Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
File: YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json)
Hash identifier: AhfTIMiK7EDepzfDSU5Vj9Dsi7loZZRNVdQDRh+2ei4=
Subject key identifier: 7F:09:EC:F4:4D:EE:64:81:3D:AE:72:4E:26:53:FE:A5:F0:33:FC:EE
Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
Certificate issuer: /CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Certificate serial: 019D329A36A1936FEACDE080D7C71EA3E179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
Manifest number: 0970
Signing time: Sat 28 Mar 2026 04:01:00 +0000
Manifest this update: Sat 28 Mar 2026 04:01:00 +0000
Manifest next update: Sun 29 Mar 2026 04:01:00 +0000
Files and hashes: 1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: pFn0SvFWrV0KFs8GpE0Vml4tEy4ABFmrXMLlmEgqOBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:36:a1:93:6f:ea:cd:e0:80:d7:c7:1e:a3:e1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Validity
Not Before: Mar 28 04:01:00 2026 GMT
Not After : Mar 29 04:01:00 2026 GMT
Subject: CN=7f09ecf44dee64813dae724e2653fea5f033fcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:cd:5a:b3:04:41:a7:b4:ff:ac:11:c9:6d:
aa:46:12:ce:27:a8:f7:75:6b:65:90:0a:2a:81:b4:
f9:0b:f2:a3:3a:24:99:2d:ab:33:d2:5c:a5:b5:84:
01:f2:66:97:6f:bf:67:25:ed:88:1a:eb:4d:56:52:
91:f1:dd:94:60:0d:e5:cd:fa:68:56:5e:32:39:f2:
73:7e:64:6f:a8:f9:22:84:84:06:c5:ef:5a:34:0e:
1a:33:f8:d2:34:a1:b5:13:2d:85:a8:8e:3e:92:c5:
97:42:b1:98:8d:83:43:08:97:05:fb:a3:c8:c2:e0:
66:10:1e:9c:75:7d:e2:6d:7b:0f:16:e6:cc:60:88:
69:1f:0a:be:55:f1:86:0a:b5:7d:95:27:36:40:72:
a6:c8:7a:82:c1:58:4e:97:4e:b7:b9:76:ef:9b:a0:
e4:cd:05:6b:e4:e5:71:12:ea:cd:04:64:21:29:41:
c7:2a:a7:77:aa:9c:b0:e8:44:41:2b:8b:40:b2:b0:
de:81:26:0f:0c:bc:20:50:83:7c:f6:3e:92:b8:a8:
d2:bc:e6:84:e0:bd:f0:f9:d6:61:d1:39:91:ad:74:
91:5e:27:d0:54:0e:56:54:44:ae:90:9c:b2:38:70:
54:0e:17:49:bc:22:0d:16:38:f0:cf:54:2d:e7:52:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:09:EC:F4:4D:EE:64:81:3D:AE:72:4E:26:53:FE:A5:F0:33:FC:EE
X509v3 Authority Key Identifier:
keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:72:7c:83:81:00:f1:ad:da:f9:ea:ea:d8:da:c4:8c:1b:db:
5c:ab:bc:cc:d6:6f:55:d0:8f:c8:e8:ec:aa:b3:dd:6d:ff:60:
a5:55:62:9e:fa:7b:34:33:f4:9f:6d:a0:6f:eb:06:af:79:19:
19:be:a8:e8:4d:bb:90:93:07:db:ec:bc:7e:28:39:54:fc:d0:
6b:74:92:8d:8a:13:61:26:f2:af:28:a3:55:7c:64:82:70:1c:
33:11:45:44:85:d8:43:dd:a7:f2:82:3f:e8:0b:1b:ed:f5:49:
e1:d3:a2:08:bc:e0:d7:30:33:33:88:d8:30:3b:a0:f3:d5:7d:
7c:7b:2c:9b:27:22:53:41:18:82:bb:b6:54:18:0c:23:68:f4:
47:71:08:85:bf:67:26:dd:dc:e8:27:14:07:1b:3c:04:ec:6b:
0a:67:97:70:f3:f6:c3:5f:51:49:f6:1a:9b:2b:1a:61:1b:06:
c0:3e:dd:a9:4a:f9:3c:b8:77:3d:d6:22:39:a8:72:28:2c:64:
03:1c:97:ca:ce:84:bf:72:a6:d9:8c:bd:6a:bb:4f:eb:39:99:
22:00:ba:74:9c:b2:ea:41:42:8c:0e:e9:ca:5f:de:55:d4:1e:
2b:67:d4:b9:3b:a4:55:13:73:ee:68:eb:80:34:a6:33:ce:f6:
ac:04:ae:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:02:25 2026 by rpki-client