Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier: AKqpCq0zm1GxmmVgu7RSfaReZ+a0t6CMJev9FLYGHsM=
Subject key identifier: 80:CE:A4:A8:E8:64:47:CE:4E:49:8B:C7:0C:EC:33:A6:CA:4E:09:86
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial: 019D371BFCDE57011B3CCA79B1854504788E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number: 1520
Signing time: Sun 29 Mar 2026 01:01:14 +0000
Manifest this update: Sun 29 Mar 2026 01:01:14 +0000
Manifest next update: Mon 30 Mar 2026 01:01:14 +0000
Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: RuUgrGGMtrTsdpUPiRulUkQCAuEomtLV5zLcgfeLLE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:fc:de:57:01:1b:3c:ca:79:b1:85:45:04:78:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Validity
Not Before: Mar 29 01:01:14 2026 GMT
Not After : Mar 30 01:01:14 2026 GMT
Subject: CN=80cea4a8e86447ce4e498bc70cec33a6ca4e0986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:9e:94:10:44:5c:af:8f:49:bd:18:20:b9:
5d:81:bb:e1:4f:5f:82:a6:12:30:f4:fd:e1:84:5b:
37:cf:a4:e7:30:26:c3:0b:dc:31:a5:18:40:ae:60:
84:6a:05:91:97:cc:43:4c:1b:ba:8a:35:61:e3:a7:
bf:8a:58:e3:c0:e8:85:59:10:45:79:af:94:1a:4e:
d6:2b:55:e2:0f:df:53:46:0a:77:34:6c:f4:67:a0:
d6:1b:79:a3:9e:7b:e5:3a:e3:8c:1f:f6:9e:b2:2a:
4d:9c:90:f4:14:6d:5e:99:d7:ad:a8:d0:b7:f2:42:
b2:ad:17:26:f4:a1:83:2c:ef:15:f1:1f:5e:de:98:
ce:41:ff:ce:65:4b:bd:41:59:88:07:8e:47:d2:de:
e4:c8:ab:a3:e9:3c:11:9f:35:74:61:4c:9f:31:db:
1f:35:01:1c:0a:16:bf:83:ba:b8:19:eb:c4:f4:f6:
59:9b:11:aa:d4:f1:b2:78:04:e4:91:a1:6a:0d:dc:
06:d0:e8:4e:6b:93:dc:73:f5:a3:13:da:25:7c:ea:
5a:a1:f7:2d:0b:95:66:77:4b:10:cf:31:a9:15:d8:
5b:ee:ba:9c:28:d0:5f:bb:88:65:e2:a9:a9:d3:ae:
19:88:47:3b:b3:98:db:3a:12:90:44:5c:3b:53:5e:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CE:A4:A8:E8:64:47:CE:4E:49:8B:C7:0C:EC:33:A6:CA:4E:09:86
X509v3 Authority Key Identifier:
keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a4:e0:63:63:a1:33:bc:65:ee:1b:c9:45:f5:41:74:0a:ca:
50:a1:a7:67:25:f8:ae:77:5b:cc:40:79:2b:2e:e1:0a:d9:38:
ba:05:cf:c7:f5:55:30:b2:39:01:99:c2:ad:52:17:2c:a7:01:
dc:b7:a5:ad:c7:60:18:14:15:63:ff:2f:cf:c4:40:13:aa:4c:
e5:ed:d4:2a:15:51:c9:8e:03:57:a7:d4:d8:0c:98:4f:09:73:
21:10:61:da:f7:93:c9:a6:56:63:7a:a3:ce:86:92:d3:58:24:
90:f8:04:91:47:0d:27:43:35:a8:9e:ff:f1:fd:a4:c9:4d:6e:
47:0f:87:34:88:bd:fb:0a:2e:db:f2:52:31:78:5b:c4:a2:ba:
49:e4:d2:80:84:7b:ce:e3:c7:69:66:38:f4:e5:2e:a7:6b:22:
dd:08:73:ed:70:bf:21:90:c5:9c:29:e4:24:4a:50:07:d8:28:
46:68:50:4b:31:a1:64:78:65:74:d6:05:97:9c:ca:ac:db:ec:
3e:63:0f:ca:0e:31:b7:27:d2:a8:da:17:a9:c4:77:87:4b:1c:
a5:dc:40:db:b1:a3:4d:5f:cf:c3:7c:a0:52:ff:3e:10:2f:d7:
0d:fc:24:d6:7f:c9:48:7f:ca:2d:ee:5f:9a:91:45:b4:6d:69:
92:75:b7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:11 2026 by rpki-client