Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier: sXnhTdN8o0bXmNzxYUbDoK4CXS3UJBuKCgAieyAsaUw=
Subject key identifier: 61:F8:47:B1:C7:38:05:F9:B9:A6:95:4B:04:D4:1B:3D:E2:21:DB:AB
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 01A1770304A35C532E517BAC6E80794DC0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number: 1ACE
Signing time: Mon 26 Oct 2026 07:00:48 +0000
Manifest this update: Mon 26 Oct 2026 07:00:48 +0000
Manifest next update: Tue 27 Oct 2026 07:00:48 +0000
Files and hashes: 1: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (hash: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM=)
2: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (hash: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g=)
3: U-ONT3QFPmL6bgDFPQrkc4UkItw.roa (hash: jHrm5ubltObAwz/kEr5+twdpGR7UoJHw+XLZONVGw4I=)
4: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (hash: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64=)
5: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (hash: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI=)
6: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (hash: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys=)
7: rZHZ_k5hgir55AATjETSpEWsH80.roa (hash: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE=)
8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: RzlJ0gX3Vq7jbEABFF1RNnJOwa8eNAqi1KT+HzuFF+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:03:04:a3:5c:53:2e:51:7b:ac:6e:80:79:4d:c0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Oct 26 07:00:48 2026 GMT
Not After : Oct 27 07:00:48 2026 GMT
Subject: CN=61f847b1c73805f9b9a6954b04d41b3de221dbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:61:7b:a3:97:7c:f7:24:c6:fa:3e:69:75:03:
fd:ce:56:fb:84:85:5c:3a:1a:dc:75:8b:83:39:b4:
bf:6b:b4:4c:19:84:75:e6:bd:9c:aa:ec:77:1d:53:
12:06:5b:5a:11:f9:64:87:16:5e:37:a4:c2:93:a3:
ab:f7:e6:a0:03:3f:17:23:79:7b:45:f7:b9:7d:d5:
52:85:9c:5a:e9:a0:60:a3:ba:90:2b:bf:60:25:05:
4e:85:0a:41:35:8d:a8:ff:46:9c:4b:72:e0:3f:29:
99:b2:b1:05:24:98:eb:41:f6:49:c6:25:ae:26:ed:
ed:7b:a7:3a:a1:19:92:c0:0f:5d:7b:dc:6a:8e:1a:
53:49:4f:d8:d7:2c:cd:1a:4e:12:14:02:cc:24:ed:
54:0c:5c:6c:d1:5e:a9:15:8a:d0:ee:c2:4c:21:08:
88:a9:ae:bf:4b:df:98:04:06:36:ab:2e:80:ed:0e:
0c:4e:96:c7:a7:13:e7:ad:3a:a4:b7:78:7a:61:28:
d1:48:c9:f5:9d:bc:03:13:2f:72:ba:e7:42:0f:95:
1e:71:02:cb:94:de:20:95:45:5b:13:ee:9c:39:d1:
4f:25:71:4c:2b:4f:82:bc:7f:84:18:8a:55:0d:90:
76:a7:cb:d3:d2:76:3d:81:62:77:47:ed:3f:91:3d:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F8:47:B1:C7:38:05:F9:B9:A6:95:4B:04:D4:1B:3D:E2:21:DB:AB
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:db:18:85:0d:dd:31:02:d2:76:af:98:89:cc:a0:1e:f1:85:
86:fd:5e:8d:d8:5d:94:13:4c:24:59:8e:06:ab:bb:22:c6:a5:
60:a3:f0:e6:5b:88:7d:54:2d:87:51:3d:25:d5:63:24:97:38:
3a:59:1b:a5:8f:32:da:52:d2:d5:71:39:4f:af:80:75:c2:42:
27:8d:f6:d2:0d:57:d4:c8:38:f0:7b:af:43:64:9f:01:da:23:
36:a2:e2:b6:00:b6:5a:5c:ad:ef:75:a9:a8:18:23:4e:ec:16:
41:5f:54:8c:13:ec:b0:0c:d2:09:3c:ed:94:99:09:ad:28:3d:
47:a9:11:4a:c2:09:47:22:e9:a9:f4:59:dc:c0:d0:bf:57:5e:
ef:b1:49:3a:7a:17:f8:d2:ad:ca:e9:09:38:9e:40:cd:12:0d:
af:f8:e4:85:1e:b1:9e:c6:51:ba:a0:c7:a7:5b:c1:8b:90:67:
cc:95:a2:c5:12:68:bc:be:9a:b7:a5:c9:3b:cb:cb:31:a3:d1:
5a:21:82:c4:be:b9:f2:54:ce:13:0b:f9:11:10:f7:eb:55:e5:
dc:78:6b:50:6a:9c:12:3f:97:88:5c:c6:1b:40:d7:40:d6:73:
b0:e6:a6:2b:98:63:f3:ef:e4:89:5c:07:86:23:be:80:f0:79:
83:98:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:23:37 2026 by rpki-client