Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier: nQaFTLaymksYcHDi6v4GF6P1mb04MX0KE1Uqtw1QlJU=
Subject key identifier: DB:20:D3:AD:AF:5C:8C:5E:0C:D1:6D:C1:E7:A2:A3:8C:3A:A6:B1:D7
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 019CAAC6206333BDE2666FD697ADC910265B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number: 1852
Signing time: Sun 01 Mar 2026 19:00:36 +0000
Manifest this update: Sun 01 Mar 2026 19:00:36 +0000
Manifest next update: Mon 02 Mar 2026 19:00:36 +0000
Files and hashes: 1: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (hash: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM=)
2: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (hash: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g=)
3: U-ONT3QFPmL6bgDFPQrkc4UkItw.roa (hash: jHrm5ubltObAwz/kEr5+twdpGR7UoJHw+XLZONVGw4I=)
4: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (hash: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64=)
5: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (hash: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI=)
6: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (hash: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys=)
7: rZHZ_k5hgir55AATjETSpEWsH80.roa (hash: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE=)
8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: BO9w0rprx3CyBQezdUmioU81zyBu9zA7/TJ9K9MTHJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:20:63:33:bd:e2:66:6f:d6:97:ad:c9:10:26:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Mar 1 19:00:36 2026 GMT
Not After : Mar 2 19:00:36 2026 GMT
Subject: CN=db20d3adaf5c8c5e0cd16dc1e7a2a38c3aa6b1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:89:2d:d1:9d:cf:3b:e2:5b:03:b3:af:41:
5e:df:fd:b5:2b:83:dc:bc:e6:fc:d2:ef:fa:41:54:
40:ad:14:d2:1c:be:0e:f9:45:de:fd:fa:2c:67:a7:
1f:7c:da:9d:45:63:b1:e1:ed:c8:66:a3:e4:87:ab:
c5:81:23:a2:bd:23:de:99:a5:b8:21:73:c0:51:97:
27:bc:73:ee:86:54:0d:2a:5f:5b:81:e2:db:3f:67:
40:9f:51:af:52:19:6f:c0:bf:b4:be:95:1b:4e:e0:
64:b7:47:05:79:d1:61:4b:01:20:f3:5c:35:72:55:
0a:9e:73:d2:f2:ba:1f:59:15:29:0a:ad:8b:8d:f1:
87:6b:c4:4a:b7:4e:2f:ae:88:0d:1e:e0:8f:fd:e7:
a9:21:4e:4b:70:c6:84:81:c8:01:05:ba:6d:98:2f:
67:7c:bf:a4:29:e0:3b:a4:20:cf:3f:a1:97:ed:e4:
19:56:4b:f0:ed:0f:c3:1c:bd:d8:30:93:17:47:7b:
1a:a8:22:db:2e:78:ed:54:f7:63:69:57:68:22:f1:
9d:d2:28:5c:c8:3b:a1:f1:9b:39:17:54:9f:b0:1b:
42:7f:16:8b:34:b8:6e:1f:50:c7:3a:4d:24:8a:ae:
80:ce:8d:b2:cc:f1:e6:b2:7c:0f:0e:ff:0f:f8:44:
ac:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:20:D3:AD:AF:5C:8C:5E:0C:D1:6D:C1:E7:A2:A3:8C:3A:A6:B1:D7
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9a:ec:3a:5c:47:58:6a:b5:0d:4b:36:35:24:83:c6:62:b0:
56:5a:9a:8c:e0:df:04:ad:7a:d0:04:b3:11:26:ac:6c:2b:d0:
8a:2f:9a:74:1d:65:01:25:08:6b:fa:18:99:b5:7d:23:3c:f9:
ea:ac:58:37:be:43:25:e8:a0:dc:41:76:bb:f4:ec:aa:fc:bf:
d7:bc:2a:28:e1:5e:73:0b:5b:3e:bd:d9:86:b7:f9:16:36:a3:
3b:ec:52:b8:2d:04:02:eb:00:ca:84:b3:d4:6c:a4:67:2a:95:
7b:ce:b5:5c:2c:85:35:b7:48:3f:50:af:d3:3a:cf:61:c9:9c:
3f:d4:46:1e:d2:ec:f2:b2:95:14:58:97:ec:05:d3:ec:22:3e:
8f:a3:5d:df:3e:0b:d1:70:84:a0:2d:93:23:1a:28:9e:48:01:
f4:82:a6:04:c8:07:0e:13:1c:a5:6e:02:dc:c1:8b:d5:84:9f:
cf:a9:02:22:e0:b5:da:a6:5c:40:ec:14:25:9e:a8:37:a6:54:
40:93:fb:2e:a7:f0:f9:58:32:4b:c0:7f:aa:7e:2d:90:da:01:
51:ee:e3:87:af:33:7a:58:50:58:82:f1:1b:9b:be:0b:1b:67:
f3:2f:52:c8:c5:a0:9d:cc:a6:6b:61:98:7e:3d:a2:9b:0f:33:
63:da:73:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:11 2026 by rpki-client