Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: 9oKp8/9N1l8R5ka13g5niSksZ9owsMfzO97ft49H1f0=
Subject key identifier: 24:74:AA:B6:41:01:BC:87:47:A5:6C:EB:A4:3A:C8:EF:05:AD:D8:AB
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 019F9323BE3168DE72536713DB1D5A0E163D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 08:00:20 +0000
Manifest this update: Fri 24 Jul 2026 08:00:20 +0000
Manifest next update: Sat 25 Jul 2026 08:00:20 +0000
Files and hashes: 1: DTnex-UlwV0zKy6UASXDNP6H64M.roa (hash: OS8JKI81uoNsyPVMBJm7f0QmGbnDk6BbHN/7FVmcoHg=)
2: q0Xg32RLpaZ2ftlLqcFE1HiFMHM.roa (hash: veVsiD7OXuZtD0ZpV5SiKVt3Azw07hmLxG5Vpo3m3dM=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: uRfNHyfRVkBXfQSCqEb5ZfdFjZDBQ/Cvzvzo0iTZIMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:be:31:68:de:72:53:67:13:db:1d:5a:0e:16:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Jul 24 08:00:20 2026 GMT
Not After : Jul 25 08:00:20 2026 GMT
Subject: CN=2474aab64101bc8747a56ceba43ac8ef05add8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:7f:ff:a7:f0:a3:6d:e9:f0:a2:c5:e1:1e:
78:cb:28:fd:1f:88:5e:c8:32:49:b6:33:07:b4:21:
fc:0d:ff:cf:83:ba:30:40:e2:5a:0f:52:21:1b:e7:
ca:f2:3d:42:be:3f:76:8a:3d:8e:23:b7:67:6c:59:
ab:87:ea:33:fb:dc:89:bf:b9:5f:d6:3f:e8:0d:78:
90:75:b1:53:73:6a:4c:df:2a:e3:06:2b:fd:cb:c1:
a3:16:94:c9:74:01:24:90:e4:d0:9d:d4:49:ff:9a:
73:6f:f8:87:b1:fe:6e:f4:aa:e1:cd:fa:3c:ef:0f:
90:03:09:3f:9e:9b:4e:93:a8:35:26:19:d3:c5:23:
a6:f6:be:9b:cc:e1:56:2a:b2:8a:88:a5:3d:4d:d8:
b8:bb:05:94:e5:23:be:50:7a:ff:23:dc:72:d8:9b:
16:df:68:f4:a9:3b:69:4b:b8:08:bf:86:19:65:24:
7e:f9:de:d4:fc:e0:c0:e7:e6:11:63:b6:af:ae:2b:
d3:59:07:38:9a:7c:20:e5:08:e0:06:c6:4e:a0:13:
10:2e:c8:94:fe:0e:4e:8c:cc:e4:05:9a:ab:d1:94:
f6:8a:6d:f3:ea:32:25:23:72:48:56:d0:68:a7:cf:
cb:90:14:cd:e1:3b:2f:b4:2c:b6:25:e6:95:b1:c5:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:74:AA:B6:41:01:BC:87:47:A5:6C:EB:A4:3A:C8:EF:05:AD:D8:AB
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:28:20:13:23:92:89:d9:bc:25:82:a3:af:ba:94:f8:4e:48:
22:a7:c1:ff:19:e0:bd:6a:2a:40:0a:14:0f:45:ff:8a:99:02:
b4:0f:7a:35:df:aa:39:65:97:10:56:bf:16:17:2a:3b:d4:22:
02:53:7f:85:fe:1f:80:54:b4:11:5b:27:98:f0:10:d7:29:df:
a2:23:17:2c:88:b4:29:48:65:f5:30:67:0f:cc:b6:5e:cc:42:
78:7c:45:50:69:27:66:71:78:93:35:e8:db:34:6c:e1:27:e7:
fe:60:a4:14:e0:4d:38:00:b1:4d:0d:93:d2:0d:90:4f:1a:c1:
5d:db:31:fe:05:ef:16:73:5c:de:22:ac:f9:6a:27:75:cb:75:
4a:4c:f8:dd:0b:a0:df:35:28:0f:61:4a:bd:b2:93:f8:e0:8b:
d8:7c:47:ae:31:1b:95:d7:8c:c0:63:00:ed:b3:f6:49:25:7a:
dc:4e:5a:2c:8a:20:28:e6:74:39:e3:60:f6:64:07:42:71:c3:
60:9c:22:c3:d4:90:ce:4d:1d:f7:39:f8:db:35:5b:43:08:c4:
98:20:a3:f5:71:7c:bf:42:53:e8:39:f1:ec:71:c4:25:eb:81:
55:05:5b:e5:41:d5:0e:57:95:a5:fd:01:3a:db:e8:90:3c:01:
c6:ee:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:38:17 2026 by rpki-client