Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: XXC1lgaECPwQINMaLElVV/4Eo/RkxTfR/DtEhWqIRNI=
Subject key identifier: D3:57:60:3A:6B:C2:92:61:39:E3:04:ED:B6:D0:93:A2:8B:32:30:4F
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 019F9F5FA78448B11852B28F686892257404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 19CD
Signing time: Sun 26 Jul 2026 17:01:13 +0000
Manifest this update: Sun 26 Jul 2026 17:01:13 +0000
Manifest next update: Mon 27 Jul 2026 17:01:13 +0000
Files and hashes: 1: vrzaOZyt0yuGmEkZWTfpBfvU0FM.roa (hash: wM8w9UXwnJwWC//EoV2cIpFlr+CCNnYEJvvmregOsvI=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: tfPb4dWXbH8Vz0gIa3tSm8wYkpzMMC89mavNEG3dKqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:a7:84:48:b1:18:52:b2:8f:68:68:92:25:74:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Jul 26 17:01:13 2026 GMT
Not After : Jul 27 17:01:13 2026 GMT
Subject: CN=d357603a6bc2926139e304edb6d093a28b32304f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:14:2e:74:b0:22:fb:5b:30:f5:b1:e8:af:
f2:63:08:20:4f:c9:3d:39:73:be:5f:60:49:85:8c:
2e:a0:9b:d7:56:7f:12:b9:09:76:76:7e:d3:a2:b4:
60:1f:da:bb:5c:0c:37:e3:a4:47:19:88:18:dd:ae:
b0:af:aa:b6:a5:a3:6d:04:c8:8b:ed:01:d8:d7:6b:
1b:50:98:69:6b:fc:ec:ce:6c:16:ea:f4:64:2b:ec:
11:a5:a4:67:db:3f:02:5f:c8:77:20:fb:a1:56:76:
a0:03:05:11:54:d2:fa:5f:86:3b:c7:d7:c9:62:71:
0e:b6:52:24:54:b3:5c:c8:55:33:f0:ec:ed:38:75:
bc:71:d2:e1:bf:76:4d:cb:7e:e3:19:84:ce:c4:af:
13:51:94:45:1c:6e:7e:60:3e:18:96:3f:5d:ef:f3:
85:9e:0c:c2:24:0f:8f:7f:60:1a:1d:85:33:5d:4b:
99:8f:da:97:21:54:cc:3d:b3:f4:9f:2d:a8:7e:07:
fd:36:f3:00:50:33:6f:35:0f:fc:3a:ee:14:0e:ec:
5d:5b:b8:3f:cd:9f:df:3d:83:72:2b:d6:51:80:8e:
21:ac:be:a5:19:44:2e:54:d2:98:1c:b9:dc:b9:13:
71:09:9e:31:94:11:59:d2:ca:3f:1d:a7:02:b5:e3:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:57:60:3A:6B:C2:92:61:39:E3:04:ED:B6:D0:93:A2:8B:32:30:4F
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:35:92:20:bb:58:7d:11:1f:c6:06:80:c6:4a:a4:80:13:37:
a2:62:d6:cf:ab:86:6f:8f:db:02:fb:78:7e:2a:4d:f1:93:b0:
ca:74:72:6d:e9:ef:f1:2b:a1:c1:de:64:5f:10:a2:ef:2c:f8:
6b:01:3a:75:a7:d9:71:ea:a2:16:5f:29:b9:04:93:66:21:3d:
2d:0a:3d:13:18:8f:9d:d2:fd:03:40:47:01:64:1a:08:cd:55:
fd:17:7b:c7:a4:9b:1d:21:96:28:48:b1:b2:06:8d:3e:dd:f4:
da:f2:a4:4e:2e:3d:46:76:cf:85:db:9d:88:fd:c3:0b:77:59:
b1:7a:a0:e1:53:87:82:33:fe:71:4f:ac:25:57:f3:bd:9f:98:
a6:0d:3d:9a:54:c9:40:6d:16:3a:7c:65:ca:1b:b6:63:bd:74:
d2:33:1a:31:31:6c:7d:1a:b3:5d:ec:99:33:d2:f9:a1:30:46:
ba:09:ab:88:ea:fb:7f:74:ac:44:34:d9:ad:ed:32:8b:6e:a7:
91:af:7f:5a:ab:b5:4e:59:13:6f:40:d5:0f:2e:ce:04:b7:bd:
2a:41:0d:f7:e1:3f:3d:64:9a:79:31:70:97:8f:30:20:69:a0:
ee:11:90:39:d7:fc:08:3a:07:f6:ad:8f:96:72:93:71:b2:9a:
3c:32:81:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fX6eESLEYUrKPaGiSJXQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMGMyZGFjYWZkZmE1Mzk5N2VkM2IwYTcwZGZiYzI3MGE5
MzNiZjQwHhcNMjYwNzI2MTcwMTEzWhcNMjYwNzI3MTcwMTEzWjAzMTEwLwYDVQQD
EyhkMzU3NjAzYTZiYzI5MjYxMzllMzA0ZWRiNmQwOTNhMjhiMzIzMDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP8ULnSwIvtbMPWx6K/yYwggT8k9
OXO+X2BJhYwuoJvXVn8SuQl2dn7TorRgH9q7XAw346RHGYgY3a6wr6q2paNtBMiL
7QHY12sbUJhpa/zszmwW6vRkK+wRpaRn2z8CX8h3IPuhVnagAwURVNL6X4Y7x9fJ
YnEOtlIkVLNcyFUz8OztOHW8cdLhv3ZNy37jGYTOxK8TUZRFHG5+YD4Ylj9d7/OF
ngzCJA+Pf2AaHYUzXUuZj9qXIVTMPbP0ny2ofgf9NvMAUDNvNQ/8Ou4UDuxdW7g/
zZ/fPYNyK9ZRgI4hrL6lGUQuVNKYHLncuRNxCZ4xlBFZ0so/HacCteP3XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNXYDprwpJhOeME7bbQk6KLMjBPMB8GA1UdIwQY
MBaAFMoMLayv36U5l+07CnDfvCcKkzv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUt
OTllYzg4YzQ3NzYwLzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUtOTllYzg4YzQ3NzYw
LzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTWSILtY
fREfxgaAxkqkgBM3omLWz6uGb4/bAvt4fipN8ZOwynRybenv8Suhwd5kXxCi7yz4
awE6dafZceqiFl8puQSTZiE9LQo9ExiPndL9A0BHAWQaCM1V/Rd7x6SbHSGWKEix
sgaNPt302vKkTi49RnbPhdudiP3DC3dZsXqg4VOHgjP+cU+sJVfzvZ+Ypg09mlTJ
QG0WOnxlyhu2Y7100jMaMTFsfRqzXeyZM9L5oTBGugmriOr7f3SsRDTZre0yi26n
ka9/Wqu1TlkTb0DVDy7OBLe9KkEN9+E/PWSaeTFwl48wIGmg7hGQOdf8CDoH9q2P
lnKTcbKaPDKBtw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:56 2026 by rpki-client