Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier: qONtAfWCnDWAtNeuGt8pNOgzpRrYuW+zxqN5DD/+JT0=
Subject key identifier: 9D:DB:E9:75:2D:37:FB:DA:81:33:10:21:76:BD:27:1E:39:FE:43:29
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 019CE6A476EBE7B830E7D55899D0CF1BAA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number: 1871
Signing time: Fri 13 Mar 2026 10:01:03 +0000
Manifest this update: Fri 13 Mar 2026 10:01:03 +0000
Manifest next update: Sat 14 Mar 2026 10:01:03 +0000
Files and hashes: 1: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (hash: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM=)
2: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (hash: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g=)
3: U-ONT3QFPmL6bgDFPQrkc4UkItw.roa (hash: jHrm5ubltObAwz/kEr5+twdpGR7UoJHw+XLZONVGw4I=)
4: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (hash: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64=)
5: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (hash: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI=)
6: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (hash: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys=)
7: rZHZ_k5hgir55AATjETSpEWsH80.roa (hash: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE=)
8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: taxzx5aD8/mI/XYEEx/7WI5RwaS0UG0k5CJg677eVO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:76:eb:e7:b8:30:e7:d5:58:99:d0:cf:1b:aa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Mar 13 10:01:03 2026 GMT
Not After : Mar 14 10:01:03 2026 GMT
Subject: CN=9ddbe9752d37fbda8133102176bd271e39fe4329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:79:f9:7b:92:a3:a0:b5:03:8c:74:6c:ca:
76:45:0f:86:13:e8:38:f3:f2:ef:40:d9:f3:cc:3c:
50:47:7a:79:e9:08:2f:84:69:5d:f5:ed:c7:52:4d:
2f:15:d9:77:22:ad:a7:8b:74:3b:72:3f:2e:29:f1:
30:fe:73:87:cf:da:48:71:a5:0a:f9:0f:45:80:1b:
d0:5a:4f:08:70:2f:5f:2b:ca:c1:1b:af:21:4a:4e:
09:11:e3:a5:98:b5:19:58:36:25:50:13:9c:9c:54:
e5:62:c9:cb:b5:b9:97:c9:e0:70:10:6d:91:36:9a:
74:c1:f6:77:b6:b9:4c:b7:26:fd:98:da:d3:d4:ab:
ed:aa:52:6f:21:54:c2:33:43:20:51:86:68:f6:37:
a6:7e:62:b7:17:a4:76:a8:c5:a2:1e:8a:b2:70:ea:
b1:57:11:97:6c:e4:54:06:39:0a:a5:64:03:cd:9f:
af:92:05:3e:21:02:d9:87:fc:73:cb:ab:4e:f0:3d:
4c:bd:f3:c7:e7:93:d9:77:3b:1b:3d:01:8c:14:90:
17:20:1d:e7:01:49:68:b3:d5:90:2e:b1:3d:5a:f9:
a5:01:d8:d2:7b:5c:78:ec:2f:b5:cd:7c:d5:f7:2a:
9b:51:7d:26:c6:b7:b8:11:95:c9:86:6d:5d:bf:eb:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DB:E9:75:2D:37:FB:DA:81:33:10:21:76:BD:27:1E:39:FE:43:29
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:56:43:8c:8c:74:aa:db:a4:71:9a:09:ac:23:bf:87:12:ca:
53:38:d9:5e:c2:9f:2a:4f:30:1c:4f:5a:05:39:5b:04:77:70:
4b:51:92:42:c0:e4:2f:56:c9:3b:7a:89:1a:3d:44:49:41:c2:
af:81:a4:fe:5c:25:27:79:14:c5:b0:04:c2:5a:c5:a5:6c:4b:
3a:32:0d:db:50:91:ac:47:62:80:14:a7:b0:42:91:98:f0:79:
a6:76:d7:fd:65:c3:a4:31:54:d1:26:68:6e:af:a8:b2:9e:08:
75:3c:ca:27:1a:cf:fc:b4:c8:b0:6b:87:78:2c:9a:6f:ec:00:
3d:7e:cf:47:03:95:32:70:6a:48:b4:1a:45:77:61:fb:aa:e2:
d7:5c:cf:f6:ad:98:6d:ba:c0:91:5b:54:d8:9b:e3:42:27:08:
9c:5b:45:76:f6:59:b7:19:6a:f0:9c:e9:2a:db:05:72:62:ed:
fe:99:27:34:7a:4b:78:24:e2:7d:37:b6:33:e5:3f:6c:8b:2a:
ee:a3:58:c3:31:a7:42:2d:0f:34:e3:8a:71:6c:18:9f:5f:fa:
11:b3:f8:fc:23:81:b7:a2:f8:83:5d:54:a3:53:e4:7f:42:ec:
d8:f0:65:20:38:59:a9:b8:62:b6:73:69:d7:eb:aa:ef:9e:28:
b8:24:1f:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmpHbr57gw59VYmdDPG6pMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3
NTdmM2YwHhcNMjYwMzEzMTAwMTAzWhcNMjYwMzE0MTAwMTAzWjAzMTEwLwYDVQQD
Eyg5ZGRiZTk3NTJkMzdmYmRhODEzMzEwMjE3NmJkMjcxZTM5ZmU0MzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDN5+XuSo6C1A4x0bMp2RQ+GE+g4
8/LvQNnzzDxQR3p56QgvhGld9e3HUk0vFdl3Iq2ni3Q7cj8uKfEw/nOHz9pIcaUK
+Q9FgBvQWk8IcC9fK8rBG68hSk4JEeOlmLUZWDYlUBOcnFTlYsnLtbmXyeBwEG2R
Npp0wfZ3trlMtyb9mNrT1KvtqlJvIVTCM0MgUYZo9jemfmK3F6R2qMWiHoqycOqx
VxGXbORUBjkKpWQDzZ+vkgU+IQLZh/xzy6tO8D1MvfPH55PZdzsbPQGMFJAXIB3n
AUlos9WQLrE9WvmlAdjSe1x47C+1zXzV9yqbUX0mxre4EZXJhm1dv+tqYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3b6XUtN/vagTMQIXa9Jx45/kMpMB8GA1UdIwQY
MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt
ZDg1MWU0MGQ1N2JmLzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm
LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlZDjIx0
qtukcZoJrCO/hxLKUzjZXsKfKk8wHE9aBTlbBHdwS1GSQsDkL1bJO3qJGj1ESUHC
r4Gk/lwlJ3kUxbAEwlrFpWxLOjIN21CRrEdigBSnsEKRmPB5pnbX/WXDpDFU0SZo
bq+osp4IdTzKJxrP/LTIsGuHeCyab+wAPX7PRwOVMnBqSLQaRXdh+6ri11zP9q2Y
bbrAkVtU2JvjQicInFtFdvZZtxlq8JzpKtsFcmLt/pknNHpLeCTifTe2M+U/bIsq
7qNYwzGnQi0PNOOKcWwYn1/6EbP4/COBt6L4g11Uo1Pkf0Ls2PBlIDhZqbhitnNp
1+uq754ouCQfAg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 16:27:04 2026 by rpki-client