Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier: cgIYIfBm+PSZk+ku1TGViKbAK2tynqlym0efRfkYtBw=
Subject key identifier: EC:32:C3:E2:31:89:D5:35:E7:6C:9E:66:1A:91:C4:83:8E:EB:40:32
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 01A1A939614652F3950FD3A5C5AEE937E38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number: 168A
Signing time: Thu 05 Nov 2026 01:01:12 +0000
Manifest this update: Thu 05 Nov 2026 01:01:12 +0000
Manifest next update: Fri 06 Nov 2026 01:01:12 +0000
Files and hashes: 1: 0FXE-aMYDoHsJWIgYZ6p4cTAvIc.asa (hash: m9vFjKk2IkfNxMT1oBT/EqvBwRhxlH++eft+dvmvzfI=)
2: B1xlxtkgltJzqbUtpT-T2k7OjtI.roa (hash: qZlWNzGPdE+IKxAZlX53rTWx5ECKk+OZ5/kaPPhGDH4=)
3: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: uafPm6UhUGVJyBAVdIaJXkmUVwK5Xn/JQxPuIg9js9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:39:61:46:52:f3:95:0f:d3:a5:c5:ae:e9:37:e3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Nov 5 01:01:12 2026 GMT
Not After : Nov 6 01:01:12 2026 GMT
Subject: CN=ec32c3e23189d535e76c9e661a91c4838eeb4032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:4e:97:0f:8a:89:ea:84:15:38:6c:b1:f8:
73:b4:b2:1b:36:b7:78:df:bb:12:61:c7:11:be:d7:
94:20:90:5c:ff:96:e0:4f:90:e4:58:c9:fd:08:93:
f6:8f:9a:ba:43:9c:88:11:9b:d7:67:bc:7f:81:5d:
29:ca:fa:2f:93:d4:c4:f8:26:e9:ce:3a:13:c1:41:
2a:e5:a7:e0:63:02:a4:91:de:a2:6e:8c:02:9f:7f:
3d:b0:d7:ab:63:61:4f:53:0a:1f:55:50:dd:6a:53:
03:f5:d2:d2:84:c7:8c:5f:43:af:f1:b1:50:0e:d1:
24:62:14:0d:d3:33:61:ab:4e:e0:d0:38:49:c2:4d:
49:9f:0d:91:f1:f9:6a:68:4a:30:88:a1:45:99:db:
68:1f:f8:a3:e7:2c:5e:5a:ac:c6:e1:40:cd:ea:c6:
27:68:29:91:2e:96:07:e5:d0:0f:68:20:9a:83:01:
0e:4b:ee:48:5a:54:e1:ee:f7:ea:c6:49:6d:2f:8e:
c4:90:e7:35:9d:4e:3b:62:fa:01:46:9e:89:00:16:
b1:b2:3e:b9:41:4d:06:b9:67:da:f0:0e:17:f7:82:
fb:5b:b5:eb:f0:c0:49:f0:39:ed:55:d9:d1:52:6e:
79:4f:55:aa:fb:6c:5b:e0:f2:5a:4d:92:b0:1c:b0:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:C3:E2:31:89:D5:35:E7:6C:9E:66:1A:91:C4:83:8E:EB:40:32
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:68:1b:1b:a4:38:ad:08:34:03:5e:15:c2:c6:6c:77:eb:37:
b7:47:63:3d:c0:2e:de:b8:ce:a1:e5:64:f6:c7:b0:84:f5:34:
86:ff:35:d1:19:43:8c:bb:80:ef:80:d3:94:7f:80:14:5b:2d:
7a:55:c1:9d:59:2e:89:a5:8c:5b:8e:eb:65:e9:af:39:1d:ed:
87:62:8a:d5:fc:94:8a:cf:4f:a6:38:90:67:5e:47:fb:d1:26:
31:6d:94:75:c8:e8:7c:c3:69:aa:cc:df:d0:3e:b7:14:22:b8:
7f:c4:7e:3a:19:a3:a5:9d:55:01:3e:f9:a9:b1:49:cb:2a:44:
9c:1f:de:c0:75:67:88:df:13:ea:8d:56:19:2c:78:e3:4e:be:
c0:c5:fe:46:e3:b0:ca:3d:ff:67:53:aa:e0:e6:d8:25:d0:95:
88:4e:8e:90:8e:71:67:48:2c:cf:f9:cb:c1:d5:ca:bd:c3:a6:
6e:fb:47:98:bd:2f:b1:00:43:2a:c7:30:83:1d:45:fc:61:f8:
38:cc:4d:e3:e7:ef:bd:d4:ed:76:bc:5e:31:c6:97:48:eb:31:
10:fe:84:05:47:8e:db:92:28:8b:b2:b8:c3:42:d1:41:e3:87:
70:69:26:24:54:93:42:7c:b1:22:83:c8:ac:3b:7f:24:8a:3a:
b1:c4:ea:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:07:39 2026 by rpki-client