Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier: 32PEc3Nw1/akShe/2e8tNNo8RyZru0ggdBEIod9Fl4o=
Subject key identifier: 85:A6:15:72:45:D7:38:9D:10:61:32:D2:0C:79:FF:19:7C:66:C7:B6
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 019CAAC70ADD2CB7581390C01D7C89DC5151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number: 13F4
Signing time: Sun 01 Mar 2026 19:01:36 +0000
Manifest this update: Sun 01 Mar 2026 19:01:36 +0000
Manifest next update: Mon 02 Mar 2026 19:01:36 +0000
Files and hashes: 1: 0FXE-aMYDoHsJWIgYZ6p4cTAvIc.asa (hash: m9vFjKk2IkfNxMT1oBT/EqvBwRhxlH++eft+dvmvzfI=)
2: B1xlxtkgltJzqbUtpT-T2k7OjtI.roa (hash: qZlWNzGPdE+IKxAZlX53rTWx5ECKk+OZ5/kaPPhGDH4=)
3: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: WdJXDsOKIyWapQYplB/XXhZk8D1ySJjpX3qqkKAJzHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:0a:dd:2c:b7:58:13:90:c0:1d:7c:89:dc:51:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Mar 1 19:01:36 2026 GMT
Not After : Mar 2 19:01:36 2026 GMT
Subject: CN=85a6157245d7389d106132d20c79ff197c66c7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f8:e8:66:29:2d:9d:ed:fc:94:0e:36:b8:a6:
36:f0:7c:9a:b8:bf:53:bd:8e:0c:d6:2c:08:3f:5f:
3f:59:bb:2c:3d:54:f0:98:89:a3:04:84:52:19:d3:
9e:20:ea:ae:e2:e0:be:b9:2a:ec:e9:c5:15:1c:1a:
ce:5c:5d:b8:0b:d4:1c:48:27:24:db:0a:aa:d1:86:
51:03:3b:ad:8d:a5:71:23:b5:0f:a1:9a:84:12:d9:
62:9e:7f:78:8b:6e:bd:4c:94:00:05:c4:7b:84:93:
89:90:c5:4a:b8:88:80:e5:9b:84:18:b3:4f:ff:67:
60:6a:24:f3:04:f4:d4:20:99:2c:60:37:5d:77:25:
04:18:2b:f3:fc:e0:eb:98:31:c3:71:a2:45:34:4e:
3a:67:b7:ef:a8:0c:9d:ac:0e:05:c5:8a:ed:9d:88:
bb:ac:e2:41:2c:d4:de:80:7e:29:b7:4d:9e:14:82:
e9:bc:31:1d:be:40:1f:d6:3e:a9:b6:d1:93:a3:94:
ca:8a:a1:2d:63:a8:37:b9:bd:cf:e9:91:d9:fa:d7:
be:15:3f:e6:77:7a:d7:a9:5c:3c:ca:83:3e:69:e5:
b7:41:ec:d7:84:37:e6:42:30:a1:98:4c:5c:18:38:
bc:55:00:02:35:78:9b:cb:1e:70:c5:b3:0d:15:97:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A6:15:72:45:D7:38:9D:10:61:32:D2:0C:79:FF:19:7C:66:C7:B6
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:40:a8:67:88:d8:f5:a2:2d:20:12:b4:34:3d:33:52:dd:60:
65:21:97:12:a8:91:0a:77:5e:0d:7c:8a:08:1f:bd:50:6b:f9:
87:3f:a5:4a:55:02:b9:dd:17:4b:0e:53:94:42:4a:80:59:5b:
13:58:c9:28:1b:f9:94:df:c9:60:7e:6f:0d:33:1a:12:5e:25:
b6:9c:20:f2:fe:d2:91:d4:4c:c7:25:44:c1:40:a6:4d:55:92:
ba:8f:21:68:fd:89:45:ef:da:28:fe:64:7f:ac:b7:0b:2f:4d:
83:6c:5f:f3:ec:23:0c:16:f2:40:8f:79:1a:bd:f0:dc:54:de:
58:86:0b:50:f6:ba:b8:88:1d:69:ad:bb:89:da:4c:70:db:8e:
68:f0:2f:85:3b:c2:3b:92:76:6b:fe:bc:49:29:fa:e1:c3:73:
cb:c1:62:1a:78:df:ce:5d:7d:eb:ae:ea:09:25:18:a4:17:27:
a6:98:43:f5:a2:a9:72:3c:de:27:ba:ff:27:73:2c:4e:a6:91:
9f:90:8b:2d:f1:36:cf:aa:40:9c:53:10:74:e1:aa:7c:9e:14:
75:c7:45:66:ed:de:f1:fb:da:cf:8f:16:8a:48:cf:6c:6d:d2:
ee:c6:de:9f:a9:c9:bb:27:84:12:b4:7e:88:79:36:ff:58:0d:
2b:b7:f1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:06 2026 by rpki-client