e5:71:55:5b:6b:37:9e:58:
94:19:72:2d:80:dc:36:49:1f:d3:1f:fb:c5:fb:eb:83:c8:6d:
e3:c8:38:86:b7:0f:17:e1:d7:f3:f2:01:a7:78:d5:0f:81:6f:
25:e6:46:20:1d:37:e5:a3:a0:5d:30:7f:63:c5:5c:76:d8:cf:
44:db:ba:6b:cb:7f:ff:ff:4f:32:6d:a4:8f:d0:6d:4e:03:bf:
32:07:7d:b9:a8:4c:f4:61:c2:28:e9:01:85:ce:e5:94:9e:4b:
23:5e:26:55:d7:56:12:49:27:1c:c9:f9:da:15:01:1f:12:45:
01:43:5a:7c:ce:e1:68:67:92:ee:34:f1:d9:27:26:37:91:9d:
ce:36:c0:bd:36:c5:b0:e0:2d:4c:bc:72:5b:60:ff:b7:5e:61:
73:02:40:b3:0c:5f:bd:4c:8b:a4:f5:29:8e:59:df:ef:0b:8d:
3b:14:e7:ef:6e:ef:f1:19:61:e4:56:13:e4:2b:5d:e7:ae:89:
6c:42:18:2f:50:87:a0:2c:58:ed:6f:5f:69:c0:62:5f:7e:84:
c3:8f:c2:97:87:8a:bc:12:d3:f4:48:94:17:7f:05:fe:35:c5:
55:b4:3a:dc:da:34:b6:51:84:32:0c:ce:57:59:a4:25:5f:51:
5a:8c:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 04:33:07 2026 by rpki-client