Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: yyloCWPj/WERjP1tDboBrYMHiCpbZVPZS85SVmqRB3c=
Subject key identifier: 4D:74:0E:3A:B2:36:62:BF:D3:66:21:38:D1:20:2B:49:87:BB:BC:AF
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 019E7DB169299BE593DA3BD11A05D7D9EBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 1937
Signing time: Sun 31 May 2026 11:00:39 +0000
Manifest this update: Sun 31 May 2026 11:00:39 +0000
Manifest next update: Mon 01 Jun 2026 11:00:39 +0000
Files and hashes: 1: vrzaOZyt0yuGmEkZWTfpBfvU0FM.roa (hash: wM8w9UXwnJwWC//EoV2cIpFlr+CCNnYEJvvmregOsvI=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: Q0ns5DQD2ab4+lqWFVvSZTDpXoHSqSz2HvFPlBCgofY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7d:b1:69:29:9b:e5:93:da:3b:d1:1a:05:d7:d9:eb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: May 31 11:00:39 2026 GMT
Not After : Jun 1 11:00:39 2026 GMT
Subject: CN=4d740e3ab23662bfd3662138d1202b4987bbbcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:87:a8:38:3a:05:b3:fb:5a:23:a8:d5:f4:
d4:7a:fa:a8:46:ab:7f:b3:bf:e1:0b:e9:1e:61:79:
8b:04:04:80:51:5e:ab:dc:05:5a:7e:02:e9:81:94:
e2:af:f2:55:23:e0:6f:80:10:13:ef:fa:b0:68:77:
80:6f:53:a7:be:2c:98:f5:5f:dd:32:b6:d6:5c:12:
4c:35:a7:b0:65:24:af:62:19:73:b9:1e:53:39:f6:
a4:27:1d:35:d7:aa:13:60:e0:3c:b5:17:0c:62:c9:
42:92:1c:2d:38:ed:57:d8:49:c0:4a:fd:22:1e:d4:
cf:db:19:ef:24:4b:c5:70:9f:ee:40:46:7c:11:8f:
0e:5a:10:12:5d:ee:36:8e:ba:b6:b2:c0:3d:ec:cd:
d9:c2:2c:ba:8f:53:50:ac:d3:c0:ad:96:6e:aa:79:
9f:81:21:ea:da:c7:9b:21:b2:c0:a3:5c:ff:5e:d5:
73:a7:d6:55:4e:d0:66:18:56:9f:03:39:b2:c9:ae:
98:27:0f:6c:92:2c:ea:70:a3:48:a8:ce:d1:33:03:
29:2e:e4:e0:78:01:45:9d:9b:36:08:28:a4:7f:a0:
75:bc:a6:5e:ad:a8:06:8b:bb:ff:7d:74:b8:3f:9f:
6c:26:34:50:64:05:15:0e:0b:4b:b0:de:69:df:fc:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:74:0E:3A:B2:36:62:BF:D3:66:21:38:D1:20:2B:49:87:BB:BC:AF
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1b:4d:74:0a:38:ca:f6:37:8d:3b:b5:bb:30:cb:eb:cc:fb:
d0:40:e8:0e:0e:cc:2e:f5:9e:96:d4:62:91:6e:65:2e:95:c5:
a3:14:f6:ea:c8:69:c8:e5:de:a4:57:1d:07:36:64:14:12:af:
3a:a5:dc:f6:d8:09:26:f6:1a:30:84:d7:09:60:47:86:89:5a:
8e:e6:67:6d:0a:ff:8a:8a:a3:b9:7b:e8:38:bc:c6:93:cf:c6:
dd:bf:2a:57:09:cc:b0:56:30:1c:e4:d3:59:ce:d6:88:8d:de:
35:45:db:f3:e5:8b:e0:c8:06:a5:ac:22:fc:ed:f0:89:4f:02:
f5:53:db:29:15:7f:cd:39:82:34:c2:e3:f4:cd:47:ce:75:91:
b2:b0:a1:51:06:20:9b:72:9f:68:31:db:c4:44:77:e6:d9:89:
88:60:4e:1c:1f:b5:91:99:25:c6:d3:48:c0:df:ef:3c:21:69:
3a:a3:7b:46:50:25:54:9d:cf:6f:a1:4f:01:0f:d4:f2:87:2d:
dc:af:0d:d3:ef:e4:d2:53:f5:04:7c:f0:11:08:4a:68:ea:83:
cd:e5:23:ea:f2:b3:33:cd:f0:b6:77:80:b5:ef:be:5d:fc:4d:
50:7a:19:5f:bd:29:42:96:34:59:2d:45:6d:00:39:da:3f:1b:
de:49:0e:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ59sWkpm+WT2jvRGgXX2ev9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMGMyZGFjYWZkZmE1Mzk5N2VkM2IwYTcwZGZiYzI3MGE5
MzNiZjQwHhcNMjYwNTMxMTEwMDM5WhcNMjYwNjAxMTEwMDM5WjAzMTEwLwYDVQQD
Eyg0ZDc0MGUzYWIyMzY2MmJmZDM2NjIxMzhkMTIwMmI0OTg3YmJiY2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FaHqDg6BbP7WiOo1fTUevqoRqt/
s7/hC+keYXmLBASAUV6r3AVafgLpgZTir/JVI+BvgBAT7/qwaHeAb1OnviyY9V/d
MrbWXBJMNaewZSSvYhlzuR5TOfakJx0116oTYOA8tRcMYslCkhwtOO1X2EnASv0i
HtTP2xnvJEvFcJ/uQEZ8EY8OWhASXe42jrq2ssA97M3Zwiy6j1NQrNPArZZuqnmf
gSHq2sebIbLAo1z/XtVzp9ZVTtBmGFafAzmyya6YJw9skizqcKNIqM7RMwMpLuTg
eAFFnZs2CCikf6B1vKZeragGi7v/fXS4P59sJjRQZAUVDgtLsN5p3/wSRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE10DjqyNmK/02YhONEgK0mHu7yvMB8GA1UdIwQY
MBaAFMoMLayv36U5l+07CnDfvCcKkzv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUt
OTllYzg4YzQ3NzYwLzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUtOTllYzg4YzQ3NzYw
LzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxtNdAo4
yvY3jTu1uzDL68z70EDoDg7MLvWeltRikW5lLpXFoxT26shpyOXepFcdBzZkFBKv
OqXc9tgJJvYaMITXCWBHholajuZnbQr/ioqjuXvoOLzGk8/G3b8qVwnMsFYwHOTT
Wc7WiI3eNUXb8+WL4MgGpawi/O3wiU8C9VPbKRV/zTmCNMLj9M1HznWRsrChUQYg
m3KfaDHbxER35tmJiGBOHB+1kZklxtNIwN/vPCFpOqN7RlAlVJ3Pb6FPAQ/U8oct
3K8N0+/k0lP1BHzwEQhKaOqDzeUj6vKzM83wtneAte++XfxNUHoZX70pQpY0WS1F
bQA52j8b3kkOHA==
-----END CERTIFICATE-----
Generated at Sun May 31 12:51:35 2026 by rpki-client