Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
File: YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json)
Hash identifier: y2JMw74OOUAs7hDs7zw9FrcaEyCjjJT0rLtOkwFx9Fk=
Subject key identifier: C2:00:BF:97:22:87:53:65:B6:D0:19:12:AE:31:AA:22:F1:05:EE:2D
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Certificate issuer: /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial: 01A0E8F690A1D78236ED3045C77D95C1E7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
Manifest number: 113E
Signing time: Mon 28 Sep 2026 17:01:08 +0000
Manifest this update: Mon 28 Sep 2026 17:01:08 +0000
Manifest next update: Tue 29 Sep 2026 17:01:08 +0000
Files and hashes: 1: I4n1Z5BQu1kmVPGStt7EINgtNQo.roa (hash: 92IJ0Usz+iM/W03HDiR4wCcyFbR1eoC3A00tDG+zs24=)
2: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: WcgldpZu355r4d2XqOEfWuAaKJ5ddWcB9ZqsarTCgqQ=)
3: ddYTOcOmB0o9lm0zE3zt2oO1U1g.roa (hash: hdKwDZDL26ytQwp0S8rV3Crlq4ka+0ODIpyfMgGOmSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:90:a1:d7:82:36:ed:30:45:c7:7d:95:c1:e7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Validity
Not Before: Sep 28 17:01:08 2026 GMT
Not After : Sep 29 17:01:08 2026 GMT
Subject: CN=c200bf9722875365b6d01912ae31aa22f105ee2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:ff:a2:48:1d:9a:e3:6b:af:a0:9a:ea:a1:
06:44:b0:5f:75:b3:73:50:85:87:5b:7b:29:90:59:
0e:7e:e0:d1:cc:8a:94:cc:25:08:0d:e0:b3:a0:67:
42:d6:39:9d:d4:bb:6a:a6:f0:09:11:68:83:36:08:
53:f7:4a:23:30:0d:b1:dd:d8:96:e7:d1:dc:f7:cf:
0a:ae:39:79:11:62:fd:05:cb:e6:ef:49:93:f3:c1:
8e:f5:37:1d:24:b6:24:05:b0:2f:a0:a8:1e:f1:c8:
73:cc:c5:25:e8:7f:49:c8:de:4b:98:9d:9d:e9:1b:
dd:1b:a7:24:95:77:42:fd:61:d1:8f:16:2f:27:3c:
46:81:86:94:c4:21:d9:a3:14:b4:9b:f7:79:f3:bf:
45:2c:da:45:63:38:15:74:6c:5d:c3:e0:29:c8:66:
af:99:da:bb:23:c6:e6:8c:cd:f2:b3:70:dd:dd:39:
2d:82:1f:bf:17:69:c5:80:5f:86:10:8a:12:21:61:
e4:ac:a7:c2:8e:b2:03:85:e6:12:14:59:31:29:8f:
94:5f:dc:7a:5b:9a:8d:33:72:8f:e8:52:41:9a:7b:
67:1f:37:08:ea:28:e2:3a:cd:28:3a:9e:e5:ea:ee:
6a:1a:21:61:2b:e7:0d:d0:b4:b8:7c:36:db:5e:43:
1d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:00:BF:97:22:87:53:65:B6:D0:19:12:AE:31:AA:22:F1:05:EE:2D
X509v3 Authority Key Identifier:
keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:df:cc:c8:89:21:6d:5e:20:19:33:ce:a2:6c:22:36:6a:7e:
1b:cd:c4:55:f7:4d:ad:4f:7d:22:17:6f:96:f5:c4:e9:c4:0e:
b5:bb:ac:b1:f7:32:56:8c:0a:cc:56:21:03:ea:33:34:00:cc:
3a:c9:12:2d:65:7b:26:f6:c7:f6:db:3f:e4:25:86:a0:58:36:
09:2c:0e:9f:c7:78:64:e3:7d:f8:31:ca:e8:12:fd:d9:bb:23:
e4:b9:9e:e5:97:58:38:38:05:03:c4:7c:31:0e:42:66:07:f1:
67:9c:d0:d3:72:b3:f0:96:7d:c4:8f:55:06:0e:0e:65:2c:0a:
73:d3:e2:2a:f6:db:94:2e:4c:13:7b:70:d0:44:db:68:8a:b5:
88:20:c3:7b:84:76:fa:73:33:67:49:44:d2:9e:57:08:bb:c9:
26:7a:fb:ef:3e:2c:dd:f2:b1:64:d4:5f:bd:6a:a6:79:37:df:
91:5c:8a:2d:be:be:73:76:e2:6f:bb:84:98:19:21:12:68:d7:
4d:62:4c:43:27:0f:03:64:90:47:bc:4e:6a:bf:4f:30:1c:77:
5f:41:a8:f3:8b:6c:c4:c0:a2:30:bb:52:8f:bf:ca:4c:46:b8:
1a:77:6d:7f:71:b6:d1:3e:45:ea:6e:a9:53:70:89:71:cc:77:
c5:e8:ed:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:51:18 2026 by rpki-client