Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
File: yu79CETrE5qyH4DUByzguO3MBrU.mft (raw, json)
Hash identifier: 9jM+kyEDj+EY0TDQohRTO4zBi2aLJ2ib410qA2D+3r8=
Subject key identifier: 81:AF:85:01:98:74:D4:40:79:F2:0A:62:0E:1C:FF:A4:01:8E:48:0B
Authority key identifier: CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5
Certificate issuer: /CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
Certificate serial: 019D284D9538BF62DBBE641A4ED2E34581CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
Manifest number: 04D8
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: LJiVGCgYbyx1YrovDxbErOmKKZE.roa (hash: 36LJeXEZNvyiVyB06FojXdU1rTulFSqDFXw050tNGLw=)
2: yu79CETrE5qyH4DUByzguO3MBrU.crl (hash: SxrLY3Gte9EKaxchEG4xJOO+W6p2TX5O7ZK2vFdRkWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:95:38:bf:62:db:be:64:1a:4e:d2:e3:45:81:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=81af85019874d44079f20a620e1cffa4018e480b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:fa:61:b9:08:aa:89:6e:2d:18:ee:2c:84:
64:2f:24:a5:f5:b7:9a:1b:97:bb:68:a3:32:70:4d:
a2:55:28:56:11:f6:ca:81:4b:e3:75:58:38:9f:0e:
d7:0a:62:ea:0f:22:4a:bd:92:26:bf:b5:4e:1b:db:
41:d1:27:38:62:23:19:45:3d:4c:7b:1d:10:07:2a:
67:27:e9:c4:a5:12:6a:2c:51:98:7c:24:c2:ac:80:
8a:16:4f:74:0a:68:70:40:2c:ff:ba:35:7c:7e:eb:
b3:8a:3d:fe:28:f1:2e:84:72:1a:ea:07:ea:4b:d4:
a3:87:15:44:94:c3:ee:49:2c:f2:a0:16:34:86:ab:
8f:5a:bd:49:21:64:6b:e1:fd:f3:f4:3a:f4:19:10:
03:e9:48:73:66:e6:e9:7f:63:51:bb:94:79:79:8f:
06:59:69:34:53:f1:f8:93:2f:ff:6f:1c:fd:ac:c2:
d0:74:c7:4b:74:78:a8:8a:98:33:b4:fe:7a:45:fc:
3d:eb:27:54:e2:c2:fc:55:a8:70:c2:4e:ca:49:7b:
d9:15:da:47:08:93:49:42:f3:3e:8b:3f:b8:93:bd:
69:f1:52:30:a1:24:c7:0b:f2:e8:00:05:0b:6e:1d:
aa:97:da:f3:2d:ab:cf:6c:af:63:a5:68:be:a0:f7:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AF:85:01:98:74:D4:40:79:F2:0A:62:0E:1C:FF:A4:01:8E:48:0B
X509v3 Authority Key Identifier:
keyid:CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:20:48:e8:54:68:2c:0c:82:bb:00:d6:20:ce:0d:95:ca:3e:
f7:5f:e2:79:2a:ba:38:2d:22:80:c6:ac:08:12:b0:c7:1d:72:
3f:28:80:d8:39:84:88:39:cd:aa:ba:9f:12:19:b4:b7:8d:d5:
3e:8c:c4:9c:9e:c4:ce:bd:82:40:76:d9:fa:57:26:a9:c7:50:
8f:89:b2:dd:4f:38:24:43:82:86:8e:99:e9:1d:dc:d7:b0:69:
8d:72:27:3b:9d:2c:43:24:e8:68:8c:29:43:83:6b:08:5d:1d:
55:32:bc:f9:7a:fd:2f:83:84:af:c4:05:69:00:b9:d5:02:d9:
32:10:de:7b:0d:be:ee:69:b3:7e:0a:83:3d:ff:43:68:e4:75:
6f:28:f6:17:82:48:cd:68:e2:c7:c9:74:88:f0:4f:11:04:df:
79:74:66:8a:db:2d:8d:6a:52:d8:aa:2d:85:c9:c8:e8:96:bd:
91:05:92:34:19:bc:e0:da:6b:59:87:12:7a:a3:a5:f4:8b:ad:
be:71:74:72:c0:9c:91:b1:47:c8:cd:84:34:39:1b:38:0a:93:
44:58:b5:06:37:3b:37:21:a7:ba:3a:2d:b9:67:64:ab:d3:e6:
b2:c1:9b:a4:a9:09:c6:57:6f:8a:2c:35:7c:e5:b5:6f:2b:22:
d5:00:d7:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTZU4v2LbvmQaTtLjRYHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWVmZDA4NDRlYjEzOWFiMjFmODBkNDA3MmNlMGI4ZWRj
YzA2YjUwHhcNMjYwMzI2MDQwMTA2WhcNMjYwMzI3MDQwMTA2WjAzMTEwLwYDVQQD
Eyg4MWFmODUwMTk4NzRkNDQwNzlmMjBhNjIwZTFjZmZhNDAxOGU0ODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mH6YbkIqoluLRjuLIRkLySl9bea
G5e7aKMycE2iVShWEfbKgUvjdVg4nw7XCmLqDyJKvZImv7VOG9tB0Sc4YiMZRT1M
ex0QBypnJ+nEpRJqLFGYfCTCrICKFk90CmhwQCz/ujV8fuuzij3+KPEuhHIa6gfq
S9SjhxVElMPuSSzyoBY0hquPWr1JIWRr4f3z9Dr0GRAD6UhzZubpf2NRu5R5eY8G
WWk0U/H4ky//bxz9rMLQdMdLdHioipgztP56Rfw96ydU4sL8Vahwwk7KSXvZFdpH
CJNJQvM+iz+4k71p8VIwoSTHC/LoAAULbh2ql9rzLavPbK9jpWi+oPeEiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGvhQGYdNRAefIKYg4c/6QBjkgLMB8GA1UdIwQY
MBaAFMru/QhE6xOash+A1Acs4LjtzAa1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXU3OUNFVHJFNXF5SDREVUJ5emd1TzNNQnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83ZjU2OWYtY2MzYy00MjllLWJkMWQt
YjRiOTdmMTFjM2RkLzEveXU3OUNFVHJFNXF5SDREVUJ5emd1TzNNQnJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83ZjU2OWYtY2MzYy00MjllLWJkMWQtYjRiOTdmMTFjM2Rk
LzEveXU3OUNFVHJFNXF5SDREVUJ5emd1TzNNQnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyBI6FRo
LAyCuwDWIM4Nlco+91/ieSq6OC0igMasCBKwxx1yPyiA2DmEiDnNqrqfEhm0t43V
PozEnJ7Ezr2CQHbZ+lcmqcdQj4my3U84JEOCho6Z6R3c17BpjXInO50sQyToaIwp
Q4NrCF0dVTK8+Xr9L4OEr8QFaQC51QLZMhDeew2+7mmzfgqDPf9DaOR1byj2F4JI
zWjix8l0iPBPEQTfeXRmitstjWpS2KothcnI6Ja9kQWSNBm84NprWYcSeqOl9Iut
vnF0csCckbFHyM2ENDkbOAqTRFi1Bjc7NyGnujotuWdkq9PmssGbpKkJxldviiw1
fOW1bysi1QDXFw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:37:13 2026 by rpki-client