Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
File: yu79CETrE5qyH4DUByzguO3MBrU.mft (raw, json)
Hash identifier: fM+zOMRrreNvgj/rQ9RwZccqyPJ6FiUG7kQqF9pivBg=
Subject key identifier: 64:A9:41:79:48:4F:5C:F8:72:77:0A:74:77:81:A7:9A:54:A3:86:E2
Authority key identifier: CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5
Certificate issuer: /CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
Certificate serial: 019D39AEB344BD6108546B7A4E91AFFFD10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
Manifest number: 04E1
Signing time: Sun 29 Mar 2026 13:00:43 +0000
Manifest this update: Sun 29 Mar 2026 13:00:43 +0000
Manifest next update: Mon 30 Mar 2026 13:00:43 +0000
Files and hashes: 1: LJiVGCgYbyx1YrovDxbErOmKKZE.roa (hash: 36LJeXEZNvyiVyB06FojXdU1rTulFSqDFXw050tNGLw=)
2: yu79CETrE5qyH4DUByzguO3MBrU.crl (hash: cZXIlh0KR926FEM9cM+I+taOYu6Ok1Y4XI2DK8AbJCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:b3:44:bd:61:08:54:6b:7a:4e:91:af:ff:d1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
Validity
Not Before: Mar 29 13:00:43 2026 GMT
Not After : Mar 30 13:00:43 2026 GMT
Subject: CN=64a94179484f5cf872770a747781a79a54a386e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:b6:43:bb:c8:d1:c6:47:ea:42:fc:5d:f6:
9c:a1:d0:3e:05:fd:a0:26:28:a8:b5:93:3e:fd:31:
3f:4f:08:fa:59:bf:ab:de:00:a5:36:0d:9f:2c:d2:
7a:c3:13:e7:9f:11:06:33:a8:7f:91:65:c4:eb:ba:
23:d5:82:87:4a:7e:01:c4:71:49:25:99:cc:15:15:
be:7d:1a:4c:15:12:e1:bf:fe:37:0c:61:3b:d1:06:
7c:c8:29:73:ed:ae:21:75:cb:8a:59:47:16:82:f6:
e1:36:24:c5:13:55:9a:78:24:96:57:6e:37:ad:6b:
e7:40:54:98:5c:39:7e:0d:54:6d:cf:c4:29:d1:e6:
08:19:76:7a:f2:0e:ae:10:2a:d4:d1:e7:dd:61:fb:
3b:35:81:c5:2b:67:ab:ac:bb:21:df:98:1c:b9:52:
04:b5:6b:05:53:02:53:8f:36:09:3b:7d:19:a9:a8:
1c:1c:bf:d2:d6:92:63:52:30:20:d7:72:88:5e:54:
ca:71:18:0d:e6:5e:71:60:f5:9c:da:4c:b1:e6:60:
51:20:33:df:6a:56:9c:05:c5:53:38:af:ec:9d:ee:
9d:8d:fc:4f:a2:61:f0:2f:12:82:a4:ba:04:40:b5:
95:ad:b2:3e:4d:27:da:7c:3d:54:39:1e:61:59:a9:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A9:41:79:48:4F:5C:F8:72:77:0A:74:77:81:A7:9A:54:A3:86:E2
X509v3 Authority Key Identifier:
keyid:CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:33:9c:94:9f:08:f5:d5:0b:1b:70:75:f6:3c:a7:2d:97:03:
a2:aa:02:fe:63:e2:10:49:82:7f:dc:3d:7c:40:63:2c:e4:38:
fc:ea:bb:1a:c2:b0:90:25:c0:3a:e9:c4:03:6f:3b:3e:04:b5:
36:f7:71:1f:0d:ff:03:1c:65:fe:cf:19:65:98:9d:b6:a3:ed:
14:d7:18:a8:6a:d7:1e:54:98:29:c7:82:9a:97:16:39:03:43:
19:b9:c4:bc:25:dc:d6:35:ce:ad:45:73:59:1b:bf:ba:f3:c5:
a4:68:91:ab:2a:3b:f5:77:3a:27:31:6b:2a:e4:c2:2c:5c:f8:
9a:92:ed:11:fd:f8:2b:a9:0f:64:a2:e3:4a:28:9f:0d:1f:bd:
c4:e6:8c:a5:0a:e3:ac:6a:f5:13:86:3f:8d:cd:4a:22:25:8d:
4b:bb:2e:b8:88:39:ab:0a:5f:4c:ad:94:87:b0:c6:0c:2f:ad:
49:9b:af:5f:71:c6:a4:09:e0:4c:43:55:0c:3f:b9:25:a8:05:
3d:40:b0:28:ea:b9:6b:91:ba:af:ff:ed:90:f5:99:55:1d:81:
3b:9f:a7:05:6a:85:09:ce:46:72:06:91:cb:08:7f:e8:35:2a:
fd:f2:04:9f:9a:71:ae:29:1d:51:be:56:a8:85:43:40:28:07:
4d:13:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:34 2026 by rpki-client