Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: Z03W9Op0Cl2M8Ow0J7khugKF1tXmrcWO2aB5Gb/ou3w=
Subject key identifier: 22:62:9F:73:0F:17:B1:F7:99:31:BB:76:1A:4E:73:28:E5:12:8B:51
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 019D29295E65A9EF1E927780EECAE41E0710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 08:01:10 +0000
Manifest this update: Thu 26 Mar 2026 08:01:10 +0000
Manifest next update: Fri 27 Mar 2026 08:01:10 +0000
Files and hashes: 1: DTnex-UlwV0zKy6UASXDNP6H64M.roa (hash: OS8JKI81uoNsyPVMBJm7f0QmGbnDk6BbHN/7FVmcoHg=)
2: q0Xg32RLpaZ2ftlLqcFE1HiFMHM.roa (hash: veVsiD7OXuZtD0ZpV5SiKVt3Azw07hmLxG5Vpo3m3dM=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: mB9gbHSXwJUwWu7aU1sEgSHGZO+mO8L5xAv6rvh3n/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:5e:65:a9:ef:1e:92:77:80:ee:ca:e4:1e:07:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Mar 26 08:01:10 2026 GMT
Not After : Mar 27 08:01:10 2026 GMT
Subject: CN=22629f730f17b1f79931bb761a4e7328e5128b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:56:81:69:72:3e:ca:d3:0f:f7:10:18:d9:
f9:14:12:fb:f7:48:29:7b:64:2f:cf:62:52:fb:94:
52:4a:62:c1:85:67:d0:3c:39:58:50:ce:68:39:ec:
8b:57:f6:29:f5:7e:cf:58:9f:23:f6:3c:22:52:a1:
e6:60:54:0e:6b:a7:e3:99:70:b5:b8:bd:1d:eb:a6:
ba:cc:50:e6:14:ed:df:d6:19:ce:54:9e:b0:90:06:
2d:34:c7:f2:9d:79:e8:6b:4e:2b:bd:2b:4a:d8:4d:
48:05:6b:e3:e1:f4:71:77:00:2c:cd:5f:8e:9e:87:
67:91:08:4e:53:bd:03:57:9e:51:cd:3d:87:8c:ea:
f7:59:b9:27:d9:d1:be:5a:e2:11:2b:45:6c:db:56:
b5:67:ac:ee:ee:5d:84:b1:96:73:8f:84:45:43:d5:
11:c7:6f:97:9e:05:a5:a9:90:ce:da:8e:d7:87:a8:
e0:fa:14:cb:02:1f:6b:9f:b3:d5:47:57:00:b0:37:
b0:a8:a2:f0:8e:3c:5d:6b:71:49:1a:d1:7c:d6:34:
3f:fe:fb:53:a1:54:5c:57:5b:81:f2:5c:1a:52:05:
f3:fc:d5:58:f9:29:ab:6c:b5:48:b4:70:7f:c3:d4:
e5:6e:f4:38:76:ef:d3:06:2a:ec:1c:9c:63:aa:ea:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:62:9F:73:0F:17:B1:F7:99:31:BB:76:1A:4E:73:28:E5:12:8B:51
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:48:40:75:fa:8f:7e:7f:f0:97:6f:d9:b1:c8:e2:ad:22:0a:
e9:5b:e8:b2:62:a5:ac:b3:7b:0b:e2:e5:8e:e6:a3:ae:b8:dd:
35:f7:e7:c4:40:45:9b:0f:f4:d2:4e:06:c3:44:d4:1a:e1:8c:
78:4a:57:f5:42:19:be:4b:3e:21:89:ed:06:0d:d4:e9:2d:64:
be:36:26:19:60:33:73:27:cf:2c:4e:b9:b3:48:53:3d:3f:13:
81:2f:ce:c8:17:79:9c:be:98:cd:ed:5a:e1:a6:7b:ef:69:c3:
ff:f9:8a:9d:5b:42:55:ca:fa:8a:f3:d4:e8:09:54:e5:9f:39:
11:16:15:06:c1:bb:4e:a4:7b:6e:34:ea:ee:dc:cb:ab:23:2f:
48:9c:c0:8d:fb:f7:bd:c7:e7:cb:27:cf:7c:ba:7b:5b:73:8c:
5f:14:ae:f8:13:3c:90:08:dc:28:65:d8:6b:70:99:80:2e:61:
c4:a9:19:a5:11:49:f1:e8:db:66:03:03:67:70:c3:27:bb:79:
42:12:5e:33:b8:5b:29:ea:ad:30:5e:7b:0d:d5:8a:aa:40:0b:
f7:f5:ca:72:99:7f:6a:41:af:85:a3:ad:ee:5f:76:2b:20:99:
36:82:aa:d6:22:ed:d5:f0:ff:e1:34:42:98:ff:c3:98:64:55:
ee:15:e3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:50:46 2026 by rpki-client