Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier: evqmIxCjm/SpVJN+IwPOxvXrJGQRss1rr163ICZf7kY=
Subject key identifier: DD:FA:AE:2D:1D:C0:C9:6D:57:34:9F:C3:40:6A:69:41:C8:7A:61:0A
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial: 019D99998147E2F81A93F96343A2774A30E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number: 1553
Signing time: Fri 17 Apr 2026 04:01:07 +0000
Manifest this update: Fri 17 Apr 2026 04:01:07 +0000
Manifest next update: Sat 18 Apr 2026 04:01:07 +0000
Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: GusIryUXQBPK6RCJ/ChOplLBPBfQu5KKWG9cmCYgLpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:81:47:e2:f8:1a:93:f9:63:43:a2:77:4a:30:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Validity
Not Before: Apr 17 04:01:07 2026 GMT
Not After : Apr 18 04:01:07 2026 GMT
Subject: CN=ddfaae2d1dc0c96d57349fc3406a6941c87a610a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9e:77:32:54:4b:1a:bc:d6:af:ee:f4:ec:86:
bc:d1:c1:0f:99:d7:80:b7:8e:65:64:85:2a:e4:a0:
60:47:7f:4c:1b:13:20:a3:6b:05:d5:c4:77:6e:ed:
69:2c:38:fd:f1:f0:f7:d1:d1:e2:a4:17:2b:dc:31:
78:fd:1b:93:84:48:33:83:39:b9:6b:29:3e:08:00:
c1:09:09:bb:5a:96:62:32:aa:75:02:a6:06:41:7d:
7e:8f:58:0d:42:39:02:d3:68:fb:d1:84:5f:fe:82:
c5:8d:e3:94:df:0c:46:32:fd:f8:cb:06:69:c3:75:
e9:95:c8:48:32:cd:0e:a5:12:91:96:20:ac:15:2a:
ed:06:51:1d:a5:0e:a1:cc:a8:da:ef:ad:96:51:da:
80:6d:e3:da:ac:5e:5c:36:91:9f:dc:02:56:68:0f:
34:1c:e8:30:cc:ae:e4:b9:65:5b:61:ec:36:8f:a0:
0b:7d:ed:ed:9f:13:7f:4b:25:16:76:0c:c0:a8:f8:
52:12:f7:3d:af:16:30:85:8f:4c:6d:3b:d5:6a:fc:
d5:52:6b:c2:5a:10:fc:85:68:a2:c1:f4:0f:67:db:
d1:b3:10:0e:ca:8e:f9:8e:9a:73:e9:b5:fc:08:c6:
64:5e:7e:c7:72:7b:3e:f0:e7:e1:bd:b7:cb:3e:e9:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:AE:2D:1D:C0:C9:6D:57:34:9F:C3:40:6A:69:41:C8:7A:61:0A
X509v3 Authority Key Identifier:
keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:34:0e:de:93:f7:ed:e8:97:9f:95:08:65:22:73:60:66:a7:
d2:e3:dd:63:00:20:e2:48:77:9a:75:10:96:de:48:b9:08:2b:
a5:b5:1e:80:c0:23:1d:45:38:9a:17:ba:af:fe:2f:f1:e9:1c:
54:44:72:7b:c6:e7:e7:b7:65:82:d3:fe:6b:ca:49:c5:bb:33:
10:95:21:5a:1f:2d:b6:3c:01:ae:6d:26:ec:ae:9e:52:71:91:
db:cc:93:f5:b9:2f:37:a3:66:59:e7:d2:ed:54:20:22:8b:27:
1f:21:f7:60:9c:e0:3b:7a:83:37:ee:09:75:2e:85:9d:a7:dd:
9c:0c:95:57:e3:a7:0b:0c:4c:42:6e:b6:05:2a:86:25:34:74:
73:7c:58:6a:d7:34:00:6c:1e:b8:ce:19:62:af:7b:3f:d8:ee:
39:91:3b:43:9e:ec:6e:39:42:ad:46:6d:e7:bd:dc:55:69:c8:
ce:fe:5c:88:e1:33:88:68:a7:52:d9:a3:56:85:4c:3b:77:ec:
c4:ee:85:31:fd:30:cc:3c:f7:3c:6d:28:83:eb:df:f5:ac:74:
9f:0c:ce:c3:e9:8c:d0:c4:54:af:e0:35:1b:7b:aa:13:8a:4f:
91:e1:c6:e3:f3:57:3a:97:f0:bd:4f:a3:81:6d:63:e4:35:1e:
93:e1:71:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:15 2026 by rpki-client