Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier: 4rk6tbUBQGX8Whr42O0jYzAe9/LjX93m5EL90vsAXmU=
Subject key identifier: 2F:47:E3:32:38:B1:72:51:B4:41:1E:0B:5E:EE:F1:0D:2C:CF:49:6A
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial: 01A11A19AA0F95EBA3F74FD8C34437DA310C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number: 11CB
Signing time: Thu 08 Oct 2026 06:00:51 +0000
Manifest this update: Thu 08 Oct 2026 06:00:51 +0000
Manifest next update: Fri 09 Oct 2026 06:00:51 +0000
Files and hashes: 1: QSn62LM0lzdVFTae3oXlcnSJBrM.roa (hash: 1Kyh630uZcpfXJcHCHBYOXiuPYvcumJJUvLTjPHNEfg=)
2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: mwyg++DYoTVUby+T8RHAhJ/n2NQh2r1E0gPoggH/lNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:aa:0f:95:eb:a3:f7:4f:d8:c3:44:37:da:31:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
Validity
Not Before: Oct 8 06:00:51 2026 GMT
Not After : Oct 9 06:00:51 2026 GMT
Subject: CN=2f47e33238b17251b4411e0b5eeef10d2ccf496a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:58:54:8e:e2:33:2d:c3:fe:d9:41:d2:73:
d5:6b:0a:68:e8:f2:2e:76:b1:70:fd:99:67:e6:32:
1b:09:51:30:4c:83:78:18:19:ab:2a:ff:d1:ab:08:
3b:0c:5f:c3:78:a0:41:78:29:24:21:3e:8a:c4:85:
aa:dd:fd:b2:7f:fe:9d:67:15:bb:a3:89:a0:9f:3e:
64:f4:3d:58:68:14:04:d6:64:0c:40:d1:ee:a8:cc:
f9:44:f1:12:15:f0:77:79:14:83:88:30:53:c4:7d:
4c:40:2c:8b:3d:1b:8d:b0:b5:fb:1b:ba:e5:04:23:
ee:68:a5:1f:5a:30:ad:68:a2:33:96:1a:cf:4a:12:
a7:82:5b:54:fd:11:ba:70:b9:00:88:8a:f7:a5:71:
03:b1:f2:4c:fb:4e:b9:f8:ae:44:11:e2:30:16:cf:
38:d7:89:3f:79:49:5e:f6:72:94:dc:8f:d3:69:d6:
c7:02:76:cb:f6:13:64:02:f1:94:fb:be:43:26:61:
8b:db:3f:a6:26:a6:4d:dc:ac:75:81:75:35:c4:a6:
dd:c7:c5:2c:78:e3:7f:2e:5b:73:68:36:8a:75:95:
50:b7:b6:f6:21:30:d3:85:9d:79:9f:48:17:25:aa:
48:a6:80:47:85:77:dc:49:8a:66:e2:50:6a:ff:ff:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:47:E3:32:38:B1:72:51:B4:41:1E:0B:5E:EE:F1:0D:2C:CF:49:6A
X509v3 Authority Key Identifier:
keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2f:64:5f:5c:a7:f1:f4:a1:90:7c:ce:e9:99:65:79:fb:54:
6f:fb:64:b1:56:9c:99:5f:65:87:1b:d9:8f:81:09:2d:12:01:
bd:3f:b5:2d:42:f5:e3:87:e1:25:eb:67:29:a0:de:f5:0d:c3:
61:e2:2f:ac:b2:4d:bf:70:b5:d8:9c:30:3e:e4:e8:dc:56:9b:
35:59:50:cd:74:e1:28:d7:6d:26:de:c6:5c:87:7a:d0:56:65:
9f:14:2e:8d:ab:c3:b7:61:54:70:23:a0:43:80:8d:93:94:f6:
b5:97:b7:eb:76:6a:2a:bb:25:1a:e7:92:14:b5:68:a0:15:92:
99:c3:f6:91:27:04:a5:ba:57:9d:49:37:de:dd:b1:d4:b4:7d:
5e:10:2c:7c:e6:9f:11:03:dc:a4:b2:57:15:b4:22:83:e2:41:
f1:14:3a:bf:d1:cf:9e:56:e7:ca:f2:26:39:fe:5a:46:d4:2c:
61:77:44:53:7b:63:0b:cf:e3:05:d9:c1:6c:4e:58:8b:cb:83:
e2:98:2e:7f:bd:fe:91:51:8e:1b:95:20:6e:1c:c8:20:a3:16:
36:6c:a5:f5:fa:ca:04:e2:6f:cd:9f:67:88:6d:bc:c6:ee:a8:
4f:98:ed:3a:4f:4b:1a:1e:37:ab:60:c1:11:f6:f9:39:49:f3:
b5:e5:fd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:24:41 2026 by rpki-client