Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier: wR3JwD4MEmyzHV5BqCboGi3bsROLNHRN1FGYjKW0xlE=
Subject key identifier: 1A:69:28:7D:F2:D7:63:CE:49:F8:A2:D3:5A:88:A5:BD:DC:55:75:45
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial: 019D2BF2D36ED22BC8DB47551756AEE34F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number: 0FC2
Signing time: Thu 26 Mar 2026 21:00:27 +0000
Manifest this update: Thu 26 Mar 2026 21:00:27 +0000
Manifest next update: Fri 27 Mar 2026 21:00:27 +0000
Files and hashes: 1: QSn62LM0lzdVFTae3oXlcnSJBrM.roa (hash: 1Kyh630uZcpfXJcHCHBYOXiuPYvcumJJUvLTjPHNEfg=)
2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: N977XoSo9iVG70BrXc90+wJUSixOKinq1/lh3PnOLD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f2:d3:6e:d2:2b:c8:db:47:55:17:56:ae:e3:4f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
Validity
Not Before: Mar 26 21:00:27 2026 GMT
Not After : Mar 27 21:00:27 2026 GMT
Subject: CN=1a69287df2d763ce49f8a2d35a88a5bddc557545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:10:c7:f6:27:9d:b3:b7:db:e2:3b:0c:50:0b:
e3:7b:63:f3:ab:82:6d:0b:90:a0:d7:fa:66:4e:09:
4f:f2:03:19:d8:77:db:14:5a:09:fb:63:04:69:81:
0b:a4:de:3a:37:10:43:31:1e:80:69:a7:98:db:eb:
23:00:40:64:2d:5d:68:f0:30:ba:30:53:bf:51:e2:
03:58:11:98:78:83:20:46:99:8c:06:42:d4:fd:e7:
46:47:3d:a8:8d:25:a2:89:d0:ab:0a:f6:00:77:c7:
5f:2e:00:8c:f2:7a:52:b5:17:3f:0c:66:cb:63:14:
37:0b:e4:8f:8e:b1:7a:52:51:27:d9:d6:b1:47:a9:
e0:33:e6:13:22:a2:7c:89:23:02:f1:20:34:15:a7:
e4:48:f8:ec:89:d1:a0:9b:4d:92:cb:02:40:2d:d0:
33:e0:a6:9a:e3:a2:8c:8c:ed:60:46:87:12:ab:88:
01:6d:b8:a2:b7:63:6c:76:a9:d1:cc:a2:15:e9:90:
d1:13:59:24:38:6f:66:1f:9c:7a:37:e6:f1:b3:b8:
9b:e1:1a:28:3a:83:a8:8c:19:5a:df:d6:d7:f1:24:
3a:b1:be:6b:b6:8a:61:b1:94:b2:1b:96:c6:5a:13:
6a:b3:54:f7:02:26:72:92:20:e7:2e:26:92:4d:85:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:28:7D:F2:D7:63:CE:49:F8:A2:D3:5A:88:A5:BD:DC:55:75:45
X509v3 Authority Key Identifier:
keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:05:af:bc:61:1d:21:e8:43:2c:ac:92:5a:84:39:c7:54:ac:
e3:ac:cd:13:f4:6f:c1:c1:35:f5:62:44:95:27:79:6b:7b:1d:
ce:ca:5f:ca:b0:c6:a3:78:05:57:6d:3c:60:3b:d0:b9:e5:1f:
77:40:31:67:2f:41:3d:de:2d:a1:d5:3c:61:8a:34:bb:d9:8d:
7b:ac:fc:64:3b:76:a4:ef:04:24:b5:f7:e4:35:44:c6:56:73:
ab:68:1b:e8:21:b1:fc:4b:c0:a5:34:61:de:c1:de:ff:a6:c4:
ac:bd:b2:8f:b6:73:cd:d2:8e:8e:df:f6:44:5b:a8:5e:58:73:
f3:fc:2e:72:06:dc:4b:9e:14:43:51:89:a9:29:83:b1:e1:bf:
16:2e:32:16:78:88:da:db:1f:2a:84:3a:1f:a9:d4:33:9d:5d:
7d:8c:9e:eb:6c:dd:d7:f4:e0:55:8a:7a:15:b0:1c:1e:cc:c8:
10:a9:4a:e0:fd:e3:58:a4:e7:84:8d:d6:15:e8:51:39:ca:e4:
8f:62:e4:f0:46:53:24:75:e4:e8:64:f7:9f:06:94:b0:11:66:
ee:3b:8b:28:01:44:01:23:e8:a5:b0:34:3e:ce:37:1e:98:78:
64:f6:e9:48:a1:d1:04:37:b9:97:7b:51:0d:1d:8d:70:e5:10:
f8:f5:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:51:04 2026 by rpki-client