Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: YRUVTUzpYcN9CvVaqxRgtnxe37m10RFaKhZ9LY3sQFM=
Subject key identifier: 74:77:01:91:24:3B:C0:3B:60:52:29:F1:4A:B3:17:2D:84:F6:49:0B
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 019CE4B66DDBCE82F00C43322DABFF0774E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0F4A
Signing time: Fri 13 Mar 2026 01:01:26 +0000
Manifest this update: Fri 13 Mar 2026 01:01:26 +0000
Manifest next update: Sat 14 Mar 2026 01:01:26 +0000
Files and hashes: 1: HXXJ5U9DGvbbZuWvDguPFDAOEkc.roa (hash: mEsE8YsZsxlgLGJIZIrrf3uSCgdInsp4ueGy7PdnCmU=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: jL6AytoH0t2W67JoNDAYRISk3q3TvHkrq3tGQDWu4JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b6:6d:db:ce:82:f0:0c:43:32:2d:ab:ff:07:74:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Mar 13 01:01:26 2026 GMT
Not After : Mar 14 01:01:26 2026 GMT
Subject: CN=74770191243bc03b605229f14ab3172d84f6490b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:10:52:a3:dd:16:55:ef:09:ca:86:36:26:
11:04:55:d3:30:75:44:a3:c7:04:54:5d:cc:fd:cd:
d9:9c:84:ec:20:c6:93:ad:15:28:ef:d0:4c:6f:b9:
e7:c1:8b:1d:53:5e:d1:57:93:ec:f6:68:a6:5b:66:
18:16:87:17:6d:ca:4d:fc:97:9a:26:6a:ae:45:b6:
cb:74:5c:32:0e:4b:91:b8:6c:2c:d5:00:cc:ea:77:
7f:f2:a1:04:92:06:04:e2:ab:e4:b9:86:24:60:b4:
12:97:3f:43:77:cb:95:45:42:9a:6b:80:db:79:fd:
cd:ce:07:93:ec:69:04:fd:30:69:e8:c1:aa:ef:de:
1d:9a:88:1f:d9:c8:b7:f0:96:6f:40:bb:7b:66:86:
0f:4d:7b:54:56:52:fa:a6:13:8d:d4:1d:6b:a9:8b:
a1:63:87:18:89:1a:0a:f1:97:ab:ff:cc:fe:ac:d4:
cd:35:86:dd:ec:ec:5c:e0:5e:ba:50:50:d4:39:e0:
41:2e:02:9a:56:c8:0c:8d:b2:eb:a1:95:1e:a7:5d:
11:15:55:0d:0f:82:78:85:72:61:94:d4:c6:b8:c8:
02:64:0c:23:54:cd:ce:31:0a:67:04:f2:bd:e7:39:
01:4e:0c:0c:6e:ef:b2:c1:a6:a2:3f:6e:e3:35:12:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:77:01:91:24:3B:C0:3B:60:52:29:F1:4A:B3:17:2D:84:F6:49:0B
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6c:db:41:37:54:80:f8:e7:48:11:c7:f2:a4:89:cd:d4:73:
ca:9d:ff:8a:8b:ae:f9:b1:8e:b0:bf:c4:2f:69:42:08:aa:7a:
46:2d:86:9c:34:cd:6f:19:6e:aa:05:e4:22:86:98:7e:ed:a0:
82:6a:8d:f4:05:78:eb:45:39:e2:5d:76:f9:e0:e3:f7:25:bf:
ed:ce:44:f1:60:63:4f:87:44:13:5e:80:19:03:b3:9e:32:ef:
bd:6f:d8:11:be:24:e9:4a:0f:34:c0:30:ef:51:8e:98:09:37:
fb:0d:78:85:cb:bb:42:e9:06:f5:97:3c:ba:95:60:5a:cf:8e:
bb:b5:ff:e8:18:b4:da:fc:67:f8:d4:70:4b:aa:94:91:e5:25:
6c:01:5c:3c:21:15:09:b7:53:92:9e:53:fa:ac:f9:10:fd:97:
86:f7:96:d3:0f:55:05:d6:59:8c:00:66:42:30:60:a4:ac:91:
ef:2f:34:66:a7:65:85:1b:5c:fe:0e:c1:a0:87:03:c2:f5:b5:
47:30:9f:2e:9a:e3:72:20:16:1e:be:9e:0f:17:12:5b:b6:6f:
d9:8c:e2:06:60:9e:ec:b0:ab:db:ea:72:0d:15:75:d7:0c:2c:
c0:e0:57:0f:83:88:40:c0:d9:c5:01:50:8f:8e:fb:27:6b:e5:
5d:09:9c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:38 2026 by rpki-client