Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
File: ygBGolNBzREDtgzOC5nqN1S6XEE.mft (raw, json)
Hash identifier: pMFs5dVwBB+/PMaBD39PTTUdBVrTy6SFUAbjwDs89WE=
Subject key identifier: 7D:1C:C9:BD:09:D3:02:F9:AA:1E:81:0E:95:55:50:61:A0:25:A0:91
Authority key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Certificate issuer: /CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Certificate serial: 019D99D0407F2E5AC55CF7A5996CD18309D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
Manifest number: 05BB
Signing time: Fri 17 Apr 2026 05:00:55 +0000
Manifest this update: Fri 17 Apr 2026 05:00:55 +0000
Manifest next update: Sat 18 Apr 2026 05:00:55 +0000
Files and hashes: 1: stNqzIw6qQRyW22hrj_jya1vgPM.roa (hash: R7iZW3oZGdaZLmvsasGhYvRkXeTvpYwH54Of8otwpTw=)
2: ygBGolNBzREDtgzOC5nqN1S6XEE.crl (hash: 3yOzXBiGdpUE52p2e9R4VjJIrg4y77w2yHm48F3h5xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:40:7f:2e:5a:c5:5c:f7:a5:99:6c:d1:83:09:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Validity
Not Before: Apr 17 05:00:55 2026 GMT
Not After : Apr 18 05:00:55 2026 GMT
Subