Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: tUMhG31dGGSChBffRJVTc2nY0XqT4/AUTqF4iXXNcEQ=
Subject key identifier: C5:0B:FE:ED:76:A8:58:CB:B0:30:9D:70:D0:49:FF:40:72:F2:10:F9
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 019D27E07DA49877120A1CD410BCC6B227B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:01:56 +0000
Manifest this update: Thu 26 Mar 2026 02:01:56 +0000
Manifest next update: Fri 27 Mar 2026 02:01:56 +0000
Files and hashes: 1: vrzaOZyt0yuGmEkZWTfpBfvU0FM.roa (hash: wM8w9UXwnJwWC//EoV2cIpFlr+CCNnYEJvvmregOsvI=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: IxGSECMVnMJNaW7RUjvDcF0xMQ+YkS8zfzXiPUPoGlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:7d:a4:98:77:12:0a:1c:d4:10:bc:c6:b2:27:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Mar 26 02:01:56 2026 GMT
Not After : Mar 27 02:01:56 2026 GMT
Subject: CN=c50bfeed76a858cbb0309d70d049ff4072f210f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:f2:0d:89:c5:44:aa:01:33:c7:54:14:76:
6c:de:bc:d8:09:83:cf:d1:64:e2:7a:59:38:cc:0c:
5b:e4:b0:80:71:65:8d:3e:1c:95:88:8e:6f:fb:9f:
61:86:73:3e:7d:4d:39:59:e3:3b:22:5d:8f:35:47:
77:cd:26:44:a4:4e:c8:7c:4e:3f:2b:35:f1:5b:04:
ad:c2:13:4c:54:a6:f5:9b:3c:2a:56:3c:34:d1:22:
10:fe:af:ed:b3:43:06:90:2a:da:e3:29:d1:43:1c:
c7:36:0c:ed:e5:95:5f:b4:16:6b:45:ba:dc:25:89:
9c:e5:6b:74:0d:9b:86:fe:73:cd:00:39:09:c0:95:
5c:4b:0e:b0:76:22:33:76:93:51:a0:ae:66:a8:44:
29:17:ba:10:eb:b6:08:56:91:fb:b2:dd:ab:6c:6c:
51:06:f5:23:1e:1d:91:98:4d:8f:23:c5:08:44:88:
bd:36:f0:b1:fa:3b:3e:2f:45:b8:7d:cd:60:6f:6a:
fd:f1:d5:52:cc:4e:ff:a7:91:b5:b0:69:7e:93:be:
c0:73:62:a7:17:84:75:0e:94:b4:9f:6f:dd:5f:5b:
41:12:a8:3f:80:53:88:41:60:aa:6f:d9:b2:ce:53:
d2:5b:d2:86:c1:ab:da:3d:19:ac:53:d5:0f:ed:92:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:FE:ED:76:A8:58:CB:B0:30:9D:70:D0:49:FF:40:72:F2:10:F9
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4f:7a:bb:e0:64:47:05:70:92:4e:7f:a3:e0:22:43:08:c7:
7d:f4:18:9b:c9:08:57:91:a3:a9:b1:72:56:9d:26:d3:74:a8:
11:a1:96:90:c5:91:46:0f:1d:34:3c:c0:6e:52:cb:13:e3:74:
3b:60:f2:07:2f:04:b2:18:ab:0c:a8:51:b4:e4:c5:c3:39:aa:
31:f8:b9:e2:34:f8:56:e7:a9:0d:5b:e8:08:b4:34:1f:19:25:
88:3b:42:2f:18:cd:3d:06:6b:84:2d:27:51:e2:ed:df:a6:71:
d5:70:1b:90:57:4d:b9:be:ef:32:b3:48:7a:a9:f6:aa:68:aa:
11:55:f5:33:05:d4:dc:ce:26:ce:b5:1f:07:34:98:24:cc:d5:
f8:c0:53:14:44:6f:97:d7:17:fb:f3:8d:22:11:c7:36:52:8d:
67:9d:b6:1a:c3:72:c0:a9:29:92:97:1f:42:00:ba:8c:d2:c9:
61:60:09:6c:0f:36:79:f9:e5:be:b5:06:ed:f0:74:d3:52:92:
e2:55:f0:98:c4:27:86:64:7b:ed:7f:39:99:9e:e8:f0:5c:0b:
10:d8:8b:ba:6c:bd:00:96:44:55:5b:6e:d2:35:c2:fc:2f:35:
a5:10:7b:e7:f8:49:0b:49:0f:ea:b6:1b:07:f2:71:93:0b:1f:
e7:01:24:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4H2kmHcSChzUELzGsie0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMGMyZGFjYWZkZmE1Mzk5N2VkM2IwYTcwZGZiYzI3MGE5
MzNiZjQwHhcNMjYwMzI2MDIwMTU2WhcNMjYwMzI3MDIwMTU2WjAzMTEwLwYDVQQD
EyhjNTBiZmVlZDc2YTg1OGNiYjAzMDlkNzBkMDQ5ZmY0MDcyZjIxMGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuTyDYnFRKoBM8dUFHZs3rzYCYPP
0WTielk4zAxb5LCAcWWNPhyViI5v+59hhnM+fU05WeM7Il2PNUd3zSZEpE7IfE4/
KzXxWwStwhNMVKb1mzwqVjw00SIQ/q/ts0MGkCra4ynRQxzHNgzt5ZVftBZrRbrc
JYmc5Wt0DZuG/nPNADkJwJVcSw6wdiIzdpNRoK5mqEQpF7oQ67YIVpH7st2rbGxR
BvUjHh2RmE2PI8UIRIi9NvCx+js+L0W4fc1gb2r98dVSzE7/p5G1sGl+k77Ac2Kn
F4R1DpS0n2/dX1tBEqg/gFOIQWCqb9myzlPSW9KGwavaPRmsU9UP7ZL+EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUL/u12qFjLsDCdcNBJ/0By8hD5MB8GA1UdIwQY
MBaAFMoMLayv36U5l+07CnDfvCcKkzv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUt
OTllYzg4YzQ3NzYwLzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUtOTllYzg4YzQ3NzYw
LzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW096u+Bk
RwVwkk5/o+AiQwjHffQYm8kIV5GjqbFyVp0m03SoEaGWkMWRRg8dNDzAblLLE+N0
O2DyBy8EshirDKhRtOTFwzmqMfi54jT4VuepDVvoCLQ0HxkliDtCLxjNPQZrhC0n
UeLt36Zx1XAbkFdNub7vMrNIeqn2qmiqEVX1MwXU3M4mzrUfBzSYJMzV+MBTFERv
l9cX+/ONIhHHNlKNZ522GsNywKkpkpcfQgC6jNLJYWAJbA82efnlvrUG7fB001KS
4lXwmMQnhmR77X85mZ7o8FwLENiLumy9AJZEVVtu0jXC/C81pRB75/hJC0kP6rYb
B/Jxkwsf5wEkWw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:19 2026 by rpki-client