Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
File: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft (raw, json)
Hash identifier: lZYcaS8HA8/XT23sWhS+m06l7BxGCRDcmmEVom5yVlM=
Subject key identifier: 98:A2:1D:DD:8C:A4:96:8C:1D:E2:51:7C:12:4A:34:8A:96:22:BD:41
Authority key identifier: 60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
Certificate issuer: /CN=600b113e062d17ea230806b34a21deb5627b6774
Certificate serial: 019D28F2773B1B7F378E07B4BF5BFC10DFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
Manifest number: 1504
Signing time: Thu 26 Mar 2026 07:01:12 +0000
Manifest this update: Thu 26 Mar 2026 07:01:12 +0000
Manifest next update: Fri 27 Mar 2026 07:01:12 +0000
Files and hashes: 1: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl (hash: 1ccgv82I1ewgwNpF7az8/ON0FwZGBr2tuG4qoXJ+p9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:77:3b:1b:7f:37:8e:07:b4:bf:5b:fc:10:df:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600b113e062d17ea230806b34a21deb5627b6774
Validity
Not Before: Mar 26 07:01:12 2026 GMT
Not After : Mar 27 07:01:12 2026 GMT
Subject: CN=98a21ddd8ca4968c1de2517c124a348a9622bd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:6c:c5:29:38:70:8d:db:52:dd:ea:5c:0d:
bc:bf:60:74:a7:aa:37:34:8e:58:71:6f:e1:71:c0:
59:0e:76:4c:42:52:cd:3d:2d:de:57:b3:8a:53:27:
fe:8f:85:e9:61:5a:2b:bd:37:46:fc:e5:38:04:99:
14:f6:3f:d9:4d:5d:b8:18:08:03:ae:f9:fb:7c:03:
54:a1:cf:a4:6e:1f:6b:d0:d9:ea:4f:ac:f8:1a:9c:
dd:7f:43:97:75:9f:c1:4d:58:53:a5:1a:fe:1a:51:
1f:be:78:e7:b8:ae:56:e9:68:60:15:a5:c6:98:ad:
99:fc:93:44:ae:7a:0f:ec:d1:4e:26:a7:c8:95:d7:
8e:da:8f:6f:61:9d:cb:fd:46:7d:6d:8b:40:ed:70:
6a:c3:58:49:b4:98:16:e2:10:de:9d:25:4b:2e:92:
2e:d6:b0:2a:59:d0:94:33:8c:aa:d2:01:94:62:55:
e6:29:1d:a4:e0:b9:30:8a:6a:e9:8f:a4:d6:ab:5e:
31:82:b7:be:49:28:59:fa:71:cc:15:d8:de:79:c7:
2b:9b:d7:1c:47:e5:95:ad:69:bc:ea:7a:da:61:a1:
97:5d:17:30:09:23:78:5c:d3:46:37:23:f1:1e:1f:
1a:72:86:c3:0f:62:d7:54:5e:ee:9f:2e:a5:9c:ca:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:1D:DD:8C:A4:96:8C:1D:E2:51:7C:12:4A:34:8A:96:22:BD:41
X509v3 Authority Key Identifier:
keyid:60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4b:7a:9a:52:b6:53:26:cf:3c:45:d4:1a:7a:17:01:22:d4:
a0:63:5f:ae:f2:48:01:bf:a5:23:ca:b5:35:52:de:9e:db:a9:
79:c8:e2:70:15:ae:e8:49:00:77:4a:ce:51:35:ab:1c:52:eb:
f5:6d:c6:0b:ef:51:9d:50:8a:9b:f8:28:75:96:8d:fa:88:50:
7b:5a:8d:25:3b:97:ba:34:dc:42:31:6b:bc:2b:b5:6c:a8:02:
b7:fc:fd:fc:a9:f5:d4:47:ea:57:20:28:7d:f5:42:82:ea:5f:
46:81:f5:2c:3d:7c:2c:dc:50:39:3c:2b:c4:14:09:a9:a3:8d:
0c:56:a5:a3:19:df:35:a9:c6:8b:11:08:a5:44:71:c1:8c:c6:
46:2e:c3:b3:e8:bf:78:48:25:50:37:fc:9c:63:a7:31:00:c4:
7a:42:e5:7f:3b:1c:06:59:b4:1b:23:74:ab:89:2b:84:1a:ea:
f1:bb:89:e1:5a:3c:d0:71:3b:ce:e8:85:1e:51:83:23:e8:4a:
d3:94:33:8f:40:2c:30:e3:00:cc:59:c7:22:02:76:61:7c:cc:
ca:93:2f:97:dd:90:d0:53:af:44:17:d6:cc:84:dc:9c:30:79:
46:24:db:88:8b:ce:cb:d7:c8:be:a7:da:41:8d:dd:4b:bb:ed:
9d:60:2e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:22 2026 by rpki-client