
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: eFhSk94fgSLVYMNZtoS1cbtyibu1cgOhLxcLtFxL/ys=
Subject key identifier: AE:4F:5A:33:6B:A9:9D:59:A1:B0:9D:0C:2D:09:A7:79:C7:C8:79:3D
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 019CAA8F9CDB8F24A5CBFE00EFE1808D0773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 173C
Signing time: Sun 01 Mar 2026 18:01:04 +0000
Manifest this update: Sun 01 Mar 2026 18:01:04 +0000
Manifest next update: Mon 02 Mar 2026 18:01:04 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: CA3McmAYU6D3jd2EvviPXlmUhOocoCcH9uALEpsQ7dY=)
2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9c:db:8f:24:a5:cb:fe:00:ef:e1:80:8d:07:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Mar 1 18:01:04 2026 GMT
Not After : Mar 2 18:01:04 2026 GMT
Subject: CN=ae4f5a336ba99d59a1b09d0c2d09a779c7c8793d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:04:5d:06:2a:bc:4d:cf:f3:70:4e:62:e3:
e1:21:61:05:20:56:f8:dc:2b:98:fe:cc:7d:b5:c9:
99:24:f8:ae:55:7e:7c:ad:cf:d0:41:60:af:fd:af:
8b:e0:40:0c:e1:6d:c1:b7:5c:d0:b0:86:e0:46:c1:
1d:4e:c4:5e:0e:8c:b1:f0:2c:db:44:80:c5:1b:2c:
c4:c4:59:59:70:be:44:07:89:7b:4c:a6:85:18:35:
4d:36:a2:35:c9:86:27:2f:51:d1:79:72:aa:74:fd:
e6:48:d4:6b:18:01:6e:0f:7d:22:ac:8a:ef:0f:27:
eb:b1:28:fb:d7:e7:25:2e:f4:34:75:68:f3:86:35:
5a:98:77:d4:2f:dd:82:07:0a:e7:48:f3:32:e3:df:
c3:2b:46:96:a2:19:75:4a:c7:9d:f4:82:75:be:4d:
2c:ac:3b:30:d7:9b:63:1f:a6:14:bd:16:80:88:e8:
eb:89:3d:9e:c9:36:4c:cc:16:2c:b1:6c:a7:4c:41:
83:58:6f:f3:ba:e5:c3:7f:6a:69:d2:30:d9:14:c1:
0f:ff:29:df:19:ca:8a:29:8f:50:c8:86:97:eb:d0:
53:c1:dd:56:12:d6:44:98:51:46:7c:e7:f9:9f:5d:
0f:b7:6b:e0:b8:3f:54:6f:2f:c5:2b:c6:11:68:ed:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4F:5A:33:6B:A9:9D:59:A1:B0:9D:0C:2D:09:A7:79:C7:C8:79:3D
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:18:ab:d7:45:e9:97:bd:05:1c:af:28:0e:91:d1:85:18:58:
20:f0:8b:8c:89:91:4d:61:fe:2c:d2:67:53:f5:a9:56:96:47:
7a:68:a3:2d:37:3f:32:c9:d3:b5:ad:b4:96:87:22:34:bd:bd:
8a:57:a3:9f:44:db:d7:1e:de:90:21:0e:eb:9b:79:29:e4:0b:
0a:26:1c:0f:8a:a7:b1:37:e4:fa:7f:ce:7a:34:0c:28:3c:bf:
8b:bd:d3:b7:c8:bc:44:81:ba:c0:89:ec:a9:11:61:d6:e4:f3:
58:73:33:cd:15:4a:fa:b1:87:f2:f6:c6:29:5a:68:86:f4:19:
e0:30:97:c2:80:c4:dc:2f:31:05:dd:5c:e8:b8:e4:f8:b4:c9:
09:e2:64:c6:56:51:9d:3c:34:13:53:28:46:73:40:e9:aa:b4:
4e:51:0b:18:b0:c6:fd:11:73:7d:6b:44:75:51:ce:c6:06:ae:
ec:29:91:4b:c4:80:c2:d4:63:34:62:ca:ea:b5:20:95:d8:f2:
ad:3d:3b:52:ca:9c:11:72:ba:ee:2f:a3:66:93:d2:34:f2:98:
ae:69:25:64:68:ce:3f:b7:b7:64:39:4a:64:a4:40:65:ee:90:
8f:fa:d6:ee:eb:3a:a8:1f:fe:da:e8:9d:c3:1c:84:6b:0e:70:
3a:0f:a5:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj5zbjySly/4A7+GAjQdzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZGZlNTM4ODRiOTVhMDlmNjZhNDE2ZTE0ZjU2YzZiMGY3
ODlhZmMwHhcNMjYwMzAxMTgwMTA0WhcNMjYwMzAyMTgwMTA0WjAzMTEwLwYDVQQD
EyhhZTRmNWEzMzZiYTk5ZDU5YTFiMDlkMGMyZDA5YTc3OWM3Yzg3OTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdAEXQYqvE3P83BOYuPhIWEFIFb4
3CuY/sx9tcmZJPiuVX58rc/QQWCv/a+L4EAM4W3Bt1zQsIbgRsEdTsReDoyx8Czb
RIDFGyzExFlZcL5EB4l7TKaFGDVNNqI1yYYnL1HReXKqdP3mSNRrGAFuD30irIrv
DyfrsSj71+clLvQ0dWjzhjVamHfUL92CBwrnSPMy49/DK0aWohl1Ssed9IJ1vk0s
rDsw15tjH6YUvRaAiOjriT2eyTZMzBYssWynTEGDWG/zuuXDf2pp0jDZFMEP/ynf
GcqKKY9QyIaX69BTwd1WEtZEmFFGfOf5n10Pt2vguD9Uby/FK8YRaO3VkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5PWjNrqZ1ZobCdDC0Jp3nHyHk9MB8GA1UdIwQY
MBaAFGLf5TiEuVoJ9mpBbhT1bGsPeJr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmIt
MjkzNmFhMjI3NzY1LzEvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmItMjkzNmFhMjI3NzY1
LzEvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBir10Xp
l70FHK8oDpHRhRhYIPCLjImRTWH+LNJnU/WpVpZHemijLTc/MsnTta20lociNL29
ilejn0Tb1x7ekCEO65t5KeQLCiYcD4qnsTfk+n/OejQMKDy/i73Tt8i8RIG6wIns
qRFh1uTzWHMzzRVK+rGH8vbGKVpohvQZ4DCXwoDE3C8xBd1c6Ljk+LTJCeJkxlZR
nTw0E1MoRnNA6aq0TlELGLDG/RFzfWtEdVHOxgau7CmRS8SAwtRjNGLK6rUgldjy
rT07UsqcEXK67i+jZpPSNPKYrmklZGjOP7e3ZDlKZKRAZe6Qj/rW7us6qB/+2uid
wxyEaw5wOg+lrQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:57 2026 by rpki-client