Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier: rYgGR5P+XH7e+NBeKh2sRcxC/DCbZHIv2T0xQHkuY5g=
Subject key identifier: B2:D6:03:82:F8:8C:E5:0A:2A:A4:6A:A2:15:CB:C7:17:AC:A3:0D:A2
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 019D284D70ADE8C62AA3255BE31C1DAAEF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 04:00:56 +0000
Manifest this update: Thu 26 Mar 2026 04:00:56 +0000
Manifest next update: Fri 27 Mar 2026 04:00:56 +0000
Files and hashes: 1: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (hash: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM=)
2: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (hash: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g=)
3: U-ONT3QFPmL6bgDFPQrkc4UkItw.roa (hash: jHrm5ubltObAwz/kEr5+twdpGR7UoJHw+XLZONVGw4I=)
4: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (hash: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64=)
5: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (hash: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI=)
6: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (hash: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys=)
7: rZHZ_k5hgir55AATjETSpEWsH80.roa (hash: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE=)
8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: 8HPs2fmUg88Ib1EVwn9AAsNyljFF3wyEH3XeoxnV5Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:70:ad:e8:c6:2a:a3:25:5b:e3:1c:1d:aa:ef:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Mar 26 04:00:56 2026 GMT
Not After : Mar 27 04:00:56 2026 GMT
Subject: CN=b2d60382f88ce50a2aa46aa215cbc717aca30da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b7:c3:5e:b1:14:5e:24:c9:36:24:3a:e3:01:
f6:4e:c0:e0:90:c2:b7:3e:21:0a:99:97:2f:8e:5b:
8e:23:a4:ae:a7:0b:24:b7:5f:d0:22:66:37:1f:91:
2b:fa:dd:1d:c3:a0:e1:e6:23:4f:cd:ce:be:a2:d4:
d9:82:cb:66:18:2f:88:e2:f2:7a:47:1a:ca:e3:14:
86:4f:d2:41:07:80:64:5c:03:bd:e4:b9:a4:e3:4b:
a5:dd:ad:f6:01:ce:b4:13:87:70:65:8a:99:c8:5a:
bd:ad:37:72:0a:09:55:d7:fd:26:e7:56:92:c7:10:
3e:54:c7:9a:6d:07:e0:e2:17:d3:1f:8f:1c:18:f5:
f1:e8:a2:40:25:7d:71:1c:fd:55:32:d2:c2:8d:a0:
8f:ce:eb:2c:2b:9e:1c:4c:27:6f:42:a7:46:65:4f:
d9:f0:d5:59:82:33:0b:f9:64:9e:e1:4e:be:fa:5c:
8f:de:92:a1:c2:0b:45:a3:b0:7a:4f:38:1a:18:d0:
bf:b0:40:33:a4:e8:dc:02:59:b4:0e:8d:0c:44:98:
8f:6b:62:13:10:8d:92:50:53:61:54:dd:bc:bb:b2:
32:e8:1f:18:6f:8b:d2:30:ce:08:e7:0a:b8:68:91:
cf:9f:0b:11:24:df:be:69:64:81:e5:8b:c3:30:0e:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D6:03:82:F8:8C:E5:0A:2A:A4:6A:A2:15:CB:C7:17:AC:A3:0D:A2
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2c:b3:ed:8d:1e:04:a7:97:d8:3f:cc:28:3e:b3:f5:80:d0:
29:25:26:a2:98:57:13:be:47:f4:7f:1a:2b:d9:11:90:57:77:
65:71:67:cc:d1:8e:fe:e9:81:50:54:85:e9:fe:72:a3:e2:fc:
94:a4:55:82:ce:d2:b2:05:0d:a8:0d:5b:4d:a7:97:20:e5:a9:
51:d4:86:0a:9d:ed:88:53:df:ec:b5:c7:b6:0a:7f:a6:68:7e:
c7:4c:74:02:6a:a7:54:f1:1c:1b:b9:88:40:2c:ee:a0:49:32:
c7:4c:e7:b2:f9:56:0e:be:ee:43:9d:a5:93:0b:65:5f:79:6c:
56:14:14:3c:dc:e0:15:97:a8:cb:a7:ac:b3:d3:ff:3b:85:73:
16:54:bc:30:3d:86:07:79:bb:88:11:0f:85:4d:3d:46:e2:67:
37:dc:9a:8a:7e:0b:1d:8d:a7:23:e4:01:18:a4:8f:d6:5f:3d:
46:0f:88:31:ce:67:f7:6d:d4:83:71:29:25:3f:c1:e5:32:52:
2b:a4:45:40:2e:25:15:cc:a4:8c:4b:c6:1e:39:9a:60:3d:de:
2a:ae:df:2d:b6:2b:87:7a:09:33:74:df:61:15:ad:45:8a:a5:
16:a9:88:e4:73:a6:89:54:3b:ac:0b:f9:ee:1f:58:ed:bb:42:
d9:d9:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:51 2026 by rpki-client