Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
File: ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft (raw, json)
Hash identifier: ymVAZQpJIX0y989Xtx/rrJu8PTbyp4PqFVAqp0oI9XM=
Subject key identifier: C1:69:8F:87:BF:A0:FD:BC:86:2D:D9:19:FA:9D:B8:37:6E:27:6F:79
Authority key identifier: CA:45:7E:11:73:C4:E8:51:B9:2D:3C:8E:E9:96:71:51:94:8A:9A:E9
Certificate issuer: /CN=ca457e1173c4e851b92d3c8ee9967151948a9ae9
Certificate serial: 019D9998F24ECFF4693E41D75F1DCC23C2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 04:00:30 +0000
Manifest this update: Fri 17 Apr 2026 04:00:30 +0000
Manifest next update: Sat 18 Apr 2026 04:00:30 +0000
Files and hashes: 1: ykV-EXPE6FG5LTyO6ZZxUZSKmuk.crl (hash: XQhMsmMiRYxewicqsF3lR6Ql9Jelyoc/n3SSgnVig4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:f2:4e:cf:f4:69:3e:41:d7:5f:1d:cc:23:c2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca457e1173c4e851b92d3c8ee9967151948a9ae9
Validity
Not Before: Apr 17 04:00:30 2026 GMT
Not After : Apr 18 04:00:30 2026 GMT
Subject: CN=c1698f87bfa0fdbc862dd919fa9db8376e276f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e0:df:2f:4a:98:b5:2d:fc:3a:c3:a9:ec:53:
fb:95:87:a8:83:f4:61:f7:14:72:b7:e4:b7:e5:af:
99:f6:fb:02:a5:9a:e3:94:32:6d:d8:77:43:a0:b0:
d1:68:73:93:b6:58:06:9d:51:50:91:70:52:c7:6b:
a6:09:f3:62:9c:ae:36:84:da:66:d9:d3:f1:f9:34:
58:33:79:0a:59:d5:59:1c:2f:58:de:f8:6f:2a:53:
90:c7:ec:65:ed:c7:dd:a7:43:05:c9:a7:cc:77:73:
fc:ae:6c:72:d7:52:dc:8b:4d:66:97:07:37:34:4b:
90:6b:ca:11:22:f6:d4:fe:aa:9c:06:10:cf:4d:b7:
db:72:9f:bf:86:90:a9:59:5d:5d:b4:42:be:55:17:
e4:e6:25:ab:0d:53:0d:c1:3c:61:74:54:da:0f:03:
6f:d8:d5:6c:0f:a1:ec:5d:91:32:58:7b:22:a8:aa:
47:67:74:e0:57:65:b0:c6:06:c6:e4:ac:e9:c1:ff:
39:f8:78:ff:19:ef:4b:57:ac:e7:2e:02:f1:9e:80:
c8:f7:90:e7:3f:13:a6:15:5d:45:b1:3f:91:f1:27:
73:9b:a4:9d:44:75:88:06:ac:e0:d2:eb:2a:80:a5:
79:b8:29:d7:5e:a7:b5:a4:9f:e1:b0:d6:3f:fb:0c:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:69:8F:87:BF:A0:FD:BC:86:2D:D9:19:FA:9D:B8:37:6E:27:6F:79
X509v3 Authority Key Identifier:
keyid:CA:45:7E:11:73:C4:E8:51:B9:2D:3C:8E:E9:96:71:51:94:8A:9A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3f:dd:ae:25:23:ab:16:ab:80:19:32:45:96:12:1a:14:6a:
29:dd:19:3b:e3:41:10:de:54:16:50:9e:5c:09:f4:77:71:b3:
ec:40:43:fa:5d:2c:e1:98:64:1e:ca:1f:07:8b:99:39:e4:46:
1e:77:c4:d1:0c:db:4f:79:55:15:32:0e:dd:64:26:7c:d9:56:
48:11:49:82:3c:b5:ff:46:60:48:41:5d:3b:f6:b5:45:de:84:
a7:a3:17:72:34:b7:2f:30:50:1c:f6:18:0b:9e:68:e2:62:fb:
2d:ed:be:db:5f:5b:fa:4d:ef:2b:1a:39:6c:50:da:72:8b:b0:
03:e8:c2:30:6d:42:30:f8:17:bc:18:d5:d2:78:8a:37:cc:51:
f9:e7:44:16:dc:56:f8:fa:83:e8:3f:ae:40:3d:02:ed:39:f7:
f3:5a:be:9b:ed:b4:7a:6b:21:b6:bf:21:b6:f1:14:be:75:7a:
94:8c:ae:71:e9:cc:13:f0:43:62:1e:56:d4:75:c3:fd:1a:d3:
be:98:18:92:4e:08:1f:e7:68:57:0d:da:3e:f6:75:14:c5:8b:
4f:93:7c:8e:39:fa:65:bd:c1:03:d0:d6:fb:25:cb:c0:9e:0c:
8c:6a:61:ae:8b:66:91:e9:48:7f:b1:fe:f0:56:6d:0e:c2:20:
c4:8d:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:35 2026 by rpki-client