Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.mft
File: yu27rnCdPKZGiCV7u6NvlqCZnfI.mft (raw, json)
Hash identifier: BjXxc7zcmfopenUaL7RVs3uCHppQXuyeVrnQsyI7S9U=
Subject key identifier: 78:68:21:67:CD:EC:EC:7B:BA:75:33:93:92:D7:C3:13:9E:E7:D8:8A
Authority key identifier: CA:ED:BB:AE:70:9D:3C:A6:46:88:25:7B:BB:A3:6F:96:A0:99:9D:F2
Certificate issuer: /CN=caedbbae709d3ca64688257bbba36f96a0999df2
Certificate serial: 019D3262D66E0F79C0235EDEEC1A54B2A088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu27rnCdPKZGiCV7u6NvlqCZnfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.mft
Manifest number: 0101
Signing time: Sat 28 Mar 2026 03:00:31 +0000
Manifest this update: Sat 28 Mar 2026 03:00:31 +0000
Manifest next update: Sun 29 Mar 2026 03:00:31 +0000
Files and hashes: 1: UhyVMuKBGIM4xUEKDlseGtkBRyA.roa (hash: 8gHkUh/L9anFCoLuUeIE20SENtUSNu9Tps9dolr4la0=)
2: yu27rnCdPKZGiCV7u6NvlqCZnfI.crl (hash: jX1Crn32gi4mook3RzC31F5B4EMb19CuJP6D9i4IA9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu27rnCdPKZGiCV7u6NvlqCZnfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:62:d6:6e:0f:79:c0:23:5e:de:ec:1a:54:b2:a0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caedbbae709d3ca64688257bbba36f96a0999df2
Validity
Not Before: Mar 28 03:00:31 2026 GMT
Not After : Mar 29 03:00:31 2026 GMT
Subject: CN=78682167cdecec7bba75339392d7c3139ee7d88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:fb:6e:37:cc:1e:56:08:f1:8f:e8:48:9a:
8a:83:2f:c5:22:db:d6:c2:2f:86:76:5a:5a:2d:a5:
9e:51:f4:4a:44:d9:18:05:ac:a7:5c:16:38:aa:ea:
96:0d:f4:da:31:c3:96:b0:a0:0f:5d:69:94:ef:a3:
c1:ea:0f:12:91:a5:c5:a4:7d:c0:ab:0e:2c:e0:1a:
a9:ce:9a:67:26:40:ae:29:a7:ac:c9:0f:fc:a3:44:
13:de:e6:b5:09:6a:c6:92:7e:57:27:84:a3:e6:24:
a9:f7:e3:64:20:78:57:1b:3d:8d:3c:3a:fc:8e:e0:
e9:b4:dc:e9:17:d9:5e:5e:cc:24:66:a2:22:84:97:
ab:46:53:ac:45:74:80:a1:dc:b6:47:2d:1a:22:7e:
3d:f1:ad:16:da:c9:64:af:6d:8a:ce:9a:60:de:ac:
98:2f:26:f1:38:b0:4b:15:f7:37:f5:59:00:92:2d:
a1:df:50:8d:83:bf:5c:eb:45:fe:0f:38:28:d2:25:
29:12:d7:c0:b0:e3:f3:7c:54:3b:db:1e:2c:16:ac:
b2:a3:99:c3:42:62:1f:8e:16:c2:95:3b:3a:40:0f:
9b:a3:97:94:2e:a8:bc:24:3c:84:9d:f0:be:1d:90:
8e:9b:d2:14:2f:90:8d:7c:01:22:34:ba:db:9d:1c:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:68:21:67:CD:EC:EC:7B:BA:75:33:93:92:D7:C3:13:9E:E7:D8:8A
X509v3 Authority Key Identifier:
keyid:CA:ED:BB:AE:70:9D:3C:A6:46:88:25:7B:BB:A3:6F:96:A0:99:9D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu27rnCdPKZGiCV7u6NvlqCZnfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:61:91:ea:bc:c7:45:ac:39:a8:59:41:b4:ad:b1:ec:76:44:
25:33:0e:75:9e:a0:34:24:2d:3a:ff:0a:01:d3:40:39:9a:db:
95:05:30:59:05:62:86:51:8e:79:42:a4:91:31:fc:2b:10:2d:
d2:20:63:33:aa:6b:91:e6:3a:44:94:3e:ed:c7:8f:34:9f:e1:
f8:f3:c3:d3:c9:d6:71:71:8b:1f:ed:11:ae:6c:8c:d2:44:02:
2e:bf:20:8d:59:7d:1d:fe:72:f6:60:cf:f4:11:1f:f8:51:01:
22:86:24:c2:67:6d:32:8c:6b:4a:74:c3:d2:19:d8:44:b0:fb:
bf:f5:fd:46:f1:da:26:c8:cd:b6:f9:b2:78:f0:73:80:f1:4b:
44:07:dc:8c:48:b4:ee:b2:92:86:64:5b:be:a6:be:2e:59:be:
17:ec:b7:e9:3a:19:59:b4:67:06:ea:f7:d8:97:8d:42:e5:98:
53:1f:0c:2f:b3:b0:66:00:b2:34:24:d8:9a:b0:5c:0c:19:24:
a0:3d:53:19:db:61:d8:f2:2a:ce:d8:bc:e1:01:9a:16:e9:00:
4c:81:40:64:70:48:c1:8f:8e:7c:68:83:67:57:00:b7:81:aa:
9f:d6:d4:25:e3:4d:8d:5c:f3:a0:87:ca:c0:fd:b7:19:43:11:
69:36:a2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:36 2026 by rpki-client