Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier: IvtjoGQHmE32V+LHDfVWv2CnMWCCf11E/xS4L30yq2A=
Subject key identifier: 87:33:E6:99:9F:E5:CE:AB:91:6C:5B:FD:7C:B0:64:60:44:4D:F8:80
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial: 019D2A047378A196731828F5B0193222E685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number: 0FC1
Signing time: Thu 26 Mar 2026 12:00:27 +0000
Manifest this update: Thu 26 Mar 2026 12:00:27 +0000
Manifest next update: Fri 27 Mar 2026 12:00:27 +0000
Files and hashes: 1: QSn62LM0lzdVFTae3oXlcnSJBrM.roa (hash: 1Kyh630uZcpfXJcHCHBYOXiuPYvcumJJUvLTjPHNEfg=)
2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: 31FzOwTAq59OJAIOR/m5xs/mBQOmWjBwHUCWKMaE/9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:73:78:a1:96:73:18:28:f5:b0:19:32:22:e6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
Validity
Not Before: Mar 26 12:00:27 2026 GMT
Not After : Mar 27 12:00:27 2026 GMT
Subject: CN=8733e6999fe5ceab916c5bfd7cb06460444df880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:75:39:db:74:f7:1e:38:6d:9d:f3:f5:19:95:
df:57:95:96:55:14:91:59:ae:0d:1b:8a:e4:69:ba:
f1:5e:e2:b5:20:00:eb:39:66:4c:46:60:e9:de:34:
76:98:b8:21:88:c6:5d:df:49:72:65:03:8b:54:c4:
0d:ea:e7:5a:a0:ca:1c:53:5b:6b:33:4e:18:d9:42:
5b:5d:f2:f6:45:78:b0:46:33:05:5c:a5:fa:9a:9d:
64:48:d3:56:78:8d:f7:25:0a:75:a0:85:10:11:93:
2c:54:b2:e6:0f:89:62:63:a0:a1:cf:aa:59:b6:27:
47:57:d4:c7:04:58:52:e6:ce:62:7e:79:a9:3d:96:
1d:c4:72:85:bc:b0:cf:12:7b:67:60:3e:60:d7:ac:
20:2a:f3:32:65:d0:b4:93:dc:5f:32:ff:bf:6e:c5:
cf:8a:e3:29:1d:bb:4e:23:a5:d7:11:00:d5:65:1a:
22:48:ba:26:dd:13:cc:f1:f1:f0:a9:ae:00:4b:72:
c9:35:67:9c:5c:8d:d0:4e:c7:e2:e9:e8:3f:2e:8a:
32:b9:cc:4a:01:cd:e0:fe:b5:b5:e8:02:22:3e:32:
17:85:90:6f:1d:0f:65:04:7d:d2:5d:94:fa:58:0d:
55:ba:90:00:79:fe:f4:a4:ae:65:3c:4f:6e:0d:6c:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:33:E6:99:9F:E5:CE:AB:91:6C:5B:FD:7C:B0:64:60:44:4D:F8:80
X509v3 Authority Key Identifier:
keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:55:4b:90:14:12:80:c4:d1:be:9b:ba:07:7d:84:3d:34:ec:
eb:7b:85:21:35:27:45:de:76:10:89:d5:23:2b:ff:08:c6:32:
74:8e:be:50:26:f5:b9:5c:e9:0b:2d:49:21:d3:86:cc:65:a4:
ff:23:e2:96:15:a1:e0:94:74:31:f8:a5:19:54:d3:89:05:38:
3f:bf:6b:22:3f:02:92:3f:3e:7a:72:16:21:59:91:57:f8:fa:
63:d4:56:42:4e:ea:7f:1d:7c:3c:b9:8d:4a:2e:85:ac:d8:6d:
d0:3d:ba:78:97:b4:0a:84:e0:55:05:97:b6:8c:4d:01:2e:00:
f0:98:6b:13:c4:7a:37:87:e9:2e:e3:5d:fd:ea:18:d4:56:7e:
bd:94:c1:78:85:ae:a3:1d:f2:d1:96:e4:ff:99:0d:38:24:2e:
24:17:c3:4a:9f:28:62:61:a1:e5:41:e7:bb:a6:8b:5e:60:7c:
d0:c9:b4:40:c4:82:02:3b:9a:b6:aa:64:59:2f:3e:26:88:8c:
67:6a:f9:00:7e:6b:a7:ff:92:44:00:57:7b:ac:36:b7:aa:f0:
e1:47:5b:89:d9:55:2c:49:4a:7d:99:a6:ec:27:b1:7e:60:0b:
2e:05:10:4a:86:54:71:a4:50:97:c4:bd:5c:46:c4:3a:1e:76:
84:76:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:02:11 2026 by rpki-client