Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
File: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft (raw, json)
Hash identifier: fIduYk3NJfvkz8IdhFyGvZQGx6w8KKiIt7NES47XbUk=
Subject key identifier: B2:26:FB:D3:64:04:3E:32:C5:70:EC:21:AD:25:64:D2:C2:32:F2:51
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Certificate issuer: /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial: 019D39779832B5E210FD8F92F3B6085F7080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
Manifest number: 17FA
Signing time: Sun 29 Mar 2026 12:00:32 +0000
Manifest this update: Sun 29 Mar 2026 12:00:32 +0000
Manifest next update: Mon 30 Mar 2026 12:00:32 +0000
Files and hashes: 1: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl (hash: f2MvxM/duh7nt0bGbkceJ9QZcWkxkJUGuv7VVHJtffI=)
2: sw8tmXWb62c9gz1qsBrZbffyXTY.roa (hash: b0ehz9drkVBnOmXweW7dtXPuDg7z70w2Le8bMJVLAGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:98:32:b5:e2:10:fd:8f:92:f3:b6:08:5f:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Validity
Not Before: Mar 29 12:00:32 2026 GMT
Not After : Mar 30 12:00:32 2026 GMT
Subject: CN=b226fbd364043e32c570ec21ad2564d2c232f251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:19:51:87:89:64:51:66:0b:14:01:75:2d:
e6:05:80:62:6c:2a:48:c4:bf:83:00:1f:d2:f8:4e:
d4:fd:b5:e1:bb:17:c3:dc:13:e3:62:ad:65:fe:90:
8d:d1:dd:6e:b1:e7:d4:04:48:df:a3:99:4f:0c:a4:
f9:3b:6b:f3:e8:af:0f:1e:c8:b4:75:03:7f:4a:40:
6e:d0:ce:06:33:f5:d5:55:6b:11:80:01:cc:f5:c9:
71:68:e0:69:b3:58:5c:89:35:37:3d:f1:d0:55:14:
81:85:24:b0:e3:0d:44:0f:05:fc:57:39:59:03:12:
98:0a:18:9a:49:05:ac:dc:57:1b:72:ef:c1:20:15:
26:bd:b2:20:f7:9e:05:c3:15:a2:8a:fa:76:1a:1f:
a9:93:c3:84:fb:98:af:b0:52:f0:8e:b5:af:e1:68:
ae:7a:c8:d6:ff:19:74:16:6d:96:4f:ce:8f:1a:25:
39:c9:51:07:55:be:cd:2d:be:4c:6c:57:17:a2:6e:
d8:3c:b2:56:2e:b5:02:04:2e:a0:ad:4a:59:b4:ed:
45:b0:e0:e1:8e:2a:92:17:cc:42:0f:a9:90:ac:f9:
75:db:51:c6:0f:93:8b:5f:da:f2:25:e4:6e:bf:d3:
29:85:f4:09:c6:a0:82:c2:1a:56:07:f3:dd:d4:4a:
fe:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:26:FB:D3:64:04:3E:32:C5:70:EC:21:AD:25:64:D2:C2:32:F2:51
X509v3 Authority Key Identifier:
keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:27:7e:a4:07:82:7d:e6:6f:1a:00:a2:a4:a1:ac:92:f3:99:
71:55:13:c9:33:6e:46:60:13:e7:31:3f:51:d4:a9:21:a7:f4:
2a:dc:7f:bd:fa:41:1d:46:c5:02:6a:77:15:85:9f:ec:9f:99:
ea:7f:7c:80:f9:18:24:5d:4f:1a:0c:21:0c:1f:d1:70:a7:8a:
75:11:a8:e4:8a:4e:35:b1:8e:de:b8:b9:7b:40:20:fa:81:08:
8a:e7:64:7d:3e:69:23:88:f1:30:a4:b5:af:0a:32:e0:ba:36:
a6:7c:26:b4:8a:ec:c4:38:af:45:83:25:0b:a4:25:2f:15:22:
a7:68:b6:4a:ea:82:6b:2e:53:df:42:9d:c6:35:83:67:e9:1d:
b5:c9:40:d3:06:bf:cb:59:e0:32:8d:48:d5:3f:0b:ea:7c:ad:
2a:40:8e:c1:04:3f:9b:03:2e:66:5f:88:20:17:b8:09:3e:b5:
ba:93:e7:73:e3:d5:fd:9f:79:29:79:35:70:83:5d:80:00:e6:
63:c8:36:dc:84:c8:06:59:bf:b8:70:55:7c:76:48:ec:8e:cc:
d8:35:df:53:72:6b:64:a9:fd:42:41:09:c4:cb:bc:8c:ec:88:
ff:ad:b9:79:7f:22:95:ea:a3:c1:3d:e8:74:26:f2:28:dc:d2:
95:3b:18:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:19 2026 by rpki-client