Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
File: YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json)
Hash identifier: rApKEfItHBbkxkSqFCCuivjBKOC0cIITr/jqCZ5v7Zc=
Subject key identifier: F4:6F:AD:82:F7:8A:10:66:68:2E:F1:67:E7:43:BC:8E:64:7B:3D:DA
Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
Certificate issuer: /CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Certificate serial: 019D3865AC4258FCA0009F355BB1A0878DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
Manifest number: 0973
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: vNvO999wx4NWgoZQ3ypU5zX6g0Z31+kRr77tGkVTDyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ac:42:58:fc:a0:00:9f:35:5b:b1:a0:87:8d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=f46fad82f78a1066682ef167e743bc8e647b3dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c4:34:49:ad:33:a0:db:b9:d2:2e:b4:07:8a:
48:a9:b4:57:97:3d:19:80:28:86:7f:31:c5:20:4d:
0b:80:a3:5e:60:d8:b3:5c:61:da:68:fa:24:82:59:
3d:74:d9:70:44:0f:e6:65:b1:b5:0b:f1:c5:47:75:
8e:2f:01:3b:a4:4b:18:95:58:3d:f9:6f:28:84:2e:
62:50:52:70:13:7c:20:98:a5:4e:08:a4:eb:30:6d:
14:62:fd:12:8d:59:04:76:b4:10:b3:56:20:f6:2c:
b2:40:9c:bf:ae:6c:f3:96:b5:6f:13:1a:26:b0:4e:
48:6d:0d:b1:44:32:7a:3d:63:43:50:dc:29:a1:c7:
29:7a:c9:99:8f:54:43:ed:21:e8:89:bb:6f:a4:0d:
26:11:7d:eb:43:88:70:0e:90:00:8b:e3:a6:5a:89:
49:a8:c8:2b:c5:d2:80:68:3f:5a:99:52:e2:27:02:
74:d1:a4:81:29:34:21:65:dd:44:63:4b:29:b8:15:
1f:55:77:d5:1b:61:8b:d4:6e:ea:85:fb:53:6b:d9:
b3:fb:1a:f8:b6:9d:a8:c6:61:2c:29:e2:80:59:da:
53:b0:43:72:85:64:5d:eb:f4:c7:b0:f5:6f:2a:21:
45:a2:f5:d3:3b:89:d7:2a:cc:82:6e:6b:37:8e:63:
f3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6F:AD:82:F7:8A:10:66:68:2E:F1:67:E7:43:BC:8E:64:7B:3D:DA
X509v3 Authority Key Identifier:
keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d7:40:34:46:a6:c0:aa:c1:cd:d1:83:29:38:67:ed:a0:a0:
01:cf:70:7e:3b:a2:9c:93:bb:17:ea:8f:6f:1a:49:22:98:7d:
2b:fc:81:86:65:79:80:5c:57:d4:c6:4f:5c:c6:d3:88:83:66:
c7:9f:4e:0c:dc:c2:18:2b:0b:3e:23:53:55:3d:89:2e:9f:33:
c1:0f:fa:8c:5e:95:b4:7d:83:96:18:46:84:9d:4f:23:df:a0:
5a:3b:29:2e:d8:6d:97:ec:58:99:5f:53:9d:04:47:dc:23:e8:
ad:a2:26:1d:b3:d5:10:34:1c:e0:8b:b7:9d:72:48:15:c6:c9:
b6:d0:2d:49:0d:a6:60:db:15:42:03:c2:dd:9e:7e:c9:e0:4d:
cd:f8:78:0f:d0:82:c5:af:62:b4:f1:c1:18:92:5b:9b:c0:fc:
c5:94:d4:c8:98:db:d1:0e:b5:38:18:32:cd:18:08:02:06:0e:
f2:e4:fa:30:5c:b4:66:e0:0a:25:fb:3b:b9:04:ca:d3:31:a4:
d4:c6:be:06:e7:24:83:85:ea:c6:22:1f:77:e2:10:83:16:3a:
e5:70:34:c7:ae:47:68:9b:f5:53:e3:8f:c5:ed:a4:27:1c:d4:
d7:49:26:98:e0:f1:f6:96:08:c7:1c:8c:ad:53:07:19:3f:4c:
34:ad:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:16 2026 by rpki-client