Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier: QvIy5sWJIyrTyufFsAkCUeRVdX4qGaMykL3Bt34bYK0=
Subject key identifier: B9:1D:EB:D2:C1:31:6F:6A:01:48:5E:FC:9B:1B:4C:8B:5F:D3:56:2F
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial: 019D9A06DE354DAABBDB621629E90BF2DD2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number: 0FFB
Signing time: Fri 17 Apr 2026 06:00:34 +0000
Manifest this update: Fri 17 Apr 2026 06:00:34 +0000
Manifest next update: Sat 18 Apr 2026 06:00:34 +0000
Files and hashes: 1: QSn62LM0lzdVFTae3oXlcnSJBrM.roa (hash: 1Kyh630uZcpfXJcHCHBYOXiuPYvcumJJUvLTjPHNEfg=)
2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: rYCGpm9xQxKZCDyWjGclOKGKCR5+lIZdWHaKaTgCTYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:de:35:4d:aa:bb:db:62:16:29:e9:0b:f2:dd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
Validity
Not Before: Apr 17 06:00:34 2026 GMT
Not After : Apr 18 06:00:34 2026 GMT
Subject: CN=b91debd2c1316f6a01485efc9b1b4c8b5fd3562f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:f6:e8:f9:d9:be:31:af:7a:22:f2:f4:d7:
d0:09:49:25:4e:43:76:a9:00:97:1f:54:59:fa:b0:
01:55:07:f6:87:5b:e5:4f:00:c9:bf:64:df:a5:58:
ab:ff:05:da:94:8d:cf:06:db:19:08:cf:44:bf:f7:
31:bf:b8:54:8e:d9:90:5d:38:87:2c:d8:cd:38:dc:
94:db:a7:f8:8a:43:d0:14:5b:f7:17:22:69:b1:9c:
09:18:35:88:3b:b7:dd:6c:99:bc:65:ba:af:5e:c3:
ee:e4:90:df:c6:e2:e3:c4:8a:4a:1a:6d:52:16:dc:
d0:15:e6:33:ee:2d:e8:a2:69:2a:69:3a:a0:54:38:
b3:dd:d7:9f:b8:5a:2b:b7:a8:af:9e:78:5f:34:0d:
49:0a:31:15:a8:a5:e2:2d:13:b8:26:1a:2c:02:e1:
43:2f:2a:e8:05:36:a3:e3:fb:fd:00:91:fb:79:47:
19:24:c6:fc:c8:5f:c3:68:fa:0e:35:9b:6b:77:d3:
b7:5b:51:80:f5:d3:5e:03:06:17:21:5e:0e:53:0a:
22:fe:db:ab:63:07:69:da:c5:78:f8:e0:3e:af:8b:
be:a6:c0:af:1d:1c:94:72:64:5b:b4:70:9d:20:55:
d1:3c:17:14:f4:68:2b:ae:db:ed:3a:1d:c2:b2:44:
15:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1D:EB:D2:C1:31:6F:6A:01:48:5E:FC:9B:1B:4C:8B:5F:D3:56:2F
X509v3 Authority Key Identifier:
keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2d:48:01:46:2a:fc:61:7c:c9:e2:f3:29:7b:bf:8b:8e:23:
6d:c8:64:fd:6c:7e:7f:7b:66:b5:0e:34:2f:1f:f4:ab:45:d3:
c1:d0:8e:70:d2:d2:c6:13:70:2a:24:2e:d8:75:c6:c9:ad:08:
d9:86:f2:cf:20:65:b2:15:b6:42:87:06:c0:bf:aa:d4:14:15:
6a:57:74:73:84:ad:86:e4:aa:f7:ec:85:39:0b:e5:78:d2:0d:
c1:2b:57:f2:39:f4:1d:a5:79:c3:f6:ca:e2:81:51:44:1b:73:
22:59:aa:8d:a3:bc:d9:85:09:31:78:d2:6f:eb:cf:08:7e:f7:
d6:db:f1:ee:8a:78:f7:e4:08:16:46:24:f3:de:ed:de:2b:79:
4f:27:0b:4d:c9:28:1b:53:33:d0:84:eb:57:39:c5:f4:5e:f3:
52:61:83:48:52:82:eb:60:ab:03:e4:21:ca:3c:77:68:54:08:
05:f8:11:b5:b6:1e:24:d2:a3:6e:20:73:c3:51:a1:b0:77:0d:
6e:a0:25:0c:12:16:5b:b1:71:21:7e:fb:15:bc:e5:d3:67:50:
b1:8a:34:f3:06:8b:5a:99:6c:49:70:dc:1e:44:9d:a9:f0:26:
97:83:d6:cf:14:73:3b:8d:7a:85:fd:e9:90:40:d0:ee:98:f0:
03:10:2c:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBt41Taq722IWKekL8t0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZTc0ZmNjZTQxOTMzZjQyN2M1MzdkMzY1ZDVlNzYxZDI2
NTVlYjYwHhcNMjYwNDE3MDYwMDM0WhcNMjYwNDE4MDYwMDM0WjAzMTEwLwYDVQQD
EyhiOTFkZWJkMmMxMzE2ZjZhMDE0ODVlZmM5YjFiNGM4YjVmZDM1NjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbf26PnZvjGveiLy9NfQCUklTkN2
qQCXH1RZ+rABVQf2h1vlTwDJv2TfpVir/wXalI3PBtsZCM9Ev/cxv7hUjtmQXTiH
LNjNONyU26f4ikPQFFv3FyJpsZwJGDWIO7fdbJm8ZbqvXsPu5JDfxuLjxIpKGm1S
FtzQFeYz7i3oomkqaTqgVDiz3defuFort6ivnnhfNA1JCjEVqKXiLRO4JhosAuFD
LyroBTaj4/v9AJH7eUcZJMb8yF/DaPoONZtrd9O3W1GA9dNeAwYXIV4OUwoi/tur
Ywdp2sV4+OA+r4u+psCvHRyUcmRbtHCdIFXRPBcU9GgrrtvtOh3CskQVMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkd69LBMW9qAUhe/JsbTItf01YvMB8GA1UdIwQY
MBaAFMrnT8zkGTP0J8U302XV52HSZV62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAt
YzM1NDEwYjViNjkxLzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAtYzM1NDEwYjViNjkx
LzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGy1IAUYq
/GF8yeLzKXu/i44jbchk/Wx+f3tmtQ40Lx/0q0XTwdCOcNLSxhNwKiQu2HXGya0I
2YbyzyBlshW2QocGwL+q1BQVald0c4SthuSq9+yFOQvleNINwStX8jn0HaV5w/bK
4oFRRBtzIlmqjaO82YUJMXjSb+vPCH731tvx7op49+QIFkYk897t3it5TycLTcko
G1Mz0ITrVznF9F7zUmGDSFKC62CrA+Qhyjx3aFQIBfgRtbYeJNKjbiBzw1GhsHcN
bqAlDBIWW7FxIX77Fbzl02dQsYo08waLWplsSXDcHkSdqfAml4PWzxRzO416hf3p
kEDQ7pjwAxAsoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:33 2026 by rpki-client