Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
File: YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json)
Hash identifier: u0it9CkXSyGN0e5z9bzVGtBQmBIZgzZVXeF4MrML8yY=
Subject key identifier: 67:1C:0F:4A:D5:D8:FF:48:1C:BD:48:25:DB:5E:F5:85:89:5B:83:3F
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Certificate issuer: /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial: 019D2A72A2D2EA90D1788F186C07EAB9FF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
Manifest number: 0F4D
Signing time: Thu 26 Mar 2026 14:00:48 +0000
Manifest this update: Thu 26 Mar 2026 14:00:48 +0000
Manifest next update: Fri 27 Mar 2026 14:00:48 +0000
Files and hashes: 1: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: xETQbuUoIYfHTgAzL56HKu5P9mKvZfS0exFLZOHswMA=)
2: ddYTOcOmB0o9lm0zE3zt2oO1U1g.roa (hash: hdKwDZDL26ytQwp0S8rV3Crlq4ka+0ODIpyfMgGOmSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:a2:d2:ea:90:d1:78:8f:18:6c:07:ea:b9:ff:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Validity
Not Before: Mar 26 14:00:48 2026 GMT
Not After : Mar 27 14:00:48 2026 GMT
Subject: CN=671c0f4ad5d8ff481cbd4825db5ef585895b833f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:cc:55:36:c9:92:94:05:be:fa:93:97:12:
0d:56:39:7e:ab:86:06:e5:c7:68:35:8d:ae:6f:6b:
c0:33:0d:d0:fb:50:fa:98:41:8b:1c:46:0e:ed:91:
d6:70:63:fb:24:1f:c8:5f:ea:2c:80:29:f5:07:78:
53:c4:95:19:fc:dd:01:99:80:e2:3d:2c:49:fe:c4:
1b:03:1c:fa:d7:26:2c:20:dc:b0:ba:e8:48:49:55:
07:72:15:95:32:d4:25:01:f8:af:02:51:52:b6:4a:
fb:7f:1d:14:3c:0b:41:33:f7:a4:bf:79:0c:dc:16:
21:3e:b8:1c:50:30:c1:bc:5d:0a:be:64:36:b3:04:
5a:f7:26:8c:6a:61:68:72:c2:dc:45:21:35:2c:f0:
78:16:44:db:97:2b:b3:65:72:c0:f6:ec:cf:b5:ee:
6a:a2:6b:16:df:b9:2e:50:2b:18:ef:1f:7f:0e:38:
62:66:4b:1e:3b:d1:47:3b:7a:8e:eb:0a:98:8e:11:
ea:eb:2f:bb:af:13:55:c5:c3:6d:16:55:af:d3:2b:
fb:43:fc:1a:0b:05:84:90:27:09:e8:fe:0b:73:3a:
3b:7e:d6:ae:19:5c:0c:1a:59:92:13:58:11:a1:af:
65:a0:72:cb:62:65:ac:fd:e9:7a:36:1d:64:97:6e:
ae:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1C:0F:4A:D5:D8:FF:48:1C:BD:48:25:DB:5E:F5:85:89:5B:83:3F
X509v3 Authority Key Identifier:
keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1c:3d:ac:b4:99:c5:8f:a3:1b:34:8b:33:d3:e7:b7:70:87:
c5:d3:a1:38:40:12:e4:fd:9c:c7:d4:2e:a8:e5:03:5c:12:09:
ca:20:a2:19:07:70:3c:eb:19:30:25:9e:dd:1d:14:f0:37:93:
e9:51:74:fa:e3:84:67:c1:90:39:ea:0c:35:b5:21:77:ea:7b:
05:9a:ba:26:36:73:d4:b5:b1:27:05:cc:f6:37:4d:80:34:77:
96:13:b6:73:16:66:ec:75:3e:16:47:0f:d7:10:e9:cd:6f:16:
79:b0:32:e8:e1:ca:9f:71:e0:32:62:fc:eb:ad:a9:04:45:68:
06:68:30:ab:bf:fe:8f:26:7c:ba:48:a7:23:e1:8b:cc:5f:10:
47:89:83:89:65:22:ae:f6:9f:61:18:b2:85:af:de:8c:42:fa:
c6:f9:49:48:ca:ce:43:ad:51:f7:30:26:54:a8:c7:7b:8e:26:
4d:55:c2:1c:9a:aa:3d:5a:bb:0e:60:ee:1b:4b:38:44:c5:fd:
cf:9f:47:81:c3:3c:64:18:6e:0d:4b:93:66:1d:69:ee:b1:47:
4f:cc:73:80:e3:6d:74:09:bc:04:55:49:5d:cb:d8:62:cd:bb:
eb:7e:5b:ec:fa:5f:e7:f2:da:13:26:32:6f:98:7b:76:0c:0f:
2d:bf:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:41 2026 by rpki-client