Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: CaaEl3Gs5txEYjvh9wvBjmkLdr6R2SSfskIgv7uZH/I=
Subject key identifier: 5B:4A:28:CA:CE:ED:37:6F:B6:28:94:81:8B:1A:8E:47:01:DE:E9:6B
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 019D394186940C806622FD71A3EA40A2BF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:28 +0000
Manifest this update: Sun 29 Mar 2026 11:01:28 +0000
Manifest next update: Mon 30 Mar 2026 11:01:28 +0000
Files and hashes: 1: vrzaOZyt0yuGmEkZWTfpBfvU0FM.roa (hash: wM8w9UXwnJwWC//EoV2cIpFlr+CCNnYEJvvmregOsvI=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: E2t/Wb141lreoEX0HnbSfDBkVVpCZYK3bdZxPoYIMBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:86:94:0c:80:66:22:fd:71:a3:ea:40:a2:bf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Mar 29 11:01:28 2026 GMT
Not After : Mar 30 11:01:28 2026 GMT
Subject: CN=5b4a28caceed376fb62894818b1a8e4701dee96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:f3:46:a1:13:12:d3:75:07:ed:6f:a4:a7:
93:58:0f:6b:4d:a6:54:a1:a9:72:f2:4a:7a:fb:e2:
0b:91:f9:24:08:43:54:53:4b:67:b3:44:6d:a0:67:
67:11:eb:ba:9d:4e:7b:c9:b9:13:76:17:e7:c9:ca:
f8:95:c0:51:2e:0d:3f:b3:4b:a1:7a:f4:0d:55:55:
3e:76:25:f4:09:f8:c3:7e:93:45:44:87:f1:f9:30:
ed:04:a1:9e:d3:2f:5d:8d:b7:ac:19:44:37:4b:53:
a1:c2:20:2b:ed:b7:33:bd:67:be:fb:f1:df:ce:24:
7b:fa:30:bf:b5:ff:ce:19:38:6e:f2:77:93:45:b1:
8c:59:47:a0:ab:d5:5e:8e:a5:49:89:ba:b2:0c:dd:
60:80:97:ea:c1:fb:2d:d6:ed:1b:45:8b:4d:a2:33:
b7:4d:58:80:2a:43:20:62:4b:1a:1b:4d:6a:ae:01:
1c:95:ee:42:88:34:bc:3a:d5:c5:a2:e1:4b:db:d2:
9b:1d:6d:c3:56:57:74:27:6d:4e:1e:d7:63:c4:88:
ea:6e:48:49:44:31:71:28:d9:b9:e9:5c:21:d9:db:
74:19:cb:72:1c:c4:6b:af:9f:ed:57:f9:f6:c3:5f:
2e:40:3f:a9:d1:c7:43:24:06:eb:04:09:a4:44:4c:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4A:28:CA:CE:ED:37:6F:B6:28:94:81:8B:1A:8E:47:01:DE:E9:6B
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a0:72:54:0f:2d:cb:88:3a:ba:8c:1d:84:ec:59:f7:d8:52:
13:57:b1:d5:33:06:09:64:fa:b1:f5:1b:02:be:6a:47:0b:0e:
ca:3b:7b:e5:96:c9:55:d1:21:1c:5d:2f:1c:4e:0b:e1:24:82:
19:de:cb:b0:c2:cd:36:09:37:16:09:2b:76:e6:93:4c:87:62:
ca:e3:fa:49:3e:cc:3c:ea:83:2d:8b:c0:01:c3:0c:44:38:12:
1f:4e:2a:e5:21:f2:11:29:67:26:7a:31:10:86:42:c1:de:ef:
39:76:ed:92:8e:0a:e0:23:1a:e2:74:d5:21:08:45:c3:f3:84:
0a:c9:e1:30:c0:e6:c6:5f:6e:69:47:13:68:70:93:e9:f0:2a:
48:99:b1:41:ce:d3:00:b4:09:c3:d8:19:eb:78:4c:e4:82:3a:
61:38:55:a8:94:81:a3:62:e7:21:f6:e1:07:a7:1e:0a:e6:a8:
63:51:6d:eb:e3:85:7e:a3:d0:8f:d6:85:09:8e:59:3a:d1:b4:
8b:d8:1b:4d:36:f3:e9:48:89:b1:c7:ea:fc:c4:76:7d:dd:01:
de:5a:0b:97:8e:94:c3:99:4e:d7:c2:37:3f:8c:ac:20:4d:73:
c9:f7:c1:c9:13:ea:ba:19:66:87:42:2f:6b:a3:0b:3b:e8:8a:
75:66:f5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:12 2026 by rpki-client