Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier: zEUQB55tJ60DZ6NglMsxvmiGNB58aNW+WBNX6JmYAIA=
Subject key identifier: AC:31:A1:D5:27:90:5B:63:E3:04:AE:4F:E7:8A:5B:9F:E8:03:CE:94
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 019EB80E69F4D6580131D9C4FC06583B76D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number: 1962
Signing time: Thu 11 Jun 2026 19:00:12 +0000
Manifest this update: Thu 11 Jun 2026 19:00:12 +0000
Manifest next update: Fri 12 Jun 2026 19:00:12 +0000
Files and hashes: 1: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (hash: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM=)
2: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (hash: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g=)
3: U-ONT3QFPmL6bgDFPQrkc4UkItw.roa (hash: jHrm5ubltObAwz/kEr5+twdpGR7UoJHw+XLZONVGw4I=)
4: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (hash: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64=)
5: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (hash: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI=)
6: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (hash: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys=)
7: rZHZ_k5hgir55AATjETSpEWsH80.roa (hash: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE=)
8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: 4aF1IU5FIzCvw3aC8eNn67pFT3WZv4PAfCHqINpglBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:69:f4:d6:58:01:31:d9:c4:fc:06:58:3b:76:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Jun 11 19:00:12 2026 GMT
Not After : Jun 12 19:00:12 2026 GMT
Subject: CN=ac31a1d527905b63e304ae4fe78a5b9fe803ce94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:c0:d6:f5:9d:44:b2:9b:29:fb:b4:57:6d:
21:51:64:ab:a1:93:92:67:12:9e:22:1d:3e:b6:d0:
b4:29:46:09:5b:c1:d6:45:cb:98:72:01:69:ab:b7:
9a:fc:f9:ec:7b:b5:1e:fd:8b:4e:81:6c:22:a0:09:
e2:62:89:19:be:d4:71:29:d6:55:ff:f6:27:b2:7f:
45:99:9a:85:2e:50:9d:1a:35:ac:cf:b6:82:82:fe:
61:c2:98:e6:21:20:c0:27:70:e7:ce:2f:05:42:c5:
05:16:27:df:d9:96:c6:e2:be:ca:29:68:56:71:92:
00:79:cc:73:77:08:10:6c:60:ec:7a:37:b6:36:4e:
e4:6a:70:cc:ff:12:a7:6d:b6:7a:61:42:51:39:06:
da:cf:34:30:73:d2:74:4c:72:14:dc:4c:f2:ef:fa:
1d:fc:ad:ff:f1:1b:16:51:3a:ff:5e:3e:0c:2f:b4:
6f:47:ba:67:c1:ea:ef:2a:e5:5a:ac:f1:a6:b2:de:
81:57:9e:73:31:b2:a7:a7:7b:ed:6a:f5:e8:5a:a8:
e9:5d:fd:6d:6b:a0:b4:34:1d:98:13:a0:01:ad:74:
3d:0f:f3:0f:30:29:7b:dc:39:d3:2c:1a:87:f8:73:
94:3d:71:cd:aa:dd:7d:1a:ae:4d:73:20:f9:b8:4d:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:31:A1:D5:27:90:5B:63:E3:04:AE:4F:E7:8A:5B:9F:E8:03:CE:94
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d2:4e:87:4f:d3:e8:cc:e5:71:a7:d1:f3:6c:3d:a3:9e:91:
ed:13:0f:15:20:86:26:a0:a2:0d:78:59:f6:b7:6c:10:86:d3:
fd:4f:c9:df:63:31:32:e4:2f:11:2e:7f:6f:17:7f:e0:de:5c:
c1:26:70:77:c5:0b:5d:be:9a:8f:42:8c:07:69:6d:f0:20:27:
dc:1a:0d:ca:29:45:68:ba:c1:65:ce:c4:28:86:d5:01:3c:c6:
92:b3:6b:ce:f0:cc:0b:bc:e7:18:6e:24:79:85:33:32:ea:73:
0a:dd:f6:27:e7:1e:d5:aa:8d:88:40:e6:1c:24:d7:75:78:94:
22:ea:c4:bd:8b:47:99:99:8d:6f:c2:51:00:83:89:73:41:ea:
c4:11:74:77:82:2b:86:0c:9a:c0:4a:d2:f2:e0:39:02:07:f8:
42:5d:a4:3b:e2:5c:6e:f5:f3:ff:57:b9:b6:7a:8b:14:40:58:
41:20:f4:33:6e:27:82:76:b3:50:84:c1:d9:27:b6:b9:db:ac:
b1:71:19:73:be:d8:d6:0a:e1:56:5d:37:68:06:87:ef:81:22:
c1:da:75:86:da:ae:1f:76:1c:bb:6b:d1:d3:e8:fe:74:a9:c7:
8b:a2:59:52:66:d5:e5:77:01:92:aa:61:d9:d7:f7:fb:44:73:
6a:c7:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:38:37 2026 by rpki-client