Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: VF+XgbdW7UfEe3rTMCBtNl9rBchYJLvl2zhzBm0EZ5A=
Subject key identifier: 18:FC:06:01:A1:4C:37:1E:2B:B2:82:C6:8A:5A:4C:FC:4E:9F:76:4B
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 019CAC46C6BD6B66E12FF905DF30D1ECB461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:00:45 +0000
Manifest this update: Mon 02 Mar 2026 02:00:45 +0000
Manifest next update: Tue 03 Mar 2026 02:00:45 +0000
Files and hashes: 1: vrzaOZyt0yuGmEkZWTfpBfvU0FM.roa (hash: wM8w9UXwnJwWC//EoV2cIpFlr+CCNnYEJvvmregOsvI=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: /8ap4gBa/pOWzptDg8nmqYu8zSUQdTx4xsPneerhmKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:c6:bd:6b:66:e1:2f:f9:05:df:30:d1:ec:b4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Mar 2 02:00:45 2026 GMT
Not After : Mar 3 02:00:45 2026 GMT
Subject: CN=18fc0601a14c371e2bb282c68a5a4cfc4e9f764b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:7e:40:58:35:bc:44:07:be:ba:e4:4f:99:
84:9e:0b:e2:8d:30:ea:6f:48:7c:3d:b6:bd:c0:68:
f2:08:c4:19:69:20:d8:33:6c:f3:fd:16:f8:04:68:
35:16:fe:04:a9:60:aa:29:72:00:87:49:de:97:d6:
75:af:c1:b1:30:dd:91:e8:98:5c:ad:5f:50:25:5f:
04:f9:80:0f:58:08:7a:5e:ab:83:a3:29:ed:06:14:
51:91:d0:3d:78:12:35:84:71:52:fe:42:86:8c:9d:
8b:8c:e0:ae:86:b2:e4:8c:d9:43:54:7f:06:1e:a5:
e4:83:46:b3:63:88:d5:21:d3:c6:7e:e1:f0:6e:8e:
18:e1:65:28:ac:5c:f1:22:73:c6:70:b8:ac:27:e9:
f6:b1:0e:14:86:cf:1c:26:80:2a:84:23:d2:08:28:
16:cb:2d:e5:80:c3:d6:5e:7c:6d:0c:48:5f:6c:0d:
c1:b1:8e:55:d0:65:ce:30:04:15:27:d5:40:4e:3a:
41:96:d1:01:48:d7:91:61:98:a4:31:84:c0:22:c3:
96:2d:e2:d1:3c:cc:a1:54:dc:06:b2:6e:91:94:0c:
48:fe:1f:df:c1:8b:02:d6:b6:70:ab:57:4e:dc:84:
11:a5:1b:8c:50:5c:37:ff:6d:60:e2:36:1f:e4:e1:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FC:06:01:A1:4C:37:1E:2B:B2:82:C6:8A:5A:4C:FC:4E:9F:76:4B
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b0:eb:e1:35:b9:ab:cc:fd:78:3b:12:57:3c:66:b6:4b:00:
43:4a:e8:bc:56:fc:e1:de:e7:25:37:7e:5d:df:85:11:82:2d:
77:6b:5a:d2:ae:4c:b2:04:0d:4b:7c:19:44:b5:5c:74:5a:7b:
a8:31:67:99:91:10:24:9e:79:cf:64:5a:89:9c:19:8a:7f:34:
79:c2:97:c9:0e:3d:e6:e8:66:21:31:6b:d3:f6:b2:d0:40:81:
6b:be:dc:64:cd:60:45:d9:29:c4:2d:67:fc:41:1b:47:fa:cb:
cb:14:3a:6c:2e:53:d2:6a:28:d1:29:ec:4d:1a:7c:57:f4:b4:
bc:8c:2f:59:9f:17:bb:78:de:75:27:c5:17:59:68:e7:82:80:
b6:43:2a:f5:d0:a2:31:12:52:c0:eb:25:08:f0:00:a5:af:4d:
bb:d3:e0:9b:42:1f:d8:03:1d:10:53:ce:c5:3e:dc:92:d6:ad:
98:f2:89:80:2c:b5:02:3c:75:7d:46:0d:01:d6:50:62:ed:f3:
43:06:3f:22:1a:85:00:94:f3:87:f0:a6:f0:3e:a0:69:d3:23:
1c:08:1b:61:fe:c0:cd:a7:67:ed:1d:cf:2d:9e:95:13:f7:51:
1c:fa:50:a0:e8:ef:e5:22:5d:6d:e5:e1:45:3b:04:19:00:e4:
5a:0c:18:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:35 2026 by rpki-client