Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier: pau+r7/zgKxXezZu+vaqHl1vCPYcznmIxYqghElaaI8=
Subject key identifier: 64:61:86:A6:2B:3C:09:0E:0E:11:90:38:B5:AA:F0:76:55:AA:16:37
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 019E1D90A637B1ACDFA5AC2AEA346ADFA9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number: 1912
Signing time: Tue 12 May 2026 19:01:19 +0000
Manifest this update: Tue 12 May 2026 19:01:19 +0000
Manifest next update: Wed 13 May 2026 19:01:19 +0000
Files and hashes: 1: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (hash: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM=)
2: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (hash: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g=)
3: U-ONT3QFPmL6bgDFPQrkc4UkItw.roa (hash: jHrm5ubltObAwz/kEr5+twdpGR7UoJHw+XLZONVGw4I=)
4: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (hash: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64=)
5: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (hash: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI=)
6: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (hash: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys=)
7: rZHZ_k5hgir55AATjETSpEWsH80.roa (hash: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE=)
8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: k9GNhhKS0sQsRyywEllj+lT+vogbTORwSJXBb/pM88o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:a6:37:b1:ac:df:a5:ac:2a:ea:34:6a:df:a9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: May 12 19:01:19 2026 GMT
Not After : May 13 19:01:19 2026 GMT
Subject: CN=646186a62b3c090e0e119038b5aaf07655aa1637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:d3:2f:0b:b6:5c:d3:29:c0:75:3b:1e:4a:
49:aa:da:bd:cd:13:6b:83:e6:78:37:0e:cd:15:94:
a5:2a:72:78:a0:9e:e5:f8:15:5e:31:30:96:3c:88:
3c:cf:bc:34:11:0f:5e:36:65:1e:39:f4:4a:17:96:
02:6f:53:62:5e:48:19:45:1e:ad:86:0f:2e:74:b3:
4a:45:b4:c2:7a:d8:da:96:04:7b:9b:65:28:77:08:
4f:80:0f:8e:38:96:95:93:a8:a4:44:fa:bb:64:81:
fd:ed:02:3e:31:aa:d5:c5:1b:84:81:09:7f:22:9d:
0b:ac:36:b3:73:54:3c:f2:20:09:73:26:a5:ca:68:
6d:c0:7c:a6:4d:10:b8:9f:2b:64:29:69:41:a7:b7:
cd:83:a1:16:ab:94:7b:f2:33:93:17:c5:e1:eb:0a:
58:df:e9:2e:b6:ff:88:7d:f0:e4:96:d9:97:0c:09:
0d:43:67:3a:b9:86:52:91:f3:e2:88:a9:af:17:5a:
eb:53:ee:3f:54:28:5a:bc:8d:5c:32:76:9d:a7:fb:
e3:b0:3d:50:9a:26:3e:5e:aa:68:2a:6f:9c:51:ea:
1f:ad:6d:81:24:b3:ac:e2:46:4d:15:de:aa:98:70:
4b:9c:33:c1:bb:1d:cc:bc:5a:7e:70:9b:c3:73:b8:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:61:86:A6:2B:3C:09:0E:0E:11:90:38:B5:AA:F0:76:55:AA:16:37
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a3:d6:b8:1a:1f:de:bf:61:db:86:53:23:a1:22:29:ad:1e:
53:82:a7:53:80:63:24:70:19:92:4c:a0:6a:08:b2:09:01:8a:
0e:18:86:7c:f1:0a:9e:f9:7c:16:de:6a:07:22:a0:9e:f9:51:
00:4d:eb:ac:d1:71:d8:78:18:58:b2:5a:9a:eb:7a:e1:90:6d:
b5:79:59:43:e8:c1:f6:de:1e:cc:a9:79:60:23:10:b2:65:e2:
b0:5d:d3:c4:8b:32:08:68:5e:bc:c5:e7:17:5f:08:dd:15:05:
38:c9:99:71:d2:60:cf:52:63:5a:f7:db:f2:8a:87:f9:72:a3:
d7:70:b3:22:36:26:51:78:4a:e8:45:a4:d9:00:08:bb:47:14:
83:1e:7b:b5:dd:81:97:a7:8f:f3:e7:ab:7a:fe:30:fb:ce:ce:
1e:11:2b:23:82:49:6a:88:c7:ed:04:b1:6d:5f:bc:85:42:94:
b1:ec:cb:c3:ad:8d:86:0a:45:87:a3:3d:6f:b9:41:b3:a9:87:
5d:6b:3c:24:1e:2c:81:89:32:22:0e:95:80:25:c6:ba:db:16:
9b:87:d3:8d:97:8a:6a:72:24:9e:56:25:7f:55:da:70:b0:ad:
19:c7:45:dc:c4:40:42:3b:d8:40:90:1a:f7:b7:2a:77:64:e3:
2a:d7:47:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:05 2026 by rpki-client