Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.mft
File: yu27rnCdPKZGiCV7u6NvlqCZnfI.mft (raw, json)
Hash identifier: qhCjuQTSy0OPBVWtmoeZaFMbQ4pmYS9rfXPXXvP/a9o=
Subject key identifier: CF:02:2C:A7:1F:9C:D3:12:15:39:03:D8:FB:00:9E:74:FB:59:B8:31
Authority key identifier: CA:ED:BB:AE:70:9D:3C:A6:46:88:25:7B:BB:A3:6F:96:A0:99:9D:F2
Certificate issuer: /CN=caedbbae709d3ca64688257bbba36f96a0999df2
Certificate serial: 019D3A1C5DFAC467DCC2E4C132C761D0603A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu27rnCdPKZGiCV7u6NvlqCZnfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.mft
Manifest number: 0105
Signing time: Sun 29 Mar 2026 15:00:30 +0000
Manifest this update: Sun 29 Mar 2026 15:00:30 +0000
Manifest next update: Mon 30 Mar 2026 15:00:30 +0000
Files and hashes: 1: UhyVMuKBGIM4xUEKDlseGtkBRyA.roa (hash: 8gHkUh/L9anFCoLuUeIE20SENtUSNu9Tps9dolr4la0=)
2: yu27rnCdPKZGiCV7u6NvlqCZnfI.crl (hash: Up4MrjUu0iAy/qchxIH5DoM1gcNo29DeKg3D5Gu6bRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu27rnCdPKZGiCV7u6NvlqCZnfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:5d:fa:c4:67:dc:c2:e4:c1:32:c7:61:d0:60:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caedbbae709d3ca64688257bbba36f96a0999df2
Validity
Not Before: Mar 29 15:00:30 2026 GMT
Not After : Mar 30 15:00:30 2026 GMT
Subject: CN=cf022ca71f9cd312153903d8fb009e74fb59b831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:87:12:af:86:a4:d8:ca:f1:b5:05:e7:0a:
67:3c:4b:3d:9e:44:7c:b3:1d:2c:56:b2:e6:51:32:
51:21:38:a0:53:84:f1:08:a9:f4:cd:47:12:77:f8:
41:37:52:f6:d6:a3:4e:d0:13:24:52:12:b7:2f:dc:
43:35:02:ed:3a:56:52:66:41:43:82:9c:c8:9b:5d:
40:20:32:ce:23:6a:5c:71:43:7e:93:b8:99:5f:ea:
7a:37:2e:13:a7:5e:9c:cb:76:b3:0d:f5:ad:02:f3:
8d:fc:e6:a0:ba:dc:81:28:af:c7:89:4c:3c:69:11:
6a:d4:fc:77:b2:70:a5:3d:99:9d:d6:d7:36:c5:d7:
cf:e6:75:7d:18:3a:10:a5:d9:82:c0:db:fb:8f:b5:
e4:bd:4f:bb:e9:6b:02:19:bc:d6:38:6a:c6:f4:2c:
6a:ac:e7:8e:7e:af:02:dd:1e:af:17:d8:c1:aa:a1:
63:13:cf:ec:c6:de:02:e9:99:5c:64:5a:0f:4c:c5:
94:83:f0:72:a9:6c:e9:9a:45:85:7d:21:ab:c3:97:
c9:a4:06:4c:c1:76:10:f0:db:40:d8:bf:c8:04:7e:
55:09:14:58:aa:87:2e:3c:64:0c:41:30:8c:06:a5:
ef:0e:53:7f:90:52:e8:67:99:16:47:5c:ae:5a:ff:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:02:2C:A7:1F:9C:D3:12:15:39:03:D8:FB:00:9E:74:FB:59:B8:31
X509v3 Authority Key Identifier:
keyid:CA:ED:BB:AE:70:9D:3C:A6:46:88:25:7B:BB:A3:6F:96:A0:99:9D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu27rnCdPKZGiCV7u6NvlqCZnfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:89:49:d7:54:ee:a6:34:32:f2:a1:99:a3:1d:2a:78:f9:a8:
ce:6c:c2:a4:90:85:73:5f:85:18:de:c2:a8:32:68:1b:b4:85:
96:57:f2:7c:8e:e2:97:4d:34:27:23:2d:c0:b6:aa:6c:87:e3:
de:9c:88:5e:6d:3e:fd:2b:c7:e7:2d:43:bc:c9:56:bb:ec:a7:
5b:2d:b5:d7:f8:0a:0a:60:7e:5b:03:1e:02:02:41:13:69:62:
75:af:d9:dd:e0:a0:a7:79:8c:94:d4:55:5b:c7:83:29:08:a8:
d5:08:5e:a1:e7:f5:24:93:04:57:c0:60:6c:a9:31:c8:76:de:
30:96:9d:28:9c:b0:ca:fe:71:4a:c8:a0:4d:b1:5e:f9:87:21:
3e:ab:3c:33:f7:e2:62:28:a8:47:ba:0f:7c:1c:0e:e3:97:c8:
a9:30:f7:11:5c:c2:73:e0:9f:6e:a2:0f:1e:a5:a4:75:d2:39:
ee:a4:41:c9:95:cc:e9:af:06:c0:50:50:21:4e:48:f7:75:fc:
a9:11:22:c2:a4:8b:52:20:9a:9f:e7:cb:4e:16:62:60:22:72:
f3:43:81:b6:fd:7e:fc:93:b8:14:b8:f4:6b:b5:62:6a:89:c0:
d4:c5:ae:81:07:80:34:6a:8f:ff:26:f6:d5:66:53:59:da:c2:
09:27:9c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:32:18 2026 by rpki-client