Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
File: yPanLDQ-dkd2JEov8RJx_rIu3_k.mft (raw, json)
Hash identifier: yUhZPAu+roJrW5zvS8zFQ/MWnbo+SYedF9bkHWlj56M=
Subject key identifier: F2:A7:6C:0D:86:54:3B:68:92:00:06:5D:BD:21:C8:51:F1:2B:71:E9
Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9
Certificate serial: 019D382E3BFD7A9EC9B55BEFCCDBCBF4EE8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
Manifest number: 089A
Signing time: Sun 29 Mar 2026 06:00:47 +0000
Manifest this update: Sun 29 Mar 2026 06:00:47 +0000
Manifest next update: Mon 30 Mar 2026 06:00:47 +0000
Files and hashes: 1: yPanLDQ-dkd2JEov8RJx_rIu3_k.crl (hash: LzXC/5046M21UTt5KMpnJhcX4pra73lX/4DIAd7gYPI=)
2: zQ8k9JvVM79Ocnr5Zgs_9oTFafw.roa (hash: lxAEeKrNfAfxgxxFAXxZshYHhY/SzJkLgikv9CegzW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3b:fd:7a:9e:c9:b5:5b:ef:cc:db:cb:f4:ee:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9
Validity
Not Before: Mar 29 06:00:47 2026 GMT
Not After : Mar 30 06:00:47 2026 GMT
Subject: CN=f2a76c0d86543b689200065dbd21c851f12b71e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:8b:ba:42:9f:5a:8c:0e:ae:3f:65:ed:08:
b2:3e:cb:e4:79:37:e1:3d:a4:56:38:d6:29:85:d1:
0a:d9:8c:0c:47:fb:83:a3:a6:8e:ba:a5:d7:17:b3:
15:1a:9c:b1:92:6f:60:56:e9:b5:67:ce:a7:2a:ed:
43:c5:a5:31:2b:ae:c6:bd:13:9f:10:25:27:2e:d5:
28:ea:a9:23:74:8f:4c:8f:93:90:30:7a:41:8d:49:
4a:36:56:00:f0:26:c4:1d:bb:9c:fc:b5:d0:93:9e:
e1:f9:63:64:fe:b6:4e:21:79:df:45:95:ce:a6:d8:
d6:e4:a3:8f:fb:ac:ee:22:f3:ef:6c:43:e7:80:ee:
43:55:19:a5:1e:5d:47:04:79:b2:3e:23:37:46:37:
52:fd:48:39:25:1d:61:a7:de:8a:2f:e2:99:c6:ab:
ee:0d:3d:27:6e:9c:76:29:5e:89:8c:24:06:0d:42:
18:54:4f:f6:b0:1d:70:84:24:52:41:9e:9a:e6:da:
fd:61:0f:bc:5b:5e:04:bf:00:13:ab:91:9c:da:70:
3c:e4:79:5e:7a:61:e6:98:f9:9e:af:7a:4b:63:3e:
64:eb:16:18:3b:66:18:f3:be:ed:d2:75:68:aa:8c:
d6:88:a6:55:5c:50:71:40:09:72:aa:08:4b:cb:d5:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A7:6C:0D:86:54:3B:68:92:00:06:5D:BD:21:C8:51:F1:2B:71:E9
X509v3 Authority Key Identifier:
keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5b:7a:44:15:9a:d3:76:ab:ae:e2:eb:6e:bf:3e:b8:f8:a1:
06:c0:95:0f:93:95:ee:59:9c:cc:3e:1d:a1:eb:1e:aa:b7:59:
de:ab:4a:50:c4:8e:fa:83:af:33:fe:36:de:76:dd:be:e0:f1:
a0:5e:ab:42:1f:ed:a7:5b:e0:a3:b1:85:a3:23:03:77:c1:a5:
42:b1:72:e2:c3:a6:0e:77:20:9c:b4:09:14:01:dc:21:5b:fd:
e4:0f:3e:a3:24:bd:74:82:94:34:54:68:c4:20:04:5d:8d:9f:
0a:a9:08:e6:82:70:50:9d:c3:20:ae:55:68:2b:89:1b:9a:08:
09:7e:a7:ae:56:b4:9f:3d:c3:ab:3f:e9:c0:79:ea:77:d0:a4:
31:76:f3:b7:07:ca:f2:c1:6c:10:c9:a6:3d:e0:26:21:7a:31:
b6:c9:ab:91:df:51:bb:85:79:b3:cc:84:a7:3a:f4:e0:0f:47:
d7:74:02:23:c8:cc:56:80:2c:74:ce:2e:06:97:fd:8b:a3:0d:
3e:73:e2:86:6e:04:52:2b:29:d9:c2:b8:04:ed:c8:3b:b4:20:
7b:7a:6a:bd:05:e4:9c:ff:74:be:ea:0d:95:8a:24:10:6d:5f:
19:03:1f:b1:44:bb:07:d8:8c:2b:c4:42:93:b8:a0:d9:81:d2:
90:52:83:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:21 2026 by rpki-client