
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
File: ybssFI7w7gD_WiIa8bxhx-GKpLw.mft (raw, json)
Hash identifier: kvrBtmMKmmus6g/+CRAjrBAfoX9iLLqOW/+A/cIioEg=
Subject key identifier: FF:1A:1A:A3:EB:63:C0:F3:FD:FD:DB:3F:74:71:28:53:EC:DF:78:32
Authority key identifier: C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
Certificate issuer: /CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Certificate serial: 019FA9AC5F8C51DA9FBEF04536CF8768ED44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
Manifest number: 01E5
Signing time: Tue 28 Jul 2026 17:01:13 +0000
Manifest this update: Tue 28 Jul 2026 17:01:13 +0000
Manifest next update: Wed 29 Jul 2026 17:01:13 +0000
Files and hashes: 1: 2vfd_kX6R8_1pSce-qH7ueF_CFI.asa (hash: gyU2q6SGexsT0na8dPH6q8my1zwHUMQLEgtgSUYyBL0=)
2: ybssFI7w7gD_WiIa8bxhx-GKpLw.crl (hash: qnsWHe3P2pdeXN70jJIz4xTopiSTc7G1XLoOLb/FSfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:5f:8c:51:da:9f:be:f0:45:36:cf:87:68:ed:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Validity
Not Before: Jul 28 17:01:13 2026 GMT
Not After : Jul 29 17:01:13 2026 GMT
Subject: CN=ff1a1aa3eb63c0f3fdfddb3f74712853ecdf7832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:cf:67:f2:24:7c:59:08:da:b6:c5:02:9f:
6f:64:98:1f:b9:81:3e:e6:18:6c:3d:5d:e2:eb:b2:
35:c9:61:e8:fa:be:8e:67:b6:c9:c1:19:f0:f8:4c:
fc:af:5c:1c:db:77:82:2c:03:08:33:87:63:83:63:
85:eb:b0:ee:0e:8f:22:98:1b:e9:9c:75:27:da:eb:
84:5f:85:37:7d:b2:6b:f3:55:03:c1:13:73:27:32:
80:94:ca:8d:3c:fd:a7:89:ba:df:62:eb:8e:db:7b:
8c:e8:84:dc:81:15:0c:1c:57:5b:27:7b:bd:4f:74:
f7:0b:dd:ae:8b:1f:b4:3d:8a:46:7b:d5:ed:d9:b5:
d7:9a:bf:eb:4c:e9:4a:b5:11:7d:88:98:d0:50:75:
ca:57:be:ca:ca:ac:f6:79:28:d3:b9:08:f0:e2:f2:
94:bd:e1:86:df:8b:0e:ad:8b:86:7d:d9:07:4b:89:
d8:26:07:9d:b2:f8:fe:c3:30:99:3c:65:bb:84:14:
03:9e:92:79:87:84:6e:b3:7b:59:75:e3:cc:89:ef:
fa:2f:bf:51:14:44:b8:16:2f:5a:92:f4:95:cd:24:
07:7f:96:8b:ac:e5:61:ae:20:48:79:b4:db:30:6a:
79:b0:72:90:fe:1f:4b:df:d0:36:f6:5d:fb:53:6a:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1A:1A:A3:EB:63:C0:F3:FD:FD:DB:3F:74:71:28:53:EC:DF:78:32
X509v3 Authority Key Identifier:
keyid:C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:4e:5b:88:73:9b:55:0e:6a:4d:96:d1:4e:11:b7:d0:fd:05:
09:b4:76:da:a5:bd:b6:21:48:5b:a2:47:66:96:d9:0d:4c:1b:
44:a7:dc:14:35:4a:8a:02:0c:27:4f:bd:c9:4d:26:0a:bc:cf:
56:29:ec:6f:00:a2:25:07:c9:65:c6:4f:7b:19:75:6a:f3:8e:
b5:2a:76:13:5f:15:fb:ca:0c:ae:8a:d8:be:39:01:40:c1:5b:
c3:64:14:8f:75:cb:47:9f:f3:b4:b4:be:1b:06:d5:08:c4:7a:
4a:87:6f:b9:e9:90:31:bc:3d:df:88:65:d6:3b:b2:93:c7:2a:
52:ba:dc:3c:7d:4f:e8:99:16:fe:a4:15:5c:37:a7:91:b5:3f:
6e:c5:ca:39:ce:2e:14:ca:3d:3a:ed:00:fb:53:bd:26:cc:f8:
30:07:51:08:0b:62:a9:f1:18:8b:cc:68:22:cc:48:f7:92:ba:
a0:8f:31:0c:e6:28:64:6a:16:f3:df:d2:a2:0f:43:2f:84:0c:
09:79:b6:0a:92:9b:0c:8e:c8:91:5b:a7:54:28:45:a9:d5:e9:
41:26:cd:55:80:c0:a9:04:69:77:d8:4a:b2:4a:ff:18:d5:69:
4e:09:61:c9:e5:d2:66:49:4f:cd:20:e7:83:1a:61:5e:bc:70:
01:c5:5e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:56 2026 by rpki-client