Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
File: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft (raw, json)
Hash identifier: oVrory9JWc8XgNTDLKnZZavuOMq4gvJroCEM2pQ3xX0=
Subject key identifier: D5:57:27:82:67:25:01:31:70:78:3E:FE:2A:89:4B:20:39:B5:65:41
Authority key identifier: 60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
Certificate issuer: /CN=600b113e062d17ea230806b34a21deb5627b6774
Certificate serial: 019D9AE3464179A5FBDC4DFC47F65079B7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
Manifest number: 153F
Signing time: Fri 17 Apr 2026 10:01:18 +0000
Manifest this update: Fri 17 Apr 2026 10:01:18 +0000
Manifest next update: Sat 18 Apr 2026 10:01:18 +0000
Files and hashes: 1: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl (hash: tjO4dxYmFfQis6RlXWClGqaeZ8eI3OqPY8cTvDYDQzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:46:41:79:a5:fb:dc:4d:fc:47:f6:50:79:b7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600b113e062d17ea230806b34a21deb5627b6774
Validity
Not Before: Apr 17 10:01:18 2026 GMT
Not After : Apr 18 10:01:18 2026 GMT
Subject: CN=d55727826725013170783efe2a894b2039b56541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:7a:0b:75:c5:e6:76:90:d2:b7:37:34:6f:
40:be:4a:b1:d4:e1:60:cf:35:9a:f9:11:bd:4b:e1:
bb:d9:2c:d0:1b:bf:bc:98:3d:7e:ba:ef:c7:2c:9b:
13:b8:26:3e:9a:e1:f4:f1:3b:53:3b:6e:4e:98:e7:
04:3b:6b:e8:d6:5e:cf:a1:7d:5f:eb:89:40:5d:c8:
5b:58:63:2f:c7:99:6a:40:13:ed:77:9d:81:c9:33:
ca:7c:76:8a:30:94:4b:03:27:80:c2:45:ed:39:26:
ea:d8:8e:ab:ef:55:c4:3a:a8:33:b4:0b:5b:0b:94:
cd:34:45:c1:a9:b6:d1:c8:19:88:f5:8d:6c:b3:59:
62:06:dd:9c:4e:2c:13:74:31:e6:9f:a2:eb:28:fb:
ba:4f:59:d6:e6:b4:86:57:d9:bb:34:41:3c:0e:9b:
e6:54:30:ec:96:5c:40:ed:58:17:01:6b:02:68:6e:
45:b5:9d:06:8b:5e:d2:8a:b3:64:31:ea:f4:e4:c4:
09:08:4f:c0:64:6d:91:3f:3b:a8:f5:7d:b0:50:2c:
a5:97:3e:8f:85:73:59:02:48:ba:43:f2:bc:e6:11:
b7:d7:5a:3a:30:e7:f6:fd:27:bc:44:85:61:f6:bf:
67:6f:bc:54:eb:af:af:c4:68:73:42:93:2b:26:24:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:57:27:82:67:25:01:31:70:78:3E:FE:2A:89:4B:20:39:B5:65:41
X509v3 Authority Key Identifier:
keyid:60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:47:df:68:57:3a:01:8b:4e:58:28:27:c1:33:b7:1a:35:36:
5d:3b:6e:10:e5:ac:3a:ee:ab:a5:5c:53:14:19:8a:42:86:b0:
d8:ba:b5:75:61:65:a5:53:0a:78:31:a2:b2:00:6f:f5:05:6e:
c4:4a:0c:2b:da:9e:74:85:96:53:6a:6e:8f:88:92:84:3f:2e:
21:1e:ba:55:f8:a8:37:fd:bb:c1:0f:7e:ee:de:45:42:7d:94:
2f:14:37:42:7f:79:58:d2:48:c2:8a:eb:34:3b:b3:29:69:f9:
e4:9e:a8:02:cd:4d:84:31:7e:c0:0b:0d:74:76:57:e5:c1:ab:
c3:c4:bd:4d:75:a1:5c:b9:b5:a5:ac:45:40:62:65:90:21:c1:
b0:cc:9b:f3:13:45:a9:60:55:f4:86:8a:b9:2c:50:9f:99:9a:
eb:62:ff:4b:26:56:47:24:30:43:75:e8:82:19:77:e3:8e:27:
5c:29:47:02:e8:60:f5:d9:b2:5b:1f:86:7b:1b:d0:54:76:45:
67:98:fa:51:b1:b6:04:47:a1:51:04:bd:f3:15:09:f1:3f:00:
bf:19:37:60:e4:89:38:3b:6d:db:6b:b1:ae:1b:d7:c2:ca:e8:
37:39:89:c2:76:45:59:97:dd:78:d4:eb:cf:72:68:dd:b2:6b:
a4:79:5f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:09:45 2026 by rpki-client