Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier: s52FHzntpuhIzltIcyncy7YXlYkx/3ttAs7ny/CtQYM=
Subject key identifier: 23:FE:DA:51:60:CF:E1:9A:23:75:16:81:64:8C:58:5C:D1:A9:62:04
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 01A0BD9D8760A40F61ADDAFEBA8B2A89E340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number: 1A6E
Signing time: Sun 20 Sep 2026 07:00:12 +0000
Manifest this update: Sun 20 Sep 2026 07:00:12 +0000
Manifest next update: Mon 21 Sep 2026 07:00:12 +0000
Files and hashes: 1: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (hash: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM=)
2: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (hash: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g=)
3: U-ONT3QFPmL6bgDFPQrkc4UkItw.roa (hash: jHrm5ubltObAwz/kEr5+twdpGR7UoJHw+XLZONVGw4I=)
4: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (hash: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64=)
5: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (hash: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI=)
6: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (hash: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys=)
7: rZHZ_k5hgir55AATjETSpEWsH80.roa (hash: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE=)
8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: K3ClsEgIXzNTa6SfFX6H0a4ctrRallOcCzpEyNRYxr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9d:87:60:a4:0f:61:ad:da:fe:ba:8b:2a:89:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Sep 20 07:00:12 2026 GMT
Not After : Sep 21 07:00:12 2026 GMT
Subject: CN=23feda5160cfe19a23751681648c585cd1a96204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:f7:70:90:21:a0:db:c8:7c:40:24:b6:93:
f1:a2:75:de:82:90:c7:cf:e2:0c:de:27:6f:5f:be:
eb:b5:34:9b:0a:21:7b:ab:64:c9:eb:6f:49:35:f8:
c0:a3:3b:c1:86:14:34:1e:56:5a:d2:9a:d5:0c:31:
fa:a9:58:fe:da:1f:bc:95:df:d6:fa:5d:69:3f:fe:
3c:ae:92:33:dd:3e:54:0d:f9:f7:6b:af:ad:57:0e:
f7:57:0d:6b:0d:9a:50:8d:22:a3:ae:99:11:50:b3:
c5:e5:94:a1:14:3c:ab:c4:ca:fa:7d:da:46:8a:30:
ca:12:7d:58:5e:67:c4:f5:95:76:9e:9e:69:b1:5f:
1a:cf:e5:87:0d:32:ff:58:4e:16:fa:d7:b9:1a:83:
1d:61:5f:38:cf:46:91:b4:5f:68:d9:6e:88:cd:66:
b8:a1:4f:10:c8:d2:31:33:a1:4e:a8:65:3c:16:6f:
9b:ff:46:8b:9c:57:a1:00:ea:2a:37:a2:2e:98:c1:
bd:10:52:52:fd:b3:24:a8:41:b9:2f:78:75:a7:2a:
64:40:ab:ed:9b:9d:28:f9:a5:6f:d1:b5:00:91:db:
ba:7f:01:96:38:43:f6:8e:a4:7e:c4:b0:b5:c9:4f:
ea:ef:e2:ba:ad:0a:91:46:3d:85:59:b5:af:55:f8:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FE:DA:51:60:CF:E1:9A:23:75:16:81:64:8C:58:5C:D1:A9:62:04
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c8:0c:14:21:0c:d2:5c:bc:ff:07:db:87:02:77:2e:55:c4:
28:e7:6d:d7:21:90:85:a2:77:1c:97:3a:da:ec:4f:c2:0c:31:
51:2e:4e:6b:16:bc:86:38:e4:2e:55:9a:a1:6d:b6:5e:dd:bf:
5a:76:b9:51:bf:30:c5:85:a2:eb:64:76:62:ef:8e:e5:06:68:
67:aa:67:7d:0e:6b:88:89:47:09:e3:f2:06:1d:0c:5e:3b:a3:
92:33:bc:8e:40:a1:51:d8:e5:26:98:c4:6d:8d:96:85:e6:f7:
7c:66:b1:71:5d:6b:5e:cc:89:ba:58:69:9a:c9:05:0f:b5:7a:
da:aa:89:3a:bc:03:0f:ec:2c:cd:0a:e2:d8:08:b9:0c:08:b4:
60:27:94:e1:16:14:d4:c7:21:ac:1a:2a:de:7d:1b:71:2b:ee:
a8:39:d2:98:33:c6:dd:09:7c:50:84:78:d4:43:79:22:8d:f1:
a1:21:fb:15:92:ae:5a:5b:fc:4a:7d:5c:e4:b5:16:7e:87:19:
df:87:c6:ee:b1:2b:3c:cd:8c:4e:80:4f:1b:c4:02:30:7f:f4:
db:f3:2a:e3:f1:7e:a9:f5:23:14:ce:be:b1:35:22:9a:ce:e4:
57:5a:45:5f:74:71:7a:f4:6b:0b:c5:a6:67:b2:16:29:7e:1c:
a5:47:9d:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC9nYdgpA9hrdr+uosqieNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3
NTdmM2YwHhcNMjYwOTIwMDcwMDEyWhcNMjYwOTIxMDcwMDEyWjAzMTEwLwYDVQQD
EygyM2ZlZGE1MTYwY2ZlMTlhMjM3NTE2ODE2NDhjNTg1Y2QxYTk2MjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjP3cJAhoNvIfEAktpPxonXegpDH
z+IM3idvX77rtTSbCiF7q2TJ629JNfjAozvBhhQ0HlZa0prVDDH6qVj+2h+8ld/W
+l1pP/48rpIz3T5UDfn3a6+tVw73Vw1rDZpQjSKjrpkRULPF5ZShFDyrxMr6fdpG
ijDKEn1YXmfE9ZV2np5psV8az+WHDTL/WE4W+te5GoMdYV84z0aRtF9o2W6IzWa4
oU8QyNIxM6FOqGU8Fm+b/0aLnFehAOoqN6IumMG9EFJS/bMkqEG5L3h1pypkQKvt
m50o+aVv0bUAkdu6fwGWOEP2jqR+xLC1yU/q7+K6rQqRRj2FWbWvVfjwnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCP+2lFgz+GaI3UWgWSMWFzRqWIEMB8GA1UdIwQY
MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt
ZDg1MWU0MGQ1N2JmLzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm
LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsgMFCEM
0ly8/wfbhwJ3LlXEKOdt1yGQhaJ3HJc62uxPwgwxUS5Oaxa8hjjkLlWaoW22Xt2/
Wna5Ub8wxYWi62R2Yu+O5QZoZ6pnfQ5riIlHCePyBh0MXjujkjO8jkChUdjlJpjE
bY2Wheb3fGaxcV1rXsyJulhpmskFD7V62qqJOrwDD+wszQri2Ai5DAi0YCeU4RYU
1MchrBoq3n0bcSvuqDnSmDPG3Ql8UIR41EN5Io3xoSH7FZKuWlv8Sn1c5LUWfocZ
34fG7rErPM2MToBPG8QCMH/02/Mq4/F+qfUjFM6+sTUims7kV1pFX3RxevRrC8Wm
Z7IWKX4cpUednQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:04:22 2026 by rpki-client