Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.mft
File: YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.mft (raw, json)
Hash identifier: K7isG1m4DyS77OIzbiHk6AZ36VCSiqP1SNJkUfXjzlw=
Subject key identifier: 85:91:46:DD:B1:E3:7F:4E:89:54:04:AD:D6:19:54:9C:CB:08:F1:0C
Authority key identifier: 60:CE:22:C7:F6:50:49:5E:B5:12:20:10:ED:36:F6:D2:64:BF:47:E6
Certificate issuer: /CN=60ce22c7f650495eb5122010ed36f6d264bf47e6
Certificate serial: 01A0EDE65F17B7491AD547F1D9E3945C9FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.mft
Manifest number: 45
Signing time: Tue 29 Sep 2026 16:01:32 +0000
Manifest this update: Tue 29 Sep 2026 16:01:32 +0000
Manifest next update: Wed 30 Sep 2026 16:01:32 +0000
Files and hashes: 1: YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.crl (hash: yCbZa3Ed0juXD4UDZKEm/6tbUJmN6OE8d4Gxgyhxz8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:5f:17:b7:49:1a:d5:47:f1:d9:e3:94:5c:9f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ce22c7f650495eb5122010ed36f6d264bf47e6
Validity
Not Before: Sep 29 16:01:32 2026 GMT
Not After : Sep 30 16:01:32 2026 GMT
Subject: CN=859146ddb1e37f4e895404add619549ccb08f10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:c0:89:04:b1:95:1e:13:6a:d8:7d:2c:83:
88:85:b5:c5:da:b1:d9:d5:69:51:1f:ec:82:0f:2d:
38:77:4a:4c:a8:bf:12:02:97:64:31:5a:36:bf:ec:
42:a8:df:a6:40:2a:e2:5b:c1:68:c0:db:d4:f8:45:
01:69:b4:1d:e6:e8:ba:57:37:65:21:7f:e8:07:2c:
b3:27:99:03:4b:2e:14:a1:98:f3:9f:42:44:bd:f5:
9e:53:12:f9:a2:ec:f9:c0:e9:f5:f0:45:e2:cb:c2:
74:14:3d:f5:bb:6e:49:75:e0:79:e5:28:cb:5d:0b:
98:87:4e:60:e1:86:bf:b6:56:84:ec:e6:1c:3f:9f:
f4:f9:4f:97:04:4e:2b:ab:8c:09:97:3c:7a:6b:02:
97:61:6d:00:d7:d5:ad:45:a4:2b:f6:87:29:54:81:
a8:c7:8b:62:00:50:a9:27:a5:47:d4:76:95:50:f3:
77:7c:12:f7:31:4a:13:41:f2:1c:d1:59:6d:70:77:
0e:34:30:39:b5:ac:ac:d4:ed:fd:e6:56:61:46:8c:
9b:bb:8f:28:be:2c:89:6a:89:90:ca:44:8c:78:21:
2a:d6:f4:0c:e5:71:32:d8:f9:bb:3d:52:3f:5c:a8:
9b:c9:4f:64:43:4c:ae:10:2f:cc:68:54:bd:47:82:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:46:DD:B1:E3:7F:4E:89:54:04:AD:D6:19:54:9C:CB:08:F1:0C
X509v3 Authority Key Identifier:
keyid:60:CE:22:C7:F6:50:49:5E:B5:12:20:10:ED:36:F6:D2:64:BF:47:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f7:ba:b3:66:33:b9:75:9d:cb:fe:8d:42:00:14:28:a1:89:
b9:8b:2a:c2:22:f2:51:45:f2:1c:f4:ef:62:00:71:ac:60:44:
f6:9c:e4:f2:42:24:6d:7e:fd:30:29:dd:cb:e0:92:ee:b0:84:
96:ff:19:f0:65:86:bc:a7:14:c2:17:aa:0c:c4:f2:57:85:34:
76:08:6a:ea:d4:94:95:3a:1c:f9:93:ff:35:c5:d6:86:ff:67:
4b:c5:4d:f3:2a:c5:f7:ab:ae:97:09:4a:3c:45:5f:ca:13:d4:
cf:29:3b:f6:d1:5c:68:c0:e6:8c:6b:d9:be:35:78:22:d5:5e:
3a:08:ae:d1:41:f0:d9:67:90:9c:7e:bf:5f:81:2a:e9:c3:26:
cd:44:de:64:19:cb:4a:c2:88:cf:0a:bc:30:6b:6b:e8:fb:99:
8a:63:17:e7:37:40:88:5e:c1:33:4b:8b:04:86:2a:4c:f6:41:
3a:1d:f6:69:35:4f:64:c7:2b:46:aa:fd:a5:33:f0:9e:be:b4:
32:c6:ba:c4:da:20:c1:7a:8d:2d:88:4d:aa:16:31:6b:cd:49:
34:ac:b2:65:29:f0:63:cd:72:31:af:03:36:cb:72:9c:97:32:
bb:75:6c:9f:31:27:07:96:64:d4:62:e5:9b:c2:2e:0a:9a:96:
61:c4:c2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:19:57 2026 by rpki-client