Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
File: YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json)
Hash identifier: IhJSqtOvku1pexVmo7ni7S8gCAByxJkZtv+Tq0rHY4Y=
Subject key identifier: 30:73:2B:5E:40:78:C9:42:C7:95:35:51:6E:20:70:0F:B7:55:A3:94
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Certificate issuer: /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial: 019CAAFD73761FE58A6B27BD2BE895F6479C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
Manifest number: 0F0B
Signing time: Sun 01 Mar 2026 20:01:02 +0000
Manifest this update: Sun 01 Mar 2026 20:01:02 +0000
Manifest next update: Mon 02 Mar 2026 20:01:02 +0000
Files and hashes: 1: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: ZqxR4EgGznSQiBum6Xz5W5mKEFc/OTk04PNUaQh4jjM=)
2: ddYTOcOmB0o9lm0zE3zt2oO1U1g.roa (hash: hdKwDZDL26ytQwp0S8rV3Crlq4ka+0ODIpyfMgGOmSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:73:76:1f:e5:8a:6b:27:bd:2b:e8:95:f6:47:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Validity
Not Before: Mar 1 20:01:02 2026 GMT
Not After : Mar 2 20:01:02 2026 GMT
Subject: CN=30732b5e4078c942c79535516e20700fb755a394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:82:69:ee:b0:41:22:36:3f:3a:7d:e4:bf:
4c:fb:df:d3:03:19:22:02:6f:27:6f:96:d2:e0:fe:
e9:bc:08:be:98:2e:53:e9:e2:6c:2d:25:2e:e7:b7:
2b:39:32:8a:01:e2:31:d3:3d:75:a9:cf:9f:09:14:
6c:3c:ef:8d:52:96:99:f1:68:47:45:78:2a:c3:8e:
e2:b1:a8:e8:53:b7:ad:2c:c6:ab:f6:7c:3d:6c:24:
0e:64:20:97:cb:27:b1:6e:4f:c3:d2:c4:d9:e8:82:
71:f5:e7:8b:ea:61:33:07:26:c4:fb:41:08:0b:22:
5a:bf:07:5c:7e:4b:e5:91:b4:62:f9:51:65:67:48:
95:f8:5e:cb:9e:05:c9:07:e6:d1:4f:7b:9a:41:df:
ef:ca:a2:31:d2:4a:9e:85:bb:ab:3a:dc:55:44:7f:
ce:bc:53:89:cd:0c:1d:e7:c6:64:e7:09:66:2c:96:
2b:d8:37:f8:60:7c:06:38:b4:02:df:a8:d5:55:25:
1e:09:82:e8:53:be:6d:6e:d6:19:c8:39:cb:42:8a:
95:d1:8c:d5:e4:91:a6:4c:8b:0b:c9:42:03:14:64:
1d:7d:8b:f9:1e:7f:89:29:40:bf:01:0f:05:93:d3:
d8:d6:bd:77:59:be:ba:be:96:c0:4c:fd:87:6e:47:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:73:2B:5E:40:78:C9:42:C7:95:35:51:6E:20:70:0F:B7:55:A3:94
X509v3 Authority Key Identifier:
keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8b:f6:6e:06:93:79:85:c9:21:19:67:67:69:49:69:a3:53:
aa:1f:9c:b3:c2:1d:06:e8:d2:dc:d8:69:fe:6e:dc:49:6c:d9:
65:26:65:12:a5:ed:67:f1:fa:3e:b0:d8:90:67:dc:f2:8b:61:
1b:ba:93:1d:8d:d0:77:7e:be:1b:85:ab:ab:92:ca:f1:99:6b:
e6:11:7a:3d:e9:87:94:6a:58:a9:ac:27:9d:36:38:df:a9:a1:
06:9e:e6:df:9e:df:d3:a1:99:4e:4a:c9:9a:ff:f7:f7:85:3f:
70:e5:c8:33:b5:72:e2:2c:5a:52:52:37:58:2e:05:02:91:5b:
14:c0:ce:a2:71:c4:ad:e8:a8:8a:6f:e7:41:6f:c7:44:06:b2:
d9:82:8b:cc:d1:17:30:95:97:a3:61:4e:80:74:04:1c:a9:a3:
19:6a:2c:c9:1c:d1:c6:a9:f6:b1:2b:bb:c7:f6:b2:18:7d:e5:
38:cc:af:cf:6d:99:a6:95:f6:93:04:38:0c:3c:a1:b0:d2:37:
50:69:d1:9f:0e:d2:c3:1f:7e:4c:f5:1f:74:8d:1d:28:d7:da:
15:db:86:e5:1d:58:ae:00:02:f8:c9:8c:91:44:23:f4:06:5f:
7d:39:79:51:3c:d1:69:b9:df:09:be:79:20:22:28:bf:42:ba:
bd:20:6b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/XN2H+WKaye9K+iV9kecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMGY4Zjk5ZmNhNjlhYTczZjg4YTUzMWRiNDZkMjI4YTdl
MmMzZDMwHhcNMjYwMzAxMjAwMTAyWhcNMjYwMzAyMjAwMTAyWjAzMTEwLwYDVQQD
EygzMDczMmI1ZTQwNzhjOTQyYzc5NTM1NTE2ZTIwNzAwZmI3NTVhMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrqCae6wQSI2Pzp95L9M+9/TAxki
Am8nb5bS4P7pvAi+mC5T6eJsLSUu57crOTKKAeIx0z11qc+fCRRsPO+NUpaZ8WhH
RXgqw47isajoU7etLMar9nw9bCQOZCCXyyexbk/D0sTZ6IJx9eeL6mEzBybE+0EI
CyJavwdcfkvlkbRi+VFlZ0iV+F7LngXJB+bRT3uaQd/vyqIx0kqehburOtxVRH/O
vFOJzQwd58Zk5wlmLJYr2Df4YHwGOLQC36jVVSUeCYLoU75tbtYZyDnLQoqV0YzV
5JGmTIsLyUIDFGQdfYv5Hn+JKUC/AQ8Fk9PY1r13Wb66vpbATP2HbkevkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBzK15AeMlCx5U1UW4gcA+3VaOUMB8GA1UdIwQY
MBaAFGEPj5n8ppqnP4ilMdtG0iin4sPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kOTQ2ODEtYWJlNi00ZTIzLTliOTgt
NzlhMGE1MjhlMGE0LzEvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kOTQ2ODEtYWJlNi00ZTIzLTliOTgtNzlhMGE1MjhlMGE0
LzEvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYov2bgaT
eYXJIRlnZ2lJaaNTqh+cs8IdBujS3Nhp/m7cSWzZZSZlEqXtZ/H6PrDYkGfc8oth
G7qTHY3Qd36+G4Wrq5LK8Zlr5hF6PemHlGpYqawnnTY436mhBp7m357f06GZTkrJ
mv/394U/cOXIM7Vy4ixaUlI3WC4FApFbFMDOonHEreioim/nQW/HRAay2YKLzNEX
MJWXo2FOgHQEHKmjGWosyRzRxqn2sSu7x/ayGH3lOMyvz22ZppX2kwQ4DDyhsNI3
UGnRnw7Swx9+TPUfdI0dKNfaFduG5R1YrgAC+MmMkUQj9AZffTl5UTzRabnfCb55
ICIov0K6vSBrMA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:38 2026 by rpki-client