Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier: etW5hrGS/4HrVc9KIR9E43HA71udNdKqrwkxhTjdQ3k=
Subject key identifier: 9B:8A:38:0F:AC:06:AE:E2:88:2D:5E:54:09:F6:5A:8C:1A:C3:EA:5D
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 019CA8D89CD4A903D53AD8DF86810D81B7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number: 13F3
Signing time: Sun 01 Mar 2026 10:01:34 +0000
Manifest this update: Sun 01 Mar 2026 10:01:34 +0000
Manifest next update: Mon 02 Mar 2026 10:01:34 +0000
Files and hashes: 1: 0FXE-aMYDoHsJWIgYZ6p4cTAvIc.asa (hash: m9vFjKk2IkfNxMT1oBT/EqvBwRhxlH++eft+dvmvzfI=)
2: B1xlxtkgltJzqbUtpT-T2k7OjtI.roa (hash: qZlWNzGPdE+IKxAZlX53rTWx5ECKk+OZ5/kaPPhGDH4=)
3: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: tyoce484pc7AUu9q3weE4OZ2LP83wvACojOYOyJcVf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:9c:d4:a9:03:d5:3a:d8:df:86:81:0d:81:b7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Mar 1 10:01:34 2026 GMT
Not After : Mar 2 10:01:34 2026 GMT
Subject: CN=9b8a380fac06aee2882d5e5409f65a8c1ac3ea5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:a3:4e:94:3a:97:d4:a2:70:61:10:7a:c9:
f7:f9:4d:07:2a:8e:ef:0b:de:fe:8c:d0:8e:39:60:
e8:25:c7:80:b6:2e:6f:95:04:ae:9c:0a:87:ab:ee:
fa:45:75:ec:b2:32:8a:65:fa:37:05:c4:19:24:97:
d2:f3:1c:4e:64:54:f7:ae:12:10:cf:9b:1d:a3:9b:
ca:bd:96:e4:47:7c:55:be:8d:5c:e4:d9:5d:65:40:
72:5d:69:c3:81:73:0b:0d:3e:f8:d6:7a:a2:53:0b:
dd:17:aa:64:48:37:e6:f1:59:50:f7:2a:5e:0e:60:
73:a6:65:ec:a7:23:96:b7:14:c3:4e:4a:cd:e1:ff:
49:cd:a7:df:59:0c:1a:64:75:84:36:f7:7c:e0:46:
30:eb:3a:9e:4c:1e:0f:83:8c:60:26:e2:c4:ea:7a:
57:36:d5:ad:9b:c0:38:f6:7f:41:d7:1a:4e:ef:c3:
b6:92:1b:81:99:28:32:c4:7c:4e:ae:19:b0:9d:80:
05:2d:a7:d7:6b:16:66:c5:00:b9:b2:79:8a:6d:b9:
04:e2:71:88:d3:f0:22:f3:9c:a0:76:16:a1:19:c3:
b8:91:e6:07:a4:a5:6d:ab:b6:74:5d:b5:bf:a0:1c:
87:e1:9a:23:ca:80:23:30:57:fb:f0:4a:37:5a:11:
8e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8A:38:0F:AC:06:AE:E2:88:2D:5E:54:09:F6:5A:8C:1A:C3:EA:5D
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:11:14:cc:ed:b2:4a:c0:d9:b4:f3:56:b7:95:2d:83:9e:1f:
3c:4d:60:50:3f:22:0f:7e:f3:b8:35:45:fb:a0:c0:18:47:ae:
07:db:70:e6:92:20:2c:a0:4d:e0:48:65:ef:4f:92:f4:c9:94:
aa:37:31:85:e8:63:8f:21:b2:5a:e5:47:ac:d5:4d:0f:bc:99:
58:76:91:49:d0:c8:64:2c:6e:39:10:6e:1f:1b:f6:c6:26:00:
4c:ea:01:4d:27:1f:fd:8f:06:00:09:d0:31:87:33:15:56:a5:
70:a3:61:48:26:0c:0c:b0:c4:b8:ed:d3:ae:15:8a:a5:b7:75:
43:d7:39:bd:a2:7d:4e:6e:5f:9b:58:35:6d:61:6f:47:09:6f:
f6:f9:ef:70:9e:ad:b5:24:c6:ac:2b:d5:9d:d3:55:69:ea:1d:
33:86:9a:20:09:40:35:e7:dc:35:d2:3b:20:2b:62:0a:19:0c:
32:f3:ab:3f:33:9c:c1:8c:68:20:45:16:77:c3:17:d8:4c:f0:
2f:06:f2:08:1d:fb:a7:0e:29:86:51:85:5c:d7:88:c8:da:10:
b1:d5:4b:e6:08:7e:fe:33:de:bb:39:83:62:7a:b9:e8:3b:e7:
23:7c:dd:06:0f:ba:e0:d1:73:e4:11:f6:42:e5:76:fe:06:f3:
c9:c9:ef:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:22 2026 by rpki-client