Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
File: ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft (raw, json)
Hash identifier: 09HB+l0mFHTxbB6P70WcXapAAMaprHdy0GOPOwyYwmo=
Subject key identifier: 61:81:89:AE:D7:90:E4:1F:B5:59:F3:D2:D8:B9:81:2F:46:42:B1:19
Authority key identifier: CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
Certificate issuer: /CN=ca09149f34784f5b202c56761b01d35dd02569cd
Certificate serial: 019CAAC62AB61762F928C6469B992DA6A918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
Manifest number: 05E9
Signing time: Sun 01 Mar 2026 19:00:39 +0000
Manifest this update: Sun 01 Mar 2026 19:00:39 +0000
Manifest next update: Mon 02 Mar 2026 19:00:39 +0000
Files and hashes: 1: saLkMBpBsWlxL5YAPxjxZxzwLm0.roa (hash: HWMfF/NkSXptcowH52WnAePE/1Sax5XIolYonHNfsPw=)
2: ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl (hash: XZfY8TABb1IazIqOFSbM73Nsgj76Qz9AUsMA1QdIUWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2a:b6:17:62:f9:28:c6:46:9b:99:2d:a6:a9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca09149f34784f5b202c56761b01d35dd02569cd
Validity
Not Before: Mar 1 19:00:39 2026 GMT
Not After : Mar 2 19:00:39 2026 GMT
Subject: CN=618189aed790e41fb559f3d2d8b9812f4642b119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:a9:0c:a3:ad:87:da:e3:5c:cc:63:76:6f:
fa:08:f2:1d:e0:04:2c:46:0b:24:52:de:f0:ac:ae:
13:c7:56:43:bb:37:43:39:9f:ea:c9:68:1f:8c:f7:
84:66:26:f5:7f:0c:08:5a:5b:4c:47:2e:3b:60:a8:
22:31:10:c5:9a:dd:0b:ff:cf:52:66:1b:64:a9:42:
d1:31:a3:dd:77:5e:c9:8c:b9:e5:78:ae:a6:dd:9d:
26:fe:57:95:67:79:a7:f7:f1:d7:2f:ff:1e:3b:38:
a8:da:06:6b:d6:ee:ac:37:14:4d:eb:58:2d:d1:83:
d7:9e:19:51:b0:25:c7:f6:83:89:77:37:87:7a:4a:
9f:a2:c3:f0:f7:e7:89:20:51:cf:78:8f:27:47:05:
1b:1a:4d:cd:8c:09:65:ac:a1:56:27:29:61:be:70:
a7:7f:48:05:ef:e6:ea:5e:df:64:89:11:a0:cf:54:
de:ea:81:27:9c:bf:d1:b7:3e:50:b7:96:44:2b:a6:
35:45:e2:3a:4d:a8:97:a8:08:fd:f7:2f:75:b9:bd:
12:10:5e:9c:f1:80:64:a9:12:4e:be:b6:d2:9d:c2:
d9:0b:43:fb:fd:f2:9a:a1:e4:11:cd:69:9f:5a:1e:
3f:35:f6:2f:92:df:82:f4:0e:70:b6:34:62:49:7f:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:81:89:AE:D7:90:E4:1F:B5:59:F3:D2:D8:B9:81:2F:46:42:B1:19
X509v3 Authority Key Identifier:
keyid:CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:af:a6:37:3a:a6:b9:1c:46:2b:11:fe:d8:53:b4:27:ab:10:
