Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: I0vX9Ll34zgGIelwuyjQHovGI3APHUoNqGhsbZnlWkA=
Subject key identifier: 6D:2B:19:FC:79:6B:FD:07:F8:ED:0E:FE:82:BD:EE:6E:FE:A0:DB:E3
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 019E205A8D382DEB09A51852D6260F528336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 08:01:05 +0000
Manifest this update: Wed 13 May 2026 08:01:05 +0000
Manifest next update: Thu 14 May 2026 08:01:05 +0000
Files and hashes: 1: DTnex-UlwV0zKy6UASXDNP6H64M.roa (hash: OS8JKI81uoNsyPVMBJm7f0QmGbnDk6BbHN/7FVmcoHg=)
2: q0Xg32RLpaZ2ftlLqcFE1HiFMHM.roa (hash: veVsiD7OXuZtD0ZpV5SiKVt3Azw07hmLxG5Vpo3m3dM=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: fOO+Wrz9wmn/dIknebc53E3bzU+vdf7A5nZ6QEjgb/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:8d:38:2d:eb:09:a5:18:52:d6:26:0f:52:83:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: May 13 08:01:05 2026 GMT
Not After : May 14 08:01:05 2026 GMT
Subject: CN=6d2b19fc796bfd07f8ed0efe82bdee6efea0dbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:1f:e8:0f:cb:3d:00:13:ba:06:4d:bb:4a:
51:9d:f0:07:30:4a:e8:d9:fb:26:6c:8c:a7:a2:c7:
ed:fc:e9:e6:81:16:72:c0:fa:71:7d:b8:f6:e9:ba:
8a:28:75:56:50:9b:42:84:5d:0b:5a:3b:d6:18:b0:
ec:24:89:1e:31:31:af:38:57:fe:6c:83:49:0c:b6:
96:2a:fd:62:94:e7:6a:6e:e5:28:4f:9f:fe:a5:e5:
1d:e8:cc:65:28:e6:01:7c:9d:20:b6:ee:a2:7a:eb:
62:35:e3:a6:2e:b8:ac:0b:87:6e:83:0b:1d:8b:25:
c0:0d:14:3e:50:b4:76:97:0b:53:97:2c:aa:43:0c:
b0:de:76:61:86:eb:6a:e0:c6:bc:b0:d8:87:70:7f:
e0:74:e6:07:67:c7:94:10:0d:f8:53:6d:d2:32:31:
39:c8:7d:da:3c:a8:dc:f7:b2:1f:06:ea:5c:b3:61:
e1:dd:af:f8:9c:83:a3:d1:31:ee:ac:d8:90:43:7b:
2c:9f:01:87:40:e8:cd:0b:f6:d8:dd:d1:f9:c5:08:
ce:f6:13:f8:02:19:8e:eb:89:4b:e1:04:13:c4:da:
ed:ca:c4:59:93:90:30:90:92:61:60:86:06:de:67:
89:1d:2f:e4:9d:13:94:ec:b1:9f:3d:34:d9:19:07:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2B:19:FC:79:6B:FD:07:F8:ED:0E:FE:82:BD:EE:6E:FE:A0:DB:E3
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:12:67:eb:39:9c:8c:4e:5f:9b:cf:8f:b2:7f:2c:9a:cf:75:
10:ed:35:b7:ce:9d:16:36:5e:f9:44:48:ce:26:7c:c7:5f:b2:
41:02:81:9d:4e:73:fb:28:38:ca:e6:ca:1d:82:bf:98:08:e0:
d9:d7:01:e4:70:7c:f7:22:de:5c:12:c9:07:0d:cd:b8:60:6b:
a8:43:7e:e5:65:60:eb:51:9c:24:7c:3f:e6:13:b6:bd:32:71:
5c:7f:47:78:91:48:3f:77:23:1b:b8:da:c4:04:86:7b:6a:19:
b5:2b:21:72:12:e1:8a:e1:ae:14:d0:26:a8:4b:f7:a4:83:a1:
43:18:46:f9:cb:4f:6a:11:7a:b5:25:4f:d0:ec:72:8f:b5:c1:
1b:e2:f1:03:fa:51:98:1a:c9:e1:0b:2a:bb:fe:22:9c:17:e2:
17:fb:53:09:9d:2b:c3:5f:0a:85:3a:16:1a:f3:f5:32:ea:f6:
09:e0:8c:6c:5e:1e:33:a1:4d:fe:55:7e:23:a0:7f:b4:00:85:
12:89:29:9a:a2:32:30:75:2b:2c:e5:46:c0:8e:4f:9a:f4:3a:
70:62:75:02:94:fa:3b:de:73:ff:e9:04:38:88:57:27:be:98:
69:89:89:f6:e2:8c:cf:b0:4d:53:58:6e:e0:2f:a7:28:88:3e:
88:ef:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:49:40 2026 by rpki-client