Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
File: yuBptmPuJf0TVZEB2sHVAyuf1m4.mft (raw, json)
Hash identifier: pfmf718Xvsa9uohEU9X5tRhu3++otz/1H/EyKcYB3R4=
Subject key identifier: 12:88:77:D4:11:C3:D2:A0:5A:67:9D:9F:10:DE:3D:F4:41:3C:68:86
Authority key identifier: CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E
Certificate issuer: /CN=cae069b663ee25fd13559101dac1d5032b9fd66e
Certificate serial: 019D382DC8D4DB23B20CDAABD5721C66B750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
Manifest number: 11DE
Signing time: Sun 29 Mar 2026 06:00:17 +0000
Manifest this update: Sun 29 Mar 2026 06:00:17 +0000
Manifest next update: Mon 30 Mar 2026 06:00:17 +0000
Files and hashes: 1: xX0KGIvLQes55K6JPglZPPnxQiA.roa (hash: XeKa8aHFKZ1r7SOoTQMHPVlkjUA/yur8nQajCi/GwGA=)
2: yuBptmPuJf0TVZEB2sHVAyuf1m4.crl (hash: XLKV0jWAfWK+T9yoKX4A0v+snPLXI7X1xgxqpJlZssI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:c8:d4:db:23:b2:0c:da:ab:d5:72:1c:66:b7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae069b663ee25fd13559101dac1d5032b9fd66e
Validity
Not Before: Mar 29 06:00:17 2026 GMT
Not After : Mar 30 06:00:17 2026 GMT
Subject: CN=128877d411c3d2a05a679d9f10de3df4413c6886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:6f:30:c6:da:ce:ef:73:e0:0e:9f:76:71:
45:d7:ee:0c:78:b7:2a:8d:d4:7d:dc:9c:a5:f7:68:
ed:33:30:e7:f4:e6:12:37:bc:48:13:65:f2:30:63:
e4:5f:fa:cb:ac:c0:ed:6c:b3:e2:86:64:7f:12:50:
16:77:17:69:5e:31:b1:ef:ce:8b:92:bb:f9:57:a4:
03:31:68:5c:f6:18:62:23:80:70:81:1b:54:7c:d5:
e0:d5:9a:aa:1e:a1:e8:d0:3d:16:8f:45:f9:9e:50:
8b:65:3a:d4:93:7c:e6:c7:d3:27:90:3c:0a:08:0b:
c7:ae:89:93:4c:9e:5a:ca:71:64:b2:4e:5f:86:11:
f6:f6:8c:88:1d:b2:2c:8e:73:1c:99:60:b9:be:2a:
d6:e3:f6:1b:bd:fc:dd:2a:de:df:ef:dc:6a:cc:a2:
8b:88:66:88:b0:f3:cc:c0:3d:17:3c:1f:2a:0f:c6:
0f:54:4b:bd:0a:41:2c:74:37:de:34:6a:e9:b4:bf:
51:4d:a2:d3:32:d5:16:01:d3:fb:de:d8:dc:6e:37:
a0:d4:84:10:71:d3:b1:f5:aa:f8:2f:70:d6:c8:cb:
7c:ee:d5:2a:0c:2e:1d:12:21:6a:b3:6b:e9:b5:d9:
3c:20:f2:46:e6:1e:f6:69:bf:28:fd:74:1a:ba:75:
09:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:88:77:D4:11:C3:D2:A0:5A:67:9D:9F:10:DE:3D:F4:41:3C:68:86
X509v3 Authority Key Identifier:
keyid:CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c6:4f:e3:b8:c8:3c:eb:05:82:da:3a:8b:b9:85:b8:26:bc:
85:8d:c1:98:6f:08:44:79:a0:61:74:44:02:62:58:11:43:19:
bc:fd:f8:90:d6:ed:e4:32:83:f4:5b:de:65:8f:b4:9e:c5:18:
de:d2:57:56:49:f1:94:48:3c:a2:51:ac:64:66:50:f6:4e:d3:
7a:b3:e5:ef:b3:e3:f5:a3:9c:78:05:a7:aa:7d:cd:01:4f:ce:
8e:7a:f4:e5:6a:d2:b2:a5:53:f2:de:c2:e2:7c:05:e7:6c:10:
2b:ed:0c:8d:d2:63:ba:26:8b:1c:b6:04:59:3c:ba:6a:a1:80:
5d:3b:e9:3a:4c:63:e2:6a:2e:03:a9:33:94:3e:83:32:56:44:
30:7d:a8:41:30:c1:1b:15:c8:56:45:7b:e6:00:b8:76:6e:b3:
95:a7:39:76:1b:35:b1:52:4e:18:22:6e:01:b9:c5:ad:39:d7:
55:2c:af:76:28:13:42:f3:42:51:13:17:e1:a5:ee:42:d1:fd:
f8:8c:0b:65:7f:fa:8c:a5:14:fa:b6:81:fa:4c:63:04:ac:92:
d9:85:00:45:d5:e6:cf:21:23:e2:20:da:c9:f0:14:68:4d:e5:
ba:fa:31:d5:e8:2a:d4:9c:8d:f2:22:19:bb:6f:6b:d7:89:c8:
fb:73:66:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:37 2026 by rpki-client