Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
File: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft (raw, json)
Hash identifier: G7o3lzxBVus4//ILvQCFrzDnvYdcAHZZeMqPk5/6NHA=
Subject key identifier: 7E:F1:00:CD:46:FF:5C:F0:60:49:9A:1F:FA:72:D5:FC:7A:48:A6:F5
Authority key identifier: CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
Certificate issuer: /CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Certificate serial: 019D382EA5169FB399BBC9440D8E5729E4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
Manifest number: 0543
Signing time: Sun 29 Mar 2026 06:01:14 +0000
Manifest this update: Sun 29 Mar 2026 06:01:14 +0000
Manifest next update: Mon 30 Mar 2026 06:01:14 +0000
Files and hashes: 1: mQ0ACAyJhS24Ge7JfejryYjhrr4.roa (hash: vb4PW+qjvJj8W9hO5gMvw1SrDAuFxyDok45TJihaRuk=)
2: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl (hash: t7hCu4oOLcWW6I/fqJ0OoleSf5UJ12x0Dx8pcvGV65E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a5:16:9f:b3:99:bb:c9:44:0d:8e:57:29:e4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Validity
Not Before: Mar 29 06:01:14 2026 GMT
Not After : Mar 30 06:01:14 2026 GMT
Subject: CN=7ef100cd46ff5cf060499a1ffa72d5fc7a48a6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:0a:8c:11:f0:ce:01:27:fe:ce:82:48:3c:
a1:ac:cd:13:d1:24:23:67:98:34:8a:95:5b:2f:52:
15:32:e3:e4:38:1f:3e:ed:6c:50:ab:2c:f4:d1:72:
cc:8b:ce:1b:36:a4:ff:5b:a5:9c:18:12:ba:21:4a:
36:94:63:3b:d8:8d:95:f6:b5:c3:cd:58:38:da:8b:
49:4d:b3:64:43:07:d8:8c:21:f3:17:51:9d:d0:d5:
78:0f:37:36:89:b9:d8:38:70:9e:29:ff:43:50:6f:
9b:fa:f7:cc:6a:27:d1:b8:4c:82:b1:e0:5f:9d:68:
ae:d8:82:b4:62:db:57:6e:ae:2b:6d:cd:03:26:bb:
89:20:41:36:14:73:d8:e4:b0:31:07:1e:1b:ff:1c:
e0:34:02:ab:eb:f9:ce:21:13:65:23:f2:3f:fd:a2:
f2:56:ca:84:b8:d4:44:e7:94:c5:1d:85:f1:b6:16:
83:5a:d3:fd:83:46:a5:96:ea:a0:47:73:90:89:7f:
56:7e:4f:2a:fe:3b:28:ce:a7:ef:cf:d9:b5:7a:5d:
8a:65:a8:1b:56:11:9b:ab:c9:8d:87:a6:71:d9:e2:
5a:fc:db:6e:c1:bc:06:db:e9:aa:ba:c0:b8:38:f7:
ea:fb:ed:3b:74:65:c0:76:8a:e5:f8:32:96:66:34:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F1:00:CD:46:FF:5C:F0:60:49:9A:1F:FA:72:D5:FC:7A:48:A6:F5
X509v3 Authority Key Identifier:
keyid:CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f6:cf:cf:87:7f:4a:09:3a:0a:4d:21:b0:e8:33:6d:cb:92:
e9:3b:a8:bf:15:e5:72:53:56:24:48:62:e7:0a:6f:58:20:79:
0e:64:8c:e3:51:d7:8f:dc:32:9f:bd:a9:c9:b8:e7:5b:1b:a9:
0b:ca:6c:fe:ca:44:56:71:4e:97:c9:b3:9d:ab:81:f4:6f:d0:
67:96:df:48:9a:80:64:96:3d:b2:81:fd:ea:75:b5:4e:56:48:
a6:35:1d:35:8b:49:ac:08:1b:08:42:c0:75:08:29:ee:f9:5f:
10:24:a4:c1:39:aa:38:1a:4b:81:7f:ad:40:04:cd:78:f7:4e:
25:7b:d5:04:17:2a:47:f1:b7:b7:0a:de:eb:4a:45:60:78:3b:
11:53:b2:e7:eb:08:ef:e9:f0:16:1e:60:d4:e7:c6:97:21:1d:
6a:ec:3a:6e:ea:f4:5c:ec:ca:84:f6:2b:ee:ca:85:39:a5:48:
6d:03:bb:39:0b:3c:03:6d:57:7b:d9:33:56:47:ed:3d:ad:29:
dc:e2:fe:15:13:a1:48:32:c8:3d:b6:cf:2b:af:ed:25:d8:09:
20:f1:17:3f:f1:95:09:3e:70:ae:ba:b0:de:42:a8:1c:c6:8a:
49:ac:5a:0c:a1:af:48:40:d2:07:80:29:9f:70:95:03:10:48:
ca:4b:a7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:53 2026 by rpki-client