Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier: VMKG66YLyIUhObjT5Z3K4bCp7YOe9vuBEIObXfRWkmY=
Subject key identifier: AB:BC:E5:18:49:1D:79:53:C7:83:E9:0E:6D:3C:78:9D:B5:41:99:7D
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial: 019F93FFDE0300CAE39823EB0B80257A9CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number: 1101
Signing time: Fri 24 Jul 2026 12:00:46 +0000
Manifest this update: Fri 24 Jul 2026 12:00:46 +0000
Manifest next update: Sat 25 Jul 2026 12:00:46 +0000
Files and hashes: 1: QSn62LM0lzdVFTae3oXlcnSJBrM.roa (hash: 1Kyh630uZcpfXJcHCHBYOXiuPYvcumJJUvLTjPHNEfg=)
2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: agOo37btkUjoBmfv6DsA83FY40x2ijJkix4VsFr8SA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:de:03:00:ca:e3:98:23:eb:0b:80:25:7a:9c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
Validity
Not Before: Jul 24 12:00:46 2026 GMT
Not After : Jul 25 12:00:46 2026 GMT
Subject: CN=abbce518491d7953c783e90e6d3c789db541997d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:db:2e:c2:ab:ed:4c:3e:ec:a2:3b:f0:40:9b:
97:ae:08:17:91:ec:77:f9:b5:2f:8a:f1:d8:a4:2d:
b6:0a:4b:2a:2a:36:50:53:2a:12:19:55:37:f1:57:
84:fa:57:ea:d0:eb:9e:6b:95:c0:56:9f:fb:da:6e:
b5:c9:a6:16:61:65:e9:98:32:d7:d1:54:ff:af:c8:
d2:da:6a:db:9d:dd:6f:35:b4:eb:93:88:f0:be:0e:
36:54:9d:ed:bf:8f:85:76:8b:bd:7c:8b:e2:3f:7b:
85:64:37:84:4b:6e:94:17:b7:87:de:07:80:26:7c:
d4:11:00:e9:f6:12:d8:0e:22:e4:2d:45:7c:2d:78:
5d:67:fb:c1:c1:d3:c8:31:44:6b:1d:e6:98:6c:3c:
49:21:cb:78:06:07:4a:86:07:e0:c5:39:1c:37:f6:
a2:b2:8b:6c:a1:92:71:49:d9:3e:f1:58:10:d1:d3:
0c:e1:23:ea:52:4b:bc:9f:30:77:9b:de:57:6e:eb:
40:56:97:ad:07:c9:29:37:17:3f:1d:89:09:8f:28:
54:ab:8e:da:37:ee:6e:3d:e4:4d:47:d6:60:8e:2e:
6c:28:13:cf:25:9a:30:a5:61:6b:8f:b1:48:2d:34:
1b:fb:c2:e2:5b:41:5c:3c:26:ff:18:d6:4e:05:b0:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BC:E5:18:49:1D:79:53:C7:83:E9:0E:6D:3C:78:9D:B5:41:99:7D
X509v3 Authority Key Identifier:
keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ce:2e:73:32:c0:e7:fa:50:2e:54:e7:d6:99:0e:57:a7:d0:
fd:49:34:83:3a:25:24:a2:e6:41:fb:57:f4:a3:f4:aa:60:07:
93:8a:2c:bc:36:e4:5e:9b:ff:e0:2f:e6:b9:9f:38:91:e1:31:
e3:5d:80:69:d5:63:3b:af:67:8e:78:de:b7:f5:52:96:8f:65:
4d:14:8a:ea:25:ea:cf:25:5a:aa:8d:a2:82:c6:27:bf:73:52:
f9:d8:7e:ad:7f:55:fa:9b:c1:8c:b1:12:26:93:1a:4c:c7:5e:
63:c7:13:a7:18:b9:8c:5a:c4:53:27:f1:d0:91:33:fa:de:21:
af:c7:5c:c2:d2:a3:03:eb:0c:ae:bc:2e:fd:48:db:84:2e:fc:
5a:cb:a3:e2:dd:04:4f:63:02:de:48:d8:ce:f9:34:e6:c5:08:
bf:d2:5f:02:2d:e3:4a:25:e7:9c:39:b4:a6:a6:e7:b7:04:dd:
64:5d:97:c6:6b:35:b2:94:0f:ce:d7:5d:c4:6b:02:02:64:28:
33:30:28:93:28:04:1f:d0:9e:7a:36:3f:2b:a8:2e:77:61:18:
54:7d:a6:64:aa:1c:f8:aa:f7:ba:d2:b2:74:d3:3e:dd:1e:07:
37:ad:31:22:4d:2d:da:2b:3b:8b:e6:c3:a6:e7:3b:c1:4d:77:
79:1c:da:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/94DAMrjmCPrC4Alepy9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZTc0ZmNjZTQxOTMzZjQyN2M1MzdkMzY1ZDVlNzYxZDI2
NTVlYjYwHhcNMjYwNzI0MTIwMDQ2WhcNMjYwNzI1MTIwMDQ2WjAzMTEwLwYDVQQD
EyhhYmJjZTUxODQ5MWQ3OTUzYzc4M2U5MGU2ZDNjNzg5ZGI1NDE5OTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59suwqvtTD7sojvwQJuXrggXkex3
+bUvivHYpC22CksqKjZQUyoSGVU38VeE+lfq0Ouea5XAVp/72m61yaYWYWXpmDLX
0VT/r8jS2mrbnd1vNbTrk4jwvg42VJ3tv4+Fdou9fIviP3uFZDeES26UF7eH3geA
JnzUEQDp9hLYDiLkLUV8LXhdZ/vBwdPIMURrHeaYbDxJIct4BgdKhgfgxTkcN/ai
sotsoZJxSdk+8VgQ0dMM4SPqUku8nzB3m95XbutAVpetB8kpNxc/HYkJjyhUq47a
N+5uPeRNR9Zgji5sKBPPJZowpWFrj7FILTQb+8LiW0FcPCb/GNZOBbCF1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKu85RhJHXlTx4PpDm08eJ21QZl9MB8GA1UdIwQY
MBaAFMrnT8zkGTP0J8U302XV52HSZV62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAt
YzM1NDEwYjViNjkxLzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAtYzM1NDEwYjViNjkx
LzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYM4uczLA
5/pQLlTn1pkOV6fQ/Uk0gzolJKLmQftX9KP0qmAHk4osvDbkXpv/4C/muZ84keEx
412AadVjO69njnjet/VSlo9lTRSK6iXqzyVaqo2igsYnv3NS+dh+rX9V+pvBjLES
JpMaTMdeY8cTpxi5jFrEUyfx0JEz+t4hr8dcwtKjA+sMrrwu/UjbhC78Wsuj4t0E
T2MC3kjYzvk05sUIv9JfAi3jSiXnnDm0pqbntwTdZF2Xxms1spQPztddxGsCAmQo
MzAokygEH9CeejY/K6gud2EYVH2mZKoc+Kr3utKydNM+3R4HN60xIk0t2is7i+bD
puc7wU13eRzaOg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:10:34 2026 by rpki-client