17:6f:19:9a:80:c9:d8:2e:0b:d2:98:e8:0a:be:c7:fa:b9:7f:
36:59:9f:dc:cd:e2:b6:f0:cd:26:31:0a:16:4c:40:6e:53:4a:
76:02:2e:bd:8e:22:f3:6f:c1:47:65:27:51:dd:f4:46:36:26:
49:e8:45:0e:e9:3f:fc:65:6c:38:36:24:7a:6b:f9:e0:33:5c:
4b:7a:96:61:b9:fa:3b:ce:ff:92:92:70:d5:b1:e8:54:33:e8:
11:08:4b:f2:ac:b9:81:18:9f:b6:40:f9:29:aa:1a:21:e8:25:
30:4b:3d:41:83:83:44:4e:8f:d9:53:38:66:82:fe:26:44:61:
61:4f:22:31:ca:17:63:a6:e8:74:0c:57:b4:4c:3f:4f:dd:eb:
ed:cf:26:1c:6e:c6:f2:10:b1:47:98:93:d3:de:d6:41:5c:2a:
b1:0e:68:54:d7:ad:8c:90:83:f2:ed:97:ce:6b:12:8c:69:4d:
3d:a7:50:f9:94:0e:2f:b3:49:ad:66:28:96:8d:f8:37:17:5b:
19:b9:1e:a0:21:71:e6:aa:3d:64:84:e5:ad:91:34:7d:61:8a:
00:cc:bd:f3:4a:5e:91:05:7f:02:14:4d:10:cb:15:c8:1d:4d:
55:47:bd:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxiq2F2L5KMZGm5ktpqkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMDkxNDlmMzQ3ODRmNWIyMDJjNTY3NjFiMDFkMzVkZDAy
NTY5Y2QwHhcNMjYwMzAxMTkwMDM5WhcNMjYwMzAyMTkwMDM5WjAzMTEwLwYDVQQD
Eyg2MTgxODlhZWQ3OTBlNDFmYjU1OWYzZDJkOGI5ODEyZjQ2NDJiMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGWpDKOth9rjXMxjdm/6CPId4AQs
RgskUt7wrK4Tx1ZDuzdDOZ/qyWgfjPeEZib1fwwIWltMRy47YKgiMRDFmt0L/89S
ZhtkqULRMaPdd17JjLnleK6m3Z0m/leVZ3mn9/HXL/8eOzio2gZr1u6sNxRN61gt
0YPXnhlRsCXH9oOJdzeHekqfosPw9+eJIFHPeI8nRwUbGk3NjAllrKFWJylhvnCn
f0gF7+bqXt9kiRGgz1Te6oEnnL/Rtz5Qt5ZEK6Y1ReI6TaiXqAj99y91ub0SEF6c
8YBkqRJOvrbSncLZC0P7/fKaoeQRzWmfWh4/NfYvkt+C9A5wtjRiSX/K9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGBia7XkOQftVnz0ti5gS9GQrEZMB8GA1UdIwQY
MBaAFMoJFJ80eE9bICxWdhsB013QJWnNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWdrVW56UjRUMXNnTEZaMkd3SFRYZEFsYWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iMGRjZGEtYTM3ZS00NzAzLThkNWEt
OWFhZDkwM2E3Mjc2LzEveWdrVW56UjRUMXNnTEZaMkd3SFRYZEFsYWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iMGRjZGEtYTM3ZS00NzAzLThkNWEtOWFhZDkwM2E3Mjc2
LzEveWdrVW56UjRUMXNnTEZaMkd3SFRYZEFsYWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFK+mNzqm
uRxGKxH+2FO0J6sQF28ZmoDJ2C4L0pjoCr7H+rl/Nlmf3M3itvDNJjEKFkxAblNK
dgIuvY4i82/BR2UnUd30RjYmSehFDuk//GVsODYkemv54DNcS3qWYbn6O87/kpJw
1bHoVDPoEQhL8qy5gRiftkD5KaoaIeglMEs9QYODRE6P2VM4ZoL+JkRhYU8iMcoX
Y6bodAxXtEw/T93r7c8mHG7G8hCxR5iT097WQVwqsQ5oVNetjJCD8u2XzmsSjGlN
PadQ+ZQOL7NJrWYolo34NxdbGbkeoCFx5qo9ZITlrZE0fWGKAMy980pekQV/AhRN
EMsVyB1NVUe9/g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:14 2026 by rpki-client