Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: XAP2F9dv9s0EiEGq80ZzD6GAEZ/O0/av/bgHCqPTWSI=
Subject key identifier: 16:7F:97:3C:37:F0:89:08:61:C0:1D:73:34:02:50:AE:35:C2:B8:E7
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 01A0DFF3ABBE315DABB7F257B979E4E37C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 23:01:23 +0000
Manifest this update: Sat 26 Sep 2026 23:01:23 +0000
Manifest next update: Sun 27 Sep 2026 23:01:23 +0000
Files and hashes: 1: vrzaOZyt0yuGmEkZWTfpBfvU0FM.roa (hash: wM8w9UXwnJwWC//EoV2cIpFlr+CCNnYEJvvmregOsvI=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: 2GZNzXPv7fFgxKBqGAAaldk2h65hQ7qa8QasmIJd9Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:ab:be:31:5d:ab:b7:f2:57:b9:79:e4:e3:7c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Sep 26 23:01:23 2026 GMT
Not After : Sep 27 23:01:23 2026 GMT
Subject: CN=167f973c37f0890861c01d73340250ae35c2b8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:b9:78:ee:6f:76:bf:81:4d:eb:1f:86:39:
b8:49:da:26:d9:97:2d:2f:ac:5c:d2:82:50:66:37:
01:f1:4b:b0:cf:e1:3d:2a:27:3f:fb:3b:db:4a:3e:
36:5d:03:ac:55:2a:f4:7c:58:63:44:dc:bb:b6:e4:
fe:f0:e5:cb:99:05:3b:4e:9b:4d:46:26:c5:d1:9c:
3b:fe:15:50:c9:a0:9a:5a:3c:d4:1f:32:d1:f2:2e:
d2:92:82:cf:fb:96:f8:39:18:71:82:fc:0d:12:31:
6f:87:5e:be:60:44:4d:1f:ad:68:68:25:20:8f:df:
d7:96:25:26:5f:b7:9b:c3:2c:9f:a6:aa:00:15:a6:
06:7b:e4:b4:b1:14:f9:ca:e8:fb:af:84:6e:6f:b1:
be:38:86:0e:d0:e8:15:b0:5f:9d:38:f4:22:88:01:
e0:e3:99:91:55:07:29:c2:27:41:72:6f:8b:e0:2e:
ac:17:76:cd:c9:8a:4e:7a:63:76:6f:4e:bc:0e:ce:
32:14:7d:85:2f:be:2f:ea:45:e3:d8:5b:91:87:10:
f3:b9:94:01:66:23:eb:9d:03:5d:fb:3a:30:cd:62:
e9:fe:e8:13:df:a5:f5:53:11:f8:57:d3:ee:60:75:
a0:05:25:b7:ab:5c:d5:85:ed:cc:04:16:7b:9d:6d:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7F:97:3C:37:F0:89:08:61:C0:1D:73:34:02:50:AE:35:C2:B8:E7
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3b:c5:a8:3d:fb:46:27:fa:9a:df:e1:9b:23:a3:23:c9:fa:
b2:84:81:97:54:a0:ae:52:f8:7c:44:26:bd:c5:99:fb:bf:93:
14:17:46:df:29:a2:3e:9c:aa:fd:07:6c:c9:a4:f5:d9:06:db:
cb:bc:91:07:40:a7:75:7b:9b:a8:05:c6:c2:84:27:f9:42:d3:
62:ec:19:3d:ae:cd:da:51:f2:1e:61:3b:b7:95:f8:62:05:47:
90:2a:03:3a:0a:9d:f3:5f:29:3c:1d:86:df:e3:42:d5:37:6a:
f7:6a:a8:4e:4b:04:f3:8a:38:09:9f:15:24:6c:da:56:8c:74:
06:0c:e5:f4:65:db:bf:8e:81:8f:d2:44:be:74:ed:3a:a7:f3:
3e:da:f6:ee:7c:2d:c0:44:39:9e:5a:95:c1:7e:e0:cb:a6:30:
ff:80:12:d7:bc:c6:f9:2c:50:2f:35:fe:2d:a3:9f:b9:43:fb:
fb:7c:7d:79:a0:b7:6f:ab:f3:6c:3f:8d:60:31:e4:61:59:92:
da:94:01:84:df:fb:9b:fd:d5:69:c8:aa:fd:c7:e7:f8:c2:f9:
f1:46:e4:65:c1:bf:58:ad:fc:65:63:15:96:9e:dd:ac:32:c1:
a8:d1:f9:e4:c3:d0:bb:07:50:b5:ca:18:a2:48:32:6b:9f:66:
be:d1:db:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:19:29 2026 by rpki-client