Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
File: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft (raw, json)
Hash identifier: pvZvKTeG4KjxG1SzJs/YzW9mSdvPZ3BmJSHoVNTiHsY=
Subject key identifier: 28:43:B2:05:15:12:47:C1:13:12:F0:01:B2:EC:5D:A7:70:6D:52:3B
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Certificate issuer: /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial: 019D2816B44D3988D9550B69CF7B611FB6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
Manifest number: 17F1
Signing time: Thu 26 Mar 2026 03:01:09 +0000
Manifest this update: Thu 26 Mar 2026 03:01:09 +0000
Manifest next update: Fri 27 Mar 2026 03:01:09 +0000
Files and hashes: 1: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl (hash: rsc4HHjDdnc9EA+3AYIxct55l3ZIaTZ7+9NbwD62Olk=)
2: sw8tmXWb62c9gz1qsBrZbffyXTY.roa (hash: b0ehz9drkVBnOmXweW7dtXPuDg7z70w2Le8bMJVLAGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b4:4d:39:88:d9:55:0b:69:cf:7b:61:1f:b6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Validity
Not Before: Mar 26 03:01:09 2026 GMT
Not After : Mar 27 03:01:09 2026 GMT
Subject: CN=2843b205151247c11312f001b2ec5da7706d523b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:4d:a6:4a:cc:46:4a:d7:c2:b9:52:6e:d6:
86:4c:07:ed:9a:c1:aa:f4:f7:e4:1d:b2:fa:ec:8c:
85:42:67:7a:d4:f6:b1:51:88:23:4f:0a:1d:1c:21:
ff:3d:67:99:d4:bb:41:8e:97:06:a2:b3:c3:e0:7a:
a7:2b:ec:07:a1:a0:6e:98:5a:4b:e4:3e:50:43:9a:
5b:d7:6f:0a:d1:90:d0:15:04:36:eb:27:ba:63:55:
60:9b:91:43:96:a1:05:a8:f9:23:f6:dd:55:06:6d:
dc:03:70:b8:4b:a3:e6:73:bc:ae:72:8d:ce:14:c3:
aa:bc:d1:4a:7f:b2:c7:ef:83:c0:91:c7:fb:b3:20:
e7:bb:cb:94:3c:47:46:42:53:dd:78:a0:29:12:4f:
f1:d3:18:13:c9:74:35:e2:80:1d:b0:a7:ee:c8:f2:
89:0f:7e:5a:f1:33:12:80:2d:04:6c:af:ad:21:20:
79:02:cb:86:e2:aa:c8:3e:c5:da:67:ef:0e:e7:99:
af:66:42:33:d8:86:10:38:00:1d:03:33:15:d2:46:
ae:cf:9f:9f:99:78:c4:c6:7f:28:26:84:f8:85:3a:
5d:51:f1:36:ba:e3:be:f8:14:e5:bf:f8:b1:a1:c8:
89:9b:29:36:98:b7:75:cd:61:35:29:85:11:f6:6e:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:43:B2:05:15:12:47:C1:13:12:F0:01:B2:EC:5D:A7:70:6D:52:3B
X509v3 Authority Key Identifier:
keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e9:8c:9e:32:c5:39:a1:d7:9f:d0:52:5e:e6:3f:46:19:f3:
ea:0b:93:c5:0f:77:c7:88:b0:2a:64:68:7c:8c:1e:8c:03:23:
66:4d:94:6d:19:b4:29:14:fc:61:42:0b:c1:93:53:cc:3c:c5:
33:e4:a2:55:80:1e:f4:84:32:84:11:ff:07:02:f3:4c:a4:1f:
34:e4:d8:be:3e:bf:26:b2:3c:f2:f1:e5:48:62:55:4b:23:b4:
ed:01:9e:50:d4:01:2b:e7:87:4b:87:53:06:58:2b:cc:7c:9d:
81:ec:0a:22:ae:9b:36:b4:e7:60:a4:47:a9:45:b8:59:29:13:
7e:f2:1d:ae:54:fd:61:42:ea:69:39:4a:c1:91:fb:e0:e0:18:
19:2e:c5:a8:e7:3a:c4:84:7b:61:d9:53:fc:20:fb:f1:10:03:
64:d8:d3:20:23:8e:73:dc:5b:dd:53:8a:e9:56:42:76:0a:4d:
4e:c7:78:d4:78:59:bd:8e:73:87:17:5c:1f:ec:27:60:b8:e0:
ba:d4:08:fd:8b:96:da:fa:6f:16:b0:f9:a6:00:f6:21:39:11:
c8:58:40:89:f2:29:f6:fb:41:a6:0f:1f:f6:af:b4:a3:b7:0c:
73:8b:f8:d8:ab:15:14:64:b2:b0:10:7c:b2:f1:fc:2f:e3:3b:
3e:e7:22:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:49 2026 by rpki-client