Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
File: YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json)
Hash identifier: pXlQgbBmBrw/bNCy9w3+Z5LSVJybUfgU5ygHh6VtXWk=
Subject key identifier: 80:40:E9:DE:63:56:F5:4D:11:99:A9:46:C4:13:37:7C:60:0D:0F:35
Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
Certificate issuer: /CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Certificate serial: 019D9AE38F7D4B64BCF5AC191836D05F77D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
Manifest number: 09A6
Signing time: Fri 17 Apr 2026 10:01:37 +0000
Manifest this update: Fri 17 Apr 2026 10:01:37 +0000
Manifest next update: Sat 18 Apr 2026 10:01:37 +0000
Files and hashes: 1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: 579oQSTQZyahv5V39O+xoL1guHiMkgET285qE9z65do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:8f:7d:4b:64:bc:f5:ac:19:18:36:d0:5f:77:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Validity
Not Before: Apr 17 10:01:37 2026 GMT
Not After : Apr 18 10:01:37 2026 GMT
Subject: CN=8040e9de6356f54d1199a946c413377c600d0f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:97:2b:d3:40:ee:56:fb:ba:b1:74:8f:24:
2d:39:e9:45:6d:a8:3d:b6:82:be:c7:26:fc:3a:f6:
9e:6f:4a:ec:51:59:36:39:7c:11:e3:1e:80:f7:ac:
fd:0f:01:c3:cf:ca:cd:4d:a3:8a:45:61:4f:bb:49:
12:18:43:73:a7:d1:fb:10:b8:f8:66:5b:da:1d:73:
41:99:39:0f:c2:84:ff:4c:91:ab:8c:f6:03:ff:57:
1f:f2:64:a5:59:dc:f1:8b:5a:19:1e:f5:40:02:41:
9e:1a:3c:83:8b:77:81:9c:43:53:0f:65:0e:f4:94:
98:c8:85:2c:a5:2b:91:70:d8:80:5f:4d:1e:5e:06:
48:f2:5f:8d:30:68:8a:2e:11:c3:79:68:ea:4f:11:
6e:83:a6:8c:de:72:51:3a:23:74:5c:df:80:51:17:
2d:95:94:95:a6:52:56:74:a4:4d:71:98:1b:d1:85:
51:12:a4:13:62:c6:56:e3:ef:d4:b5:d8:ea:9a:8e:
e3:3e:6a:dd:8b:44:14:16:58:20:27:8f:a6:4a:6f:
ad:d6:51:a4:70:dc:52:fd:bc:e0:e0:27:1a:ed:62:
67:ae:7e:df:a9:e1:af:2d:74:8e:80:4d:7e:fb:29:
a7:f8:10:66:40:7f:04:3c:c0:7f:88:bc:38:4c:17:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:40:E9:DE:63:56:F5:4D:11:99:A9:46:C4:13:37:7C:60:0D:0F:35
X509v3 Authority Key Identifier:
keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:67:2a:b1:7a:9d:a8:49:35:a3:ee:f9:8e:1b:a9:f2:ba:d7:
b5:41:0a:57:f3:31:54:1d:90:84:aa:3b:85:e5:cd:c0:fe:3a:
8f:34:f8:96:ee:48:16:7a:b3:f0:d4:52:97:cb:88:4f:dd:9f:
1d:0e:e0:0b:f8:66:ea:ea:ef:ec:2c:e3:cd:e8:dc:08:9e:3b:
0b:6d:53:69:78:65:0f:97:cd:0a:71:c3:ff:36:01:30:94:4a:
8e:6d:c1:b5:41:ae:19:57:d7:a6:1d:ed:cd:f4:0c:b3:3a:48:
15:94:f2:89:90:e2:6d:02:4a:98:87:e4:d2:87:38:a4:9b:e8:
d8:a4:99:2d:13:dd:4e:08:3f:98:4c:5f:41:3f:40:80:cd:90:
1a:ff:d8:33:72:1d:e4:30:cd:63:30:19:9f:c4:08:cc:02:8c:
15:90:40:6a:7c:3e:fa:44:95:91:78:bd:f2:f1:31:ab:8c:9f:
c3:2a:f2:cb:cf:c9:4d:a2:fe:68:d3:d1:0b:98:45:a5:41:e9:
79:19:1c:34:f0:78:64:e9:a4:be:85:39:54:9d:11:90:af:ee:
b6:44:93:f7:83:b7:3f:3c:c3:7e:0c:0a:1e:9c:85:51:2f:12:
7c:8e:29:f9:d7:70:2d:73:80:ad:ac:21:1b:91:58:35:3a:b6:
02:f5:50:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:34 2026 by rpki-client