Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: PF5ZC1XPErLPNK5VW3DFFb24Y1CWCMTcoBghWYH7JjQ=
Subject key identifier: 5D:B8:EC:DE:E8:A0:4C:6B:38:F2:C7:B7:67:EB:82:94:CC:CA:73:8E
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 019CACB49FC2C0FF77F1BE5F910E2C7A2EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0F2D
Signing time: Mon 02 Mar 2026 04:00:44 +0000
Manifest this update: Mon 02 Mar 2026 04:00:44 +0000
Manifest next update: Tue 03 Mar 2026 04:00:44 +0000
Files and hashes: 1: HXXJ5U9DGvbbZuWvDguPFDAOEkc.roa (hash: mEsE8YsZsxlgLGJIZIrrf3uSCgdInsp4ueGy7PdnCmU=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: p6+Rp73Cok0esCEqj16Q+dKIeila/FMpqasRhOeqp1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:9f:c2:c0:ff:77:f1:be:5f:91:0e:2c:7a:2e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Mar 2 04:00:44 2026 GMT
Not After : Mar 3 04:00:44 2026 GMT
Subject: CN=5db8ecdee8a04c6b38f2c7b767eb8294ccca738e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:d9:52:fc:65:91:79:af:e8:bc:ff:5d:19:
02:8b:f2:f2:8a:06:12:13:36:8f:e9:34:64:66:1e:
5b:34:c9:e1:9b:09:19:ed:69:1c:ea:20:b2:ab:61:
d1:82:23:d1:b5:19:0c:e4:2d:5c:a9:8a:da:1c:43:
39:1b:c0:c4:61:c4:86:f0:66:70:bf:23:41:db:ae:
9b:a4:f3:41:15:ee:e2:7b:0a:e6:a9:e9:da:7f:b4:
27:58:94:05:26:d2:1c:b9:97:ab:aa:43:44:dc:3e:
d3:bd:7d:9f:82:f6:c9:e0:02:0b:b8:d6:ad:42:3f:
24:4c:fd:d9:76:64:a3:a4:9b:40:a1:5b:6a:48:e0:
7e:8d:a7:f9:d2:64:b0:f7:c8:b4:40:9a:ed:36:19:
64:6c:b4:28:aa:49:3b:92:b2:d3:95:d1:c9:cd:4a:
a8:e9:48:2a:ad:b2:d8:e5:87:85:30:39:f4:09:35:
a0:ce:ba:ff:e0:5e:46:d8:0f:e5:03:b0:e4:34:95:
58:d9:e6:33:fe:5e:df:2a:24:bc:f6:6e:41:f2:67:
9e:a7:d4:17:8c:99:be:12:ea:1d:34:5b:83:f3:29:
29:a4:e9:58:f3:f1:03:c4:79:77:f8:94:87:d6:9e:
9a:35:33:84:2f:89:af:ec:85:2a:4f:52:aa:66:13:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B8:EC:DE:E8:A0:4C:6B:38:F2:C7:B7:67:EB:82:94:CC:CA:73:8E
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7f:ba:a3:46:59:00:e7:83:b8:a5:7b:e2:6b:f5:0d:9a:86:
88:ed:98:05:f0:34:0b:7e:a7:59:35:70:1f:db:60:78:d4:a8:
74:0e:da:48:ff:b2:40:fb:dc:13:f2:2f:a4:ce:25:77:32:3b:
0c:25:bd:c9:9f:34:8f:ed:24:c6:d4:8c:64:47:b4:f7:d8:74:
d4:94:0c:9a:d5:f1:a6:f4:cf:2b:76:29:ee:26:04:2d:29:33:
ec:00:57:b4:4b:a4:70:bf:2f:32:ca:e4:3a:2e:fc:09:8e:ad:
83:3a:88:1b:08:6c:b3:60:7c:c7:8c:b1:59:05:e3:21:4f:cc:
a2:96:fe:36:27:61:1b:65:76:25:77:fb:7e:af:c2:b7:10:e2:
eb:7d:63:cf:af:0c:41:31:ca:33:d3:e6:7d:66:fe:26:63:38:
fe:f0:46:fa:27:e0:5e:25:9d:d7:76:eb:82:06:3e:14:64:7f:
a1:e5:6b:1b:0b:d2:c2:c1:8b:1a:e0:63:6d:7f:48:87:25:e1:
3f:06:56:6b:c7:2f:52:01:0e:82:75:40:cb:d3:e9:d9:f0:77:
23:51:44:5e:86:2c:ca:c6:fc:b6:6b:b7:b1:12:33:62:75:ed:
6c:7e:e3:4e:32:76:83:19:db:47:f4:d3:ba:4e:4d:3b:11:61:
fc:83:64:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystJ/CwP938b5fkQ4sei6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWU0MTA3NGUzNTk5MGFmZTRmNTBhODRlNDJlYjA5NTg0
YTJmMTkwHhcNMjYwMzAyMDQwMDQ0WhcNMjYwMzAzMDQwMDQ0WjAzMTEwLwYDVQQD
Eyg1ZGI4ZWNkZWU4YTA0YzZiMzhmMmM3Yjc2N2ViODI5NGNjY2E3MzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJPZUvxlkXmv6Lz/XRkCi/LyigYS
EzaP6TRkZh5bNMnhmwkZ7Wkc6iCyq2HRgiPRtRkM5C1cqYraHEM5G8DEYcSG8GZw
vyNB266bpPNBFe7iewrmqenaf7QnWJQFJtIcuZerqkNE3D7TvX2fgvbJ4AILuNat
Qj8kTP3ZdmSjpJtAoVtqSOB+jaf50mSw98i0QJrtNhlkbLQoqkk7krLTldHJzUqo
6UgqrbLY5YeFMDn0CTWgzrr/4F5G2A/lA7DkNJVY2eYz/l7fKiS89m5B8meep9QX
jJm+EuodNFuD8ykppOlY8/EDxHl3+JSH1p6aNTOEL4mv7IUqT1KqZhNefQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF247N7ooExrOPLHt2frgpTMynOOMB8GA1UdIwQY
MBaAFMruQQdONZkK/k9QqE5C6wlYSi8ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMt
Yjg1MTg5MDk4MjBmLzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMtYjg1MTg5MDk4MjBm
LzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFX+6o0ZZ
AOeDuKV74mv1DZqGiO2YBfA0C36nWTVwH9tgeNSodA7aSP+yQPvcE/IvpM4ldzI7
DCW9yZ80j+0kxtSMZEe099h01JQMmtXxpvTPK3Yp7iYELSkz7ABXtEukcL8vMsrk
Oi78CY6tgzqIGwhss2B8x4yxWQXjIU/Mopb+NidhG2V2JXf7fq/CtxDi631jz68M
QTHKM9PmfWb+JmM4/vBG+ifgXiWd13brggY+FGR/oeVrGwvSwsGLGuBjbX9IhyXh
PwZWa8cvUgEOgnVAy9Pp2fB3I1FEXoYsysb8tmu3sRIzYnXtbH7jTjJ2gxnbR/TT
uk5NOxFh/INkzQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:31 2026 by rpki-client