Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
File: YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json)
Hash identifier: XoB0C7U/JB9zDOym4PdZZNvi/nYZUEG1+GRGGamcGDM=
Subject key identifier: 43:D7:CC:50:38:EB:EA:17:79:85:1B:48:F7:48:46:91:B2:D3:DF:18
Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
Certificate issuer: /CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Certificate serial: 019CAD5A2C8D3D2DA101AFD1891AF42E5978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
Manifest number: 092B
Signing time: Mon 02 Mar 2026 07:01:33 +0000
Manifest this update: Mon 02 Mar 2026 07:01:33 +0000
Manifest next update: Tue 03 Mar 2026 07:01:33 +0000
Files and hashes: 1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: 0TIURF42weQ1i0xJv/ITOrz3CxDEjRXq7TlGjWCHgD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:2c:8d:3d:2d:a1:01:af:d1:89:1a:f4:2e:59:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Validity
Not Before: Mar 2 07:01:33 2026 GMT
Not After : Mar 3 07:01:33 2026 GMT
Subject: CN=43d7cc5038ebea1779851b48f7484691b2d3df18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:f6:f7:79:8e:40:aa:94:9f:80:07:42:8c:
6d:4e:e9:70:2e:39:4e:ce:ad:0a:17:57:44:ad:88:
ce:e0:28:98:18:21:7a:cf:29:b6:94:2c:63:ab:4b:
fb:75:51:99:f0:5b:15:75:e2:c0:33:bf:62:51:08:
e2:e2:d7:1c:f3:22:fe:98:e1:97:b3:ae:09:b9:32:
6c:38:1b:94:26:f0:aa:a2:43:91:82:4c:2b:67:78:
d5:0a:ac:69:9d:d5:b1:3c:33:72:27:7b:55:f9:57:
bf:6e:87:6e:00:49:f8:0c:60:a7:b5:0d:55:47:a8:
71:85:c6:f3:66:1a:07:0e:ec:b3:b6:07:fb:29:7a:
04:11:27:22:e2:b6:56:8c:91:dd:e4:c4:e6:72:1a:
df:93:1d:8c:3e:a8:06:b1:75:64:1a:06:b3:9a:0e:
78:08:85:26:69:67:e3:52:6d:77:ce:ac:6e:31:96:
ef:dc:f7:f3:3b:c2:a6:37:fa:88:d6:8a:40:14:94:
81:13:5b:ed:3d:0a:d2:56:f5:11:b9:09:2c:21:74:
dd:80:f8:cd:74:2a:f4:24:e4:18:cf:fb:63:a9:bd:
4a:0c:eb:c0:f2:c4:ac:87:80:1f:fb:14:a8:d7:da:
74:30:b5:03:f9:22:cc:ba:4a:ab:24:d5:35:d2:ab:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D7:CC:50:38:EB:EA:17:79:85:1B:48:F7:48:46:91:B2:D3:DF:18
X509v3 Authority Key Identifier:
keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:05:b0:ca:f6:03:d4:5b:d5:8c:d7:10:f1:61:45:d7:4e:e2:
95:34:91:25:a5:12:b8:07:cc:4a:f1:f6:b8:41:af:7e:14:9e:
6a:fa:90:b5:20:0c:26:aa:87:0c:a3:06:bf:90:98:87:cb:d6:
61:e2:2a:44:b7:ed:68:7f:4b:dc:51:85:0e:dc:ea:3c:75:2f:
99:e0:b9:86:c5:1e:59:a4:96:b7:38:11:ce:d5:fc:57:7a:09:
f9:4d:6b:97:05:f2:27:8e:ac:e6:d0:0e:38:38:e5:1a:86:63:
a5:15:67:8e:23:2a:11:c4:16:94:ec:97:b5:8d:74:0a:04:1f:
4b:30:ee:39:52:ee:98:61:2e:e1:37:47:8f:1d:c9:1c:44:80:
18:ff:26:16:a3:4a:40:e3:6c:78:07:6d:b5:83:e9:07:b2:d4:
c2:6a:1c:8a:27:b6:39:04:18:d9:8c:01:12:fe:10:4e:b8:c5:
d8:19:5e:fa:59:0b:66:8c:a2:c6:9e:d2:e1:fa:1c:7f:78:54:
a0:cd:a3:1c:af:8a:d4:d9:42:f5:d9:06:94:58:5f:3e:57:72:
33:f4:b8:c5:d0:d0:7a:f5:47:ec:43:d3:7f:84:2a:fc:0f:46:
9a:1f:02:70:8c:e3:a3:e9:12:cb:16:44:e0:d8:c1:08:93:ad:
ed:cc:93:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:34 2026 by rpki-client