Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
File: YPIcIT_AacghVf6hfpt_uC_mt_I.mft (raw, json)
Hash identifier: YgPL8bFXDOZ2GCYfAfcapeglWFc3CkLZHdHzJqFdqLg=
Subject key identifier: 6D:23:55:71:28:42:FA:39:08:85:6B:00:E6:22:FB:E4:19:7A:B7:C3
Authority key identifier: 60:F2:1C:21:3F:C0:69:C8:21:55:FE:A1:7E:9B:7F:B8:2F:E6:B7:F2
Certificate issuer: /CN=60f21c213fc069c82155fea17e9b7fb82fe6b7f2
Certificate serial: 01A0CA0FD2150805E1C967F5CC14EE1242FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
Manifest number: 18
Signing time: Tue 22 Sep 2026 17:00:29 +0000
Manifest this update: Tue 22 Sep 2026 17:00:29 +0000
Manifest next update: Wed 23 Sep 2026 17:00:29 +0000
Files and hashes: 1: 7LP6-tZNO4kMwCuy2a7JWKqiVis.roa (hash: ZvkpzsSCehm9n4InEtK3zFBlt2EwWn0SgZ3MtWI4ctg=)
2: LcdFlwsZeNlKQxWtomWGugF5Uls.roa (hash: LmbSWI4WnALmhzvVgu3HrJG4mLahAfFT/2QpHuJ+AzQ=)
3: YPIcIT_AacghVf6hfpt_uC_mt_I.crl (hash: SOayl3RDzZIZx0BmFYS54z4xx6ehuoDnFMWrZBIz4Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:d2:15:08:05:e1:c9:67:f5:cc:14:ee:12:42:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f21c213fc069c82155fea17e9b7fb82fe6b7f2
Validity
Not Before: Sep 22 17:00:29 2026 GMT
Not After : Sep 23 17:00:29 2026 GMT
Subject: CN=6d2355712842fa3908856b00e622fbe4197ab7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:61:5a:5e:5f:f1:6c:6f:cc:f8:c3:41:96:
57:f7:13:bc:4d:71:e0:c9:bc:06:30:55:be:e6:5a:
8f:ef:15:de:44:b4:c0:75:d8:e7:44:0e:2e:5f:bd:
35:32:90:34:6e:1f:ae:0c:11:9f:4f:01:54:a1:b2:
30:c8:d4:67:be:6e:08:c4:da:60:eb:99:08:21:77:
b1:db:93:1c:f9:48:03:69:8f:a0:ec:f8:09:8b:60:
4d:51:48:1d:7a:3d:0b:e3:9a:7b:19:83:81:5e:7c:
84:79:2f:63:09:40:4d:57:50:bc:3e:3b:fb:9b:79:
c9:43:a8:62:82:ec:a1:af:87:65:7c:64:22:b0:19:
d4:3a:c4:08:ae:d2:da:dc:8d:0c:28:c4:23:7e:1e:
fd:d8:5e:4d:ed:c4:e8:8a:40:b0:de:15:a1:f4:81:
d1:43:f8:b9:d2:95:91:62:4d:80:47:1e:cf:8c:a3:
e9:8f:cc:d3:e2:a9:60:58:37:4a:d3:db:98:ac:27:
a9:39:8e:37:42:39:07:a1:8e:77:7b:b3:ab:8f:3a:
4a:2c:c7:41:59:9f:05:e1:59:64:0c:a9:0a:96:b5:
50:b1:7c:f3:04:4b:04:0a:a5:41:d4:a8:8c:aa:ab:
f2:5c:00:ee:3e:bf:2e:1a:33:29:f2:d8:d7:96:5d:
41:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:23:55:71:28:42:FA:39:08:85:6B:00:E6:22:FB:E4:19:7A:B7:C3
X509v3 Authority Key Identifier:
keyid:60:F2:1C:21:3F:C0:69:C8:21:55:FE:A1:7E:9B:7F:B8:2F:E6:B7:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:64:1a:11:c0:60:91:bc:33:e0:62:8c:31:eb:77:52:a2:13:
da:8d:ac:a6:d4:38:96:f4:bc:4f:60:a4:7f:c0:fd:3e:f1:78:
8d:60:eb:92:a6:70:29:3d:34:55:30:bc:43:f4:69:f2:21:7b:
fb:ae:e5:8f:bf:03:99:8f:ad:02:49:75:d1:16:0f:0e:b0:38:
4c:52:f0:a6:04:6f:32:29:83:3f:27:9a:b4:4f:05:05:03:24:
99:16:b9:ae:fe:e5:59:ab:1f:67:cd:f3:07:24:7d:8c:67:1e:
05:cc:90:1d:ef:b5:35:83:3f:2f:52:05:f6:2e:82:16:97:fb:
be:b4:01:cb:05:07:62:5c:62:49:8e:56:64:b4:12:68:95:d0:
11:19:6a:86:c3:89:8d:fc:e7:95:1f:d0:21:53:96:27:30:78:
54:4b:bd:1e:fd:11:09:ab:c5:ee:3a:4b:55:cc:4e:4a:28:d2:
a0:8e:6f:ba:6e:a7:5a:d6:18:85:31:a8:7e:a8:0f:08:4b:1f:
0b:a0:63:37:de:65:65:17:bf:7a:8b:f6:c1:c7:51:2f:f4:1a:
54:56:86:c0:17:e3:15:06:e9:ef:f0:19:b7:a4:46:22:af:d3:
29:44:3e:7e:d7:37:7c:4b:47:7a:3a:aa:fa:45:fa:8a:aa:0c:
21:fb:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:43 2026 by rpki-client