Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier: nV007KbNPeOltEidpbKQfGzA7TMkH2MZtBM1KghyFG4=
Subject key identifier: 23:9A:E5:15:94:79:9B:E2:33:4C:EC:8F:33:1B:E0:16:FA:09:DD:22
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 019DA3E61FFA10893BC9B17B41538C7D90E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number: 1475
Signing time: Sun 19 Apr 2026 04:01:00 +0000
Manifest this update: Sun 19 Apr 2026 04:01:00 +0000
Manifest next update: Mon 20 Apr 2026 04:01:00 +0000
Files and hashes: 1: 0FXE-aMYDoHsJWIgYZ6p4cTAvIc.asa (hash: m9vFjKk2IkfNxMT1oBT/EqvBwRhxlH++eft+dvmvzfI=)
2: B1xlxtkgltJzqbUtpT-T2k7OjtI.roa (hash: qZlWNzGPdE+IKxAZlX53rTWx5ECKk+OZ5/kaPPhGDH4=)
3: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: fGbJ/x7j+sadjefDkBPJUf9PikY3LBQeybisqU13V0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:1f:fa:10:89:3b:c9:b1:7b:41:53:8c:7d:90:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Apr 19 04:01:00 2026 GMT
Not After : Apr 20 04:01:00 2026 GMT
Subject: CN=239ae51594799be2334cec8f331be016fa09dd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:6f:f8:60:13:9e:fc:68:5e:3b:75:b5:7a:
7d:90:80:58:06:f9:5b:dd:84:83:2d:a8:05:56:52:
aa:b3:4b:85:06:f8:93:54:b7:5e:56:e2:be:97:02:
4e:f3:1b:af:1c:fd:6e:55:bf:a9:69:15:2d:2f:46:
4f:56:90:24:f6:5e:12:42:16:3b:31:12:54:e4:e4:
3f:03:a0:46:c3:13:dd:c5:13:58:a8:ee:fb:12:8c:
00:ab:37:df:1b:5d:55:f7:25:a5:db:cd:5e:04:93:
71:76:d1:f9:08:76:7a:31:e4:7d:10:f9:32:2f:0b:
72:0a:05:25:eb:2a:28:06:62:5a:89:ff:e8:0d:a8:
40:9a:26:bb:64:98:fa:94:34:ce:39:cc:ee:70:fd:
95:72:ab:a8:2c:6d:e5:0f:97:98:38:3f:fe:60:29:
0c:67:4b:15:34:8d:e4:2f:21:cd:46:3e:11:0e:c4:
d2:8d:c9:75:06:4a:ee:64:07:45:a6:91:b8:90:b4:
9f:f3:b0:50:8f:84:3d:7f:e0:32:94:ef:33:72:b8:
6b:b9:8f:3a:19:4e:a4:76:5a:a7:22:f2:1a:1f:d1:
d3:c3:2e:1c:40:88:49:44:6c:41:e6:10:13:66:b4:
50:1e:b8:5a:58:06:9c:5b:bf:36:bf:90:6b:4c:50:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:E5:15:94:79:9B:E2:33:4C:EC:8F:33:1B:E0:16:FA:09:DD:22
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ac:27:22:51:4b:f8:09:f9:a4:7f:e3:4d:43:3a:b7:a1:20:
b3:a4:58:3e:ea:33:71:57:96:ec:c7:25:9d:43:5f:90:01:c0:
d8:bf:22:47:7e:d7:9c:d4:6c:7d:de:dd:6c:8b:ca:86:6d:39:
4f:fe:c9:eb:a0:4f:f9:42:ce:84:52:41:96:5a:c6:60:fc:22:
5c:17:25:bd:aa:ce:70:42:b2:59:b2:b6:37:44:7f:a4:9f:82:
97:b6:54:23:97:95:9d:2e:e9:cc:6d:fd:9b:5f:3b:c2:75:a8:
08:98:e6:29:b0:28:a8:60:3f:24:22:a4:8f:88:df:1c:17:e0:
eb:65:ec:9c:60:74:8d:04:5b:c0:52:ba:1c:1a:f3:24:13:5e:
17:8f:8e:9a:33:3f:6d:bd:82:3b:8a:ae:aa:93:ea:b5:a8:6a:
ee:09:8b:18:d4:6c:a8:0f:bc:cc:46:22:d0:99:09:d4:7c:1c:
46:92:03:c8:c2:b0:d5:06:a6:de:ad:d5:76:8a:eb:22:97:9c:
32:67:19:f8:5e:82:70:c8:0f:11:ce:2d:ad:a4:71:60:63:06:
b4:4d:8c:81:82:2b:68:9f:f7:05:35:42:03:56:65:a3:29:a9:
46:69:01:af:78:6a:d2:72:07:30:36:85:9a:45:60:d4:ce:d6:
85:58:00:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:52 2026 by rpki-client