Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier: fISEvV332rq+/jxkNBCVM8mypZ17gaD02k5azwj3NLI=
Subject key identifier: DA:3A:3D:A0:2A:90:02:B8:DB:92:DF:93:17:74:55:D1:6A:9F:A0:24
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial: 019D39780CA214D1575813E176A24FA15AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number: 0FC9
Signing time: Sun 29 Mar 2026 12:01:01 +0000
Manifest this update: Sun 29 Mar 2026 12:01:01 +0000
Manifest next update: Mon 30 Mar 2026 12:01:01 +0000
Files and hashes: 1: QSn62LM0lzdVFTae3oXlcnSJBrM.roa (hash: 1Kyh630uZcpfXJcHCHBYOXiuPYvcumJJUvLTjPHNEfg=)
2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: ms0dVSiYZjqEqfS7VLcsInuT3hM9tZM6Z5E47TRVzTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:0c:a2:14:d1:57:58:13:e1:76:a2:4f:a1:5a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
Validity
Not Before: Mar 29 12:01:01 2026 GMT
Not After : Mar 30 12:01:01 2026 GMT
Subject: CN=da3a3da02a9002b8db92df93177455d16a9fa024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:60:4c:83:2a:f7:88:eb:d3:bb:bd:6e:31:
62:9d:1d:90:ac:a0:96:69:56:99:29:96:b0:46:62:
3d:c7:b6:ec:29:58:c3:b2:1e:f1:1b:8a:30:f3:28:
d9:ae:02:1b:56:1c:9e:27:db:c6:f3:5c:46:ca:8e:
c6:bf:7f:2c:d4:0b:4b:46:17:2e:79:34:43:94:2e:
1a:56:0b:74:e5:c9:75:ef:08:e9:f8:35:4a:1b:d8:
13:bb:7b:53:80:7e:5a:2e:f1:a1:e0:e7:99:4b:52:
aa:aa:5a:ee:5f:00:ec:8b:31:0a:ca:21:12:19:8b:
6c:c1:e5:73:cc:21:86:de:92:15:ee:f5:52:eb:97:
83:0c:b8:aa:00:d5:47:51:23:43:90:73:1a:7c:e1:
fa:37:48:ba:55:9f:6e:00:1d:b1:c3:97:65:a6:62:
09:e5:84:d1:0f:f1:f9:b0:c5:07:fb:a9:7a:35:3d:
d8:1d:14:3f:8b:e1:6a:13:9d:26:8c:c5:48:6a:84:
0c:08:72:28:0f:7c:af:d5:75:11:a0:f1:89:56:d2:
90:43:57:29:98:20:86:c4:41:eb:19:51:1b:ef:51:
4b:c8:84:ad:e1:f0:00:e8:d1:fe:6c:70:95:8b:b6:
ad:b5:a4:d0:bf:75:e7:69:16:93:38:97:e6:37:2c:
05:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3A:3D:A0:2A:90:02:B8:DB:92:DF:93:17:74:55:D1:6A:9F:A0:24
X509v3 Authority Key Identifier:
keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ef:30:4c:d5:02:92:99:b0:84:12:31:7f:07:6c:96:17:89:
e5:b0:c2:a0:01:12:f0:f2:72:4e:59:a5:3b:30:b1:da:38:8a:
e4:a6:0f:5a:90:92:c9:7c:63:74:c7:4e:24:3c:d0:c2:64:89:
25:89:9b:fc:0b:82:ee:86:62:9c:a0:36:75:ac:c5:c3:80:70:
e5:db:93:0c:b2:10:29:a3:82:d8:1f:55:62:9b:a6:92:d5:44:
ec:68:76:1b:7f:4b:48:10:82:1e:c2:c0:de:75:bc:34:57:6e:
d2:ff:6d:3d:d4:dc:e0:77:77:70:6b:65:df:b4:e9:a3:ea:1b:
3a:b5:63:cf:d8:8e:e6:b6:8e:97:94:7f:ee:77:6f:8a:f0:3f:
51:77:bb:fb:78:f1:75:a8:5e:0f:ea:06:c1:ab:ac:90:9d:59:
68:82:41:0e:d5:64:d9:c2:f7:08:01:e8:e6:6a:7d:de:8a:4a:
cf:3d:3c:69:08:b7:ff:04:3c:a3:02:30:ce:14:56:97:c0:44:
37:9a:b4:e0:75:10:fd:74:55:38:d4:ee:63:4e:28:07:fc:ae:
78:ba:4c:5f:a5:1a:de:37:41:9d:0e:6a:14:24:45:6e:9d:c5:
4e:6c:3a:5e:27:b8:aa:30:4b:24:34:c9:8e:35:61:4b:03:b2:
1a:ad:c1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:04 2026 by rpki-client