Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier: iMswT4u8jwL/qig04fMEC7FmIzADQMzFgrjpgmuWeTA=
Subject key identifier: FF:4B:83:FC:F8:9E:70:97:C8:8C:ED:92:44:CA:FE:B8:BA:44:1A:8E
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial: 019CAA218A6331C97594B6CC966DA3D3E7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number: 14D7
Signing time: Sun 01 Mar 2026 16:00:50 +0000
Manifest this update: Sun 01 Mar 2026 16:00:50 +0000
Manifest next update: Mon 02 Mar 2026 16:00:50 +0000
Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: rTzvt4+pwxzM7yE+hMflpgWBcd3CITJ3o/MI1jWUL60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:8a:63:31:c9:75:94:b6:cc:96:6d:a3:d3:e7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Validity
Not Before: Mar 1 16:00:50 2026 GMT
Not After : Mar 2 16:00:50 2026 GMT
Subject: CN=ff4b83fcf89e7097c88ced9244cafeb8ba441a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:7b:ff:83:96:cf:40:51:b2:38:aa:19:77:
8b:6f:78:2e:89:a6:03:ee:f8:98:d6:b7:ee:5a:89:
c2:e7:4a:79:8c:de:8f:e5:d0:f4:98:39:8d:00:0b:
eb:f2:c2:7c:ab:bf:b8:6d:ac:3e:a9:c2:6d:e6:0e:
19:c5:9f:21:16:28:e0:dd:19:32:c1:64:25:e8:c4:
04:fb:2d:b6:1f:8e:ce:11:83:8c:03:e9:af:72:d2:
33:de:43:42:ef:c9:ca:69:fd:b1:6e:eb:0a:1b:66:
94:e1:8f:d7:94:3f:9e:b4:9d:ce:61:67:4f:4a:f5:
1b:4d:18:f5:9d:20:b6:da:df:3c:7f:83:08:2e:c8:
41:45:a1:04:14:f6:d8:34:6e:cd:fc:f3:f8:15:2c:
23:86:2a:ae:ef:d5:bf:fd:26:e3:07:ac:e3:8f:1f:
78:10:6d:c5:16:70:8b:04:2d:b0:4f:e3:0b:bd:ed:
c5:4a:23:46:e0:82:cb:ae:38:ee:13:7c:9a:db:61:
bf:e4:d3:75:18:ab:78:8d:65:2c:e6:a3:23:dd:a5:
9d:be:4c:46:7a:02:56:76:10:1f:ff:b2:e4:f3:07:
e2:94:29:91:b7:ff:48:13:60:c7:9b:d7:9d:9b:85:
a7:ed:f0:17:9c:f8:5d:28:1d:73:6b:c6:8c:d3:37:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4B:83:FC:F8:9E:70:97:C8:8C:ED:92:44:CA:FE:B8:BA:44:1A:8E
X509v3 Authority Key Identifier:
keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:22:1c:d0:5d:dc:10:0a:a5:05:cd:f4:49:56:78:b5:aa:aa:
21:0d:0b:a9:5a:3d:8f:e9:78:59:64:c0:35:f2:af:38:ed:09:
fb:24:67:e5:17:77:36:03:7d:be:4d:96:64:0c:90:66:48:01:
bf:84:8e:44:2f:16:71:e6:c7:43:c6:57:43:12:c6:d0:38:ec:
68:14:04:70:1e:07:81:b5:61:ba:3a:f2:ce:0a:df:ce:37:09:
01:53:8a:9b:ad:0e:29:42:03:40:e8:aa:2e:ef:4e:2e:85:ff:
e9:59:4f:a8:84:72:48:aa:6c:fd:2f:91:a7:53:f9:37:36:d8:
55:33:f4:c2:ee:29:46:35:07:78:8b:e0:7c:b5:12:5d:83:70:
04:e8:3e:ae:02:81:3f:bf:1b:49:f2:97:f6:42:2e:99:47:f6:
02:35:bb:be:3e:bd:f0:d7:84:7c:97:85:f4:55:61:b1:b6:07:
11:b7:c1:5d:56:9a:ff:a8:f3:94:7a:ed:75:92:cd:94:17:bc:
14:8a:21:09:c3:24:21:7b:e9:db:4f:ad:67:2d:01:de:04:93:
44:d4:d2:ac:d6:45:9f:f5:c4:19:a9:12:6f:75:69:b8:55:79:
2b:5a:df:3d:8f:9a:73:93:73:b1:f5:0a:15:13:e6:3f:b4:81:
3c:1f:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:34 2026 by rpki-client