
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
File: YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json)
Hash identifier: W5YGjA30DHKfc1+KXXogLYP35Gv6yulQob/sCYRds34=
Subject key identifier: 32:2A:AF:59:5F:38:7B:44:FC:11:52:DF:05:CD:32:F4:70:56:01:AD
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial: 019EC0365C043D50CAD993F20F712A457AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 09:00:48 +0000
Manifest this update: Sat 13 Jun 2026 09:00:48 +0000
Manifest next update: Sun 14 Jun 2026 09:00:48 +0000
Files and hashes: 1: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: Xwc7ehhDvzWIqP1XXnluCl+feW3mZ82XvuZoNtGnS+4=)
2: ex_xJpK_CdSqACSQtdB9gjUSuD4.roa (hash: MIYxDXr1ZqH9Kq+ZDYqcGhxuESuPqOopC1Yf9yS3HhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:5c:04:3d:50:ca:d9:93:f2:0f:71:2a:45:7a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Validity
Not Before: Jun 13 09:00:48 2026 GMT
Not After : Jun 14 09:00:48 2026 GMT
Subject: CN=322aaf595f387b44fc1152df05cd32f4705601ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:6e:6b:78:38:b1:a6:b4:5f:86:57:98:f3:
73:ce:51:9b:20:bd:58:f7:d0:c6:2a:49:ea:da:c2:
6f:e2:aa:12:40:aa:a2:fc:e9:38:2d:7c:31:9d:dc:
cf:18:3c:82:84:3f:1c:15:e2:bf:2b:fa:21:08:30:
b9:5e:b1:d5:91:f3:3f:ba:7c:03:bf:5c:59:8c:be:
9b:d9:bb:ca:82:a0:05:2d:09:dc:42:0e:ae:5b:2f:
90:b9:12:8d:34:40:b6:80:22:b7:e7:f8:71:9a:84:
bf:09:da:d9:25:f3:5d:c6:6b:f3:c4:dc:dd:77:27:
f8:d8:f1:88:49:91:36:e1:36:e2:17:12:5d:9a:e2:
b2:63:0c:7f:af:cc:7b:dc:89:8d:8d:cd:63:51:30:
d8:c5:be:a2:97:99:7c:5c:3c:9a:6d:9b:b2:3e:26:
19:0d:19:2e:86:b3:05:b0:b4:94:bb:22:f7:cb:77:
2b:81:75:76:91:06:d0:54:13:fe:8a:e3:76:3a:79:
66:cd:b2:91:b6:d9:78:7c:53:eb:96:30:af:65:0b:
62:d9:31:91:c3:b9:45:c5:84:39:e9:ca:4e:e0:53:
3d:2a:39:bd:19:bb:27:fd:0e:1a:1d:5d:14:50:7f:
1b:16:c3:62:86:ba:36:ea:cb:b6:a1:e7:d1:bd:f6:
07:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2A:AF:59:5F:38:7B:44:FC:11:52:DF:05:CD:32:F4:70:56:01:AD
X509v3 Authority Key Identifier:
keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:48:86:39:64:f2:7c:6f:a6:bc:94:2a:1d:3c:6f:a1:23:1f:
d6:d9:cd:ba:34:e3:76:95:63:bf:1c:c6:e0:8c:93:59:22:e4:
cc:c4:bc:5a:ee:4d:16:a4:9d:ec:3e:88:d1:6f:cc:df:40:96:
37:cb:55:d6:22:d1:83:40:52:40:6c:a0:cc:66:86:c3:97:e0:
d3:79:d9:af:7e:da:49:95:16:72:2b:fc:e2:3f:38:a2:92:78:
aa:82:cf:cc:e3:96:26:75:aa:de:36:77:09:fb:fa:10:2a:7e:
e1:77:c8:6c:73:e1:79:e1:82:b2:8b:42:1d:8a:7b:ae:e5:2c:
59:d5:fc:ef:88:7f:dd:7f:23:b4:d0:89:06:84:86:44:e0:50:
b0:09:e6:4d:87:2e:8f:48:b6:42:50:d4:77:db:f4:68:59:ba:
70:44:52:4d:f0:cb:02:a1:b8:23:84:90:98:8a:84:ca:e4:40:
41:92:f2:67:b9:da:1b:9d:5a:7f:93:ca:ae:73:2e:f1:72:62:
c5:9e:ae:06:52:ca:c9:d9:31:be:9c:b5:10:ba:b3:1f:56:4f:
71:97:17:87:44:73:9c:c7:ac:36:9c:d7:c0:fb:4d:4f:a4:e7:
4f:72:e0:6b:63:76:44:3e:80:8c:e5:34:08:c5:35:6c:8c:1b:
9a:d4:d2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:05:49 2026 by rpki-client