Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
File: YmqokTLSpoTY0qGj9-QPIjRjbzg.mft (raw, json)
Hash identifier: GoIZth//RheOdYIH+p6xLaKgHdzi39QT5B2dm3Pik9c=
Subject key identifier: 3F:98:AD:F4:23:FD:55:47:44:A7:B6:DC:A5:F8:3F:6A:11:6B:22:BC
Authority key identifier: 62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
Certificate issuer: /CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Certificate serial: 019D27A8DA939B8DF96E694611F8AF0F000A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
Manifest number: 1663
Signing time: Thu 26 Mar 2026 01:01:10 +0000
Manifest this update: Thu 26 Mar 2026 01:01:10 +0000
Manifest next update: Fri 27 Mar 2026 01:01:10 +0000
Files and hashes: 1: WCWp0vmGJYt70q-YkfGeiqk74HA.roa (hash: WWuYuPcraJwNveZ8Pjl950Glgpk1p9KqCUVVhSjy+fs=)
2: YmqokTLSpoTY0qGj9-QPIjRjbzg.crl (hash: 7wsF3l5QRGoha5pKtqiFtO3PBP4MC9G+ag/ZzNx+lX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:da:93:9b:8d:f9:6e:69:46:11:f8:af:0f:00:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Validity
Not Before: Mar 26 01:01:10 2026 GMT
Not After : Mar 27 01:01:10 2026 GMT
Subject: CN=3f98adf423fd554744a7b6dca5f83f6a116b22bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:ce:79:f3:85:35:52:06:9d:5c:bb:c0:a1:
45:31:2c:55:76:cc:56:f0:e8:40:86:6e:5a:96:28:
5f:53:8b:f2:7e:e2:e8:20:d2:61:43:00:b3:72:f1:
d0:51:1c:65:9d:88:c1:38:88:d6:fe:50:f4:98:9d:
d0:81:9d:76:20:78:c8:64:d4:3b:e8:58:44:a3:a3:
59:9d:21:5b:3b:d1:c4:29:de:a2:ab:dd:f2:8b:91:
f9:4d:9e:6b:97:41:ff:bf:9d:6d:2d:b3:97:56:d0:
3a:ff:49:9c:74:0a:ae:52:f5:74:f6:55:3c:f8:0a:
8d:44:a4:63:15:ae:15:e2:67:f4:48:a9:e7:a8:3e:
e4:34:a4:b7:4f:40:16:66:b0:88:53:8f:be:7b:b7:
ba:ff:d3:4f:52:4a:ba:37:77:61:70:4c:84:85:68:
72:86:ad:00:ec:54:f6:5a:54:7b:f5:d6:73:be:07:
2f:f4:53:5d:15:69:97:ee:8b:b8:55:6a:b1:87:ce:
16:44:a1:7c:db:56:59:6d:fc:61:f9:ea:33:75:f6:
d0:9f:29:4e:37:cc:36:fd:3d:94:18:c0:68:1c:a8:
38:62:66:62:4e:d0:45:60:56:76:cb:7f:ce:5e:d8:
8d:24:1b:5e:bc:d6:91:7c:fa:a2:c1:4b:43:17:29:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:98:AD:F4:23:FD:55:47:44:A7:B6:DC:A5:F8:3F:6A:11:6B:22:BC
X509v3 Authority Key Identifier:
keyid:62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cd:1a:26:1d:11:7f:c0:ea:f1:8e:49:57:a2:8f:ce:9d:9e:
2d:ea:c4:13:95:ff:a9:2e:17:3e:ae:e3:93:f6:83:18:14:40:
9a:61:8e:e8:04:b1:b7:b7:79:48:e6:15:ab:89:8c:df:8e:95:
49:74:5d:d8:16:a2:38:31:2f:93:62:cd:91:b9:f2:16:22:e1:
fd:60:44:2e:9c:e1:1a:eb:a6:a7:de:ea:90:e6:08:0e:ab:59:
25:52:0e:56:43:3d:a1:5f:c0:da:00:07:26:1b:cc:ac:55:50:
23:55:48:61:2a:74:7c:55:05:05:19:68:8e:0c:36:03:89:08:
b4:11:26:fa:1a:fa:ff:9b:b2:da:91:2a:39:e7:67:92:d2:6a:
b8:b4:87:09:93:6b:b0:dc:19:e1:87:6c:51:6c:12:47:55:ff:
d8:f2:fb:51:c9:d0:31:f8:e6:e0:4a:9a:e9:d8:33:d0:a1:84:
5c:6d:ac:6b:3d:eb:e0:17:27:e7:77:c3:d6:7d:31:30:0f:c5:
bf:35:bb:bd:82:fe:6b:d7:6c:5b:e8:2d:e6:5d:24:24:bc:dd:
bc:b4:7d:21:eb:fc:d0:c0:34:bb:51:ed:56:3e:a2:7a:27:7f:
38:39:aa:07:fe:6b:aa:2f:d0:89:b4:f0:f7:8f:3c:10:e2:54:
c9:79:d8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:11 2026 by rpki-client