
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier: MMrKHI5Wvbv3As1wnubr90gw7eL5mwNge8MSCRDjSTs=
Subject key identifier: 07:2E:04:24:C0:97:83:13:20:B6:38:1E:35:96:3D:8C:34:9F:66:4C
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 019D9850047971E0DDDB149451995FE0BD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number: 18CD
Signing time: Thu 16 Apr 2026 22:01:13 +0000
Manifest this update: Thu 16 Apr 2026 22:01:13 +0000
Manifest next update: Fri 17 Apr 2026 22:01:13 +0000
Files and hashes: 1: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (hash: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM=)
2: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (hash: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g=)
3: U-ONT3QFPmL6bgDFPQrkc4UkItw.roa (hash: jHrm5ubltObAwz/kEr5+twdpGR7UoJHw+XLZONVGw4I=)
4: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (hash: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64=)
5: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (hash: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI=)
6: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (hash: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys=)
7: rZHZ_k5hgir55AATjETSpEWsH80.roa (hash: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE=)
8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: lb1Qw+AcHbjiMWjiSC2Q8VnQtaIX/c0WqER2qS1yBsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:04:79:71:e0:dd:db:14:94:51:99:5f:e0:bd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Apr 16 22:01:13 2026 GMT
Not After : Apr 17 22:01:13 2026 GMT
Subject: CN=072e0424c097831320b6381e35963d8c349f664c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:54:7a:50:19:97:3b:b5:99:83:0f:cd:80:
c7:fd:8a:60:00:23:51:d8:43:d8:60:21:01:a5:33:
5c:11:bb:34:3a:e6:9a:66:f4:10:ea:59:a0:e3:91:
d1:ed:50:3f:1d:23:14:e9:c4:ef:c5:75:dd:06:eb:
83:88:c8:a6:70:35:3d:89:e6:d6:8b:77:93:17:c8:
80:ff:80:81:c9:c2:e0:e4:90:e5:d7:1e:3d:cb:06:
3e:13:9e:39:9f:14:d7:a4:5d:bd:f6:01:74:6d:68:
17:64:ad:9d:79:97:48:ff:88:52:09:bd:d4:59:f0:
6d:70:0f:cc:1d:01:ab:f2:a3:8d:4d:d2:d5:87:87:
1e:05:9c:b7:a5:ee:02:92:b8:ef:0b:e3:f1:d4:bd:
27:cd:82:e9:2a:d4:12:d4:6e:a2:8f:09:07:b1:6a:
b7:40:ba:31:b5:4c:d6:4f:48:b0:63:a7:80:e5:48:
c2:25:7d:fa:88:08:68:9a:4f:86:f7:dc:c1:a8:2b:
1e:11:89:88:87:c4:fc:e6:34:48:b3:ab:3b:11:79:
ed:fe:7f:46:c1:f6:ba:4a:df:95:ab:a4:5e:ef:1c:
5e:55:8f:ab:30:90:55:16:56:de:7d:31:15:b3:f2:
0f:49:f2:1f:8e:86:49:c7:39:6c:44:e3:03:6d:ee:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2E:04:24:C0:97:83:13:20:B6:38:1E:35:96:3D:8C:34:9F:66:4C
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:14:90:b7:54:30:e0:2c:0c:76:d3:df:a2:50:97:0f:b4:45:
b6:db:a6:57:b0:04:cf:a0:c2:4f:1a:86:8c:7d:93:44:76:ee:
f5:f5:b3:eb:45:57:e2:eb:8c:27:f5:6d:89:ec:bf:60:a5:37:
cd:cf:87:32:eb:a9:cd:fb:b4:50:50:66:86:9a:8b:90:73:e0:
9f:89:18:4c:99:d2:32:98:89:5c:39:7a:e0:d4:b2:08:31:25:
45:cd:7f:5d:6e:42:27:17:0a:fd:8f:9b:35:f9:98:f8:79:26:
ea:27:46:05:fe:ac:4c:5f:e5:48:12:ec:27:e6:a9:40:95:20:
b0:4c:dc:d3:78:e7:08:bd:8c:d8:57:df:36:b7:21:01:7b:99:
6f:18:0d:00:f5:d4:e7:a5:86:58:07:33:61:04:3d:d7:a4:c1:
0c:ed:5f:ac:8f:c2:29:df:e6:5b:4f:7f:3d:7f:21:d9:1a:e6:
dc:18:44:26:94:59:ba:0b:ca:69:14:73:37:a2:63:be:67:79:
4a:bf:91:44:02:16:98:23:be:3a:bc:9b:e6:f4:b8:c8:d6:1c:
6f:37:1e:7b:37:3c:d0:4c:33:9c:8f:00:81:e1:b8:d4:c4:1c:
87:6a:18:d0:bb:8f:2d:1a:0c:47:87:85:a1:1d:31:9f:60:5e:
45:4d:fb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:29:41 2026 by rpki-client