Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier: dde+ptUxQ1ibvP8hbQAhrW6NPSZeZWHYFWP4GIO1W+w=
Subject key identifier: BE:C5:AF:BB:C2:97:52:54:25:C6:FE:4E:67:29:AC:EE:79:5B:22:D4
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 01A0D6B9E161A6570BDA3C105014C687D3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number: 1A7B
Signing time: Fri 25 Sep 2026 04:01:41 +0000
Manifest this update: Fri 25 Sep 2026 04:01:41 +0000
Manifest next update: Sat 26 Sep 2026 04:01:41 +0000
Files and hashes: 1: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (hash: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM=)
2: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (hash: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g=)
3: U-ONT3QFPmL6bgDFPQrkc4UkItw.roa (hash: jHrm5ubltObAwz/kEr5+twdpGR7UoJHw+XLZONVGw4I=)
4: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (hash: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64=)
5: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (hash: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI=)
6: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (hash: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys=)
7: rZHZ_k5hgir55AATjETSpEWsH80.roa (hash: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE=)
8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: K0M0yEUzA73tSzmNl0NL/xfove6gzwysyeQ4CBypmPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:e1:61:a6:57:0b:da:3c:10:50:14:c6:87:d3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Sep 25 04:01:41 2026 GMT
Not After : Sep 26 04:01:41 2026 GMT
Subject: CN=bec5afbbc297525425c6fe4e6729acee795b22d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3d:63:f7:d6:cb:05:9b:3a:e7:b5:39:57:8f:
ee:d2:85:90:b3:fe:1c:7f:4c:63:97:15:af:d8:8a:
8f:ea:34:1a:93:e8:77:66:9b:c7:74:ea:42:62:78:
25:50:07:8c:0a:d9:fc:fe:99:a8:b2:f7:e5:23:21:
0b:32:7f:c6:2a:ae:c4:6a:70:f3:47:e2:fd:32:69:
5c:32:91:9c:7a:f5:5a:1f:84:8c:d7:7a:c2:19:6d:
fc:20:d5:3b:b7:4b:8b:12:50:af:ff:ca:d1:10:ea:
07:70:23:5f:6e:20:3f:94:a4:96:7f:9d:bf:f6:59:
37:45:c7:41:72:e1:bf:f8:50:73:00:b4:eb:62:da:
9b:26:bc:cf:aa:1d:8c:4c:25:17:30:4b:45:55:f8:
c5:92:93:f7:6c:7e:b9:4f:03:21:22:7d:a5:6f:dd:
c2:e8:32:f0:d7:d1:86:da:63:d8:db:f9:34:70:f6:
36:85:f4:bc:63:90:ec:72:84:7c:99:2b:3f:93:e4:
09:dc:70:7c:8e:6f:4f:8a:cf:8b:20:f1:5b:35:21:
79:1e:c2:23:ce:d7:e1:64:e5:8c:d4:c6:0a:08:d1:
74:d9:f2:98:1d:84:c5:9e:b9:7a:40:a2:13:a9:6f:
7e:fb:42:6e:6f:be:a4:8e:29:0b:03:80:40:2f:1c:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C5:AF:BB:C2:97:52:54:25:C6:FE:4E:67:29:AC:EE:79:5B:22:D4
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:92:b3:c4:65:21:03:cf:57:9f:8b:e8:d5:7c:d0:59:ed:ce:
aa:69:b9:56:50:e4:d9:95:e0:7e:9b:e5:10:b6:15:23:d0:e4:
9f:c3:61:62:6b:f1:77:1f:59:c3:5d:a5:8b:b8:51:f3:a4:3a:
87:ec:30:01:d1:3b:4b:48:92:fa:e4:89:eb:fe:68:9e:57:7e:
8f:06:40:44:64:8c:00:f3:de:78:73:3a:46:5d:91:aa:1c:50:
4f:6f:d3:4d:6d:2f:bc:e5:29:7a:5c:84:90:7c:82:47:6c:25:
ee:c8:27:64:f9:73:69:ba:f3:f3:f2:2d:a3:79:09:f5:16:ef:
bc:04:5c:51:bd:e5:35:92:5e:81:9c:30:79:63:9f:77:ad:4e:
c8:8d:8a:30:73:49:64:97:47:1f:85:89:ba:65:c5:f9:8e:a4:
16:4d:e0:dc:0d:ca:09:b1:d0:25:12:99:3c:f1:95:3a:e0:87:
2d:1a:92:ea:a7:45:55:64:bf:23:67:f6:29:2a:37:c4:23:69:
74:b9:51:6b:0d:0b:fb:f9:05:6b:18:11:21:d0:b1:48:bb:ee:
a4:75:b8:a7:eb:ca:7a:57:d0:e1:fb:49:8a:fb:a6:ba:90:45:
d1:78:5a:21:ea:24:58:d7:6a:e3:85:b8:bf:41:3b:27:24:a5:
aa:1d:fc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:25:15 2026 by rpki-client