Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier: VtgJcbbukuoZ5bk+JM0FZhl83bk6k6fpRMed/oBE7YY=
Subject key identifier: B0:64:CA:A2:B1:A5:E3:3B:96:7A:58:67:F6:44:EC:0C:EC:85:2C:FE
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial: 019D25BAD612160BEF5A8EFA8402C345AE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number: 1517
Signing time: Wed 25 Mar 2026 16:01:34 +0000
Manifest this update: Wed 25 Mar 2026 16:01:34 +0000
Manifest next update: Thu 26 Mar 2026 16:01:34 +0000
Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: a9diLvvMiL915dr2Gw7IYVNAnBXs7dtw784l3P5y1zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d6:12:16:0b:ef:5a:8e:fa:84:02:c3:45:ae:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Validity
Not Before: Mar 25 16:01:34 2026 GMT
Not After : Mar 26 16:01:34 2026 GMT
Subject: CN=b064caa2b1a5e33b967a5867f644ec0cec852cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:e4:d3:ac:f8:85:ef:65:8b:a1:1d:2e:8a:
97:f9:91:9d:b7:ac:3f:f5:d6:f4:6e:17:51:d6:57:
f4:5f:74:2b:33:b5:b3:d9:78:2c:69:8c:84:cc:73:
c7:80:97:77:d2:49:6e:fe:0f:c4:53:72:54:6a:80:
cb:ab:da:10:08:09:af:cf:dd:a3:09:b2:65:87:59:
1c:49:84:a7:b8:7a:54:f2:df:ed:69:da:0a:81:7f:
49:32:96:c1:19:21:fa:0a:a7:bb:72:2e:cb:2d:4e:
6a:59:2a:8b:a0:7d:e8:f6:83:ff:6f:58:dc:e9:a8:
14:2a:d6:bf:a0:74:75:1b:09:f6:19:b7:c8:6e:b5:
e0:ac:37:e1:ca:df:54:bc:d8:51:b7:4b:0b:29:c9:
0e:34:c7:9b:fc:90:d1:1f:41:6c:66:ab:7b:85:97:
ff:55:37:56:e6:49:5c:4c:fa:40:3b:b2:5d:e4:f7:
ee:34:38:ef:f9:93:40:c0:9b:f9:cc:c3:d3:0d:64:
58:6e:73:f2:da:bd:22:52:f1:21:d7:87:3f:6d:9d:
fc:51:48:0a:7d:af:ad:2b:03:ad:ba:b1:a1:0f:69:
01:71:b5:67:c7:f9:d2:87:55:7f:24:29:47:16:a3:
fd:76:b9:9f:2f:9f:2c:74:f3:4c:97:5b:89:6c:46:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:CA:A2:B1:A5:E3:3B:96:7A:58:67:F6:44:EC:0C:EC:85:2C:FE
X509v3 Authority Key Identifier:
keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c2:31:d8:6d:4d:ed:8d:b4:4f:60:8c:dc:27:c6:7e:0d:d2:
56:d2:9c:1d:26:5d:eb:4e:a4:8a:1f:8d:12:a5:d4:65:99:12:
91:61:0e:fb:22:21:cc:bc:86:24:48:e6:b7:f8:3f:50:ff:ce:
eb:7a:6d:f2:d8:60:57:b5:02:92:20:da:a8:07:df:e0:ab:56:
11:cc:c5:83:ee:e6:2b:92:f7:55:7f:cf:b6:41:22:a6:89:88:
07:ac:2b:39:63:02:bb:37:20:23:cd:46:18:74:c4:43:f3:e1:
81:e6:cf:b7:ac:03:c4:4b:9b:75:1d:45:ea:b8:7f:cd:7f:34:
e8:c5:22:1c:58:df:b1:84:19:12:0c:97:1b:d6:bd:d2:b1:6c:
4b:05:c0:0d:da:65:62:bf:de:37:b2:67:e9:3a:70:d3:73:42:
18:cf:9f:11:85:24:3b:1c:58:bb:82:a8:1a:c2:ba:87:79:a2:
82:26:84:f2:ed:f9:e7:02:2a:37:18:c2:c9:0a:29:e2:09:6b:
52:0f:30:8f:90:8f:30:b4:68:5d:70:da:9a:ac:c7:6c:f3:e5:
46:d4:94:e3:f1:bb:38:c1:f9:20:21:48:f6:84:53:39:fa:c5:
6b:7f:fb:8c:e6:b4:8d:97:ad:43:fa:c4:6e:f7:0d:2a:4a:f7:
c0:fe:a2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:13 2026 by rpki-client