Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: QA1AyILCjk20k9axjCT4KtGlxMLtinLefpz/NdWaAQ0=
Subject key identifier: 8E:43:BD:B9:64:E1:F3:C2:8E:7C:E7:C8:B4:D4:79:A1:F0:90:57:A2
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 01A0E1E27F0685FF4A5243EFF8E68552BB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 08:01:52 +0000
Manifest this update: Sun 27 Sep 2026 08:01:52 +0000
Manifest next update: Mon 28 Sep 2026 08:01:52 +0000
Files and hashes: 1: vrzaOZyt0yuGmEkZWTfpBfvU0FM.roa (hash: wM8w9UXwnJwWC//EoV2cIpFlr+CCNnYEJvvmregOsvI=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: eSYu6VoYQnlE8D1EM5/2cNume8wkcgvB0/yj7k0MEhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:7f:06:85:ff:4a:52:43:ef:f8:e6:85:52:bb:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Sep 27 08:01:52 2026 GMT
Not After : Sep 28 08:01:52 2026 GMT
Subject: CN=8e43bdb964e1f3c28e7ce7c8b4d479a1f09057a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:62:d5:11:f2:37:2c:aa:32:b8:e1:f5:c0:
39:70:d5:63:2e:29:9a:f1:56:ef:51:cd:a6:ad:8d:
ea:b5:d4:d0:54:7f:96:f2:ec:c4:cd:3e:a2:f4:d9:
cb:96:3e:3c:06:57:b5:ca:21:a7:ca:e5:ad:d1:16:
5b:7b:fa:d4:af:c8:f7:0f:04:f3:29:a8:7f:41:5a:
31:9f:cb:21:1b:72:d7:fa:49:e6:ab:48:82:06:6e:
75:db:36:85:91:26:02:da:27:61:a6:2f:60:e7:66:
96:28:27:e0:91:43:52:bb:76:31:a2:ec:84:ab:25:
6d:b0:a0:b2:2c:b9:d1:5a:9d:02:e3:ca:10:1f:3a:
c8:7f:44:87:d9:fd:9c:28:ac:c0:a7:82:53:8c:a6:
b8:09:28:eb:04:6b:37:9c:b8:e3:03:9e:54:53:16:
c6:22:1a:b7:ce:62:5e:0e:2a:95:7e:b4:41:09:a7:
57:56:10:62:26:ec:c3:4a:db:8e:8e:0b:ae:3a:a1:
db:8b:ef:33:30:63:7f:03:c1:bb:27:01:77:e4:87:
fd:2d:cb:a8:99:4c:bf:09:24:bb:48:f3:7c:00:35:
f7:b6:7d:2f:99:a3:76:62:54:bb:66:83:99:e4:79:
db:c2:8e:c7:b1:cf:40:e3:57:47:a6:b9:bd:38:88:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:43:BD:B9:64:E1:F3:C2:8E:7C:E7:C8:B4:D4:79:A1:F0:90:57:A2
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:dc:ea:79:15:92:99:00:20:11:8b:ca:bb:01:a7:8c:1d:d2:
b4:61:42:c8:02:05:24:7d:71:85:67:78:65:ab:3d:33:c6:c6:
f4:11:e4:54:61:ff:5e:d8:2b:2d:5d:4a:e3:0c:84:d7:2a:99:
3d:bc:8b:4a:14:7b:8a:ca:d7:35:c8:fa:a7:40:bd:d0:e9:ca:
98:90:8d:1e:d7:80:f1:3e:1c:85:56:a1:28:bc:b3:b4:82:e3:
c9:da:43:b9:73:06:47:81:4e:01:72:91:06:eb:f0:b2:1f:88:
2a:bf:c9:19:d5:4a:b9:38:f4:43:d5:fd:5f:ba:58:9f:68:10:
45:92:2b:17:47:56:e6:4c:cc:42:f8:5d:6a:c8:3d:df:45:af:
6b:f2:6f:3a:bb:98:97:69:af:5c:2f:77:bb:35:f1:66:ad:e0:
3a:95:48:9c:b0:a0:0e:63:f8:89:70:00:ab:e7:e9:68:ce:6e:
15:ec:ab:a4:42:92:7b:7b:f0:e7:37:a1:e6:c6:d1:88:28:d0:
22:48:51:d0:83:8b:54:d4:b6:1e:8f:95:c3:8b:ea:8f:8f:65:
bf:93:5a:64:6e:98:e4:f4:59:6f:6d:ff:9a:ad:6a:1b:9e:7b:
01:65:c0:21:a5:35:8c:e1:52:35:9f:a8:bf:24:a8:27:e7:9b:
aa:63:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:02:55 2026 by rpki-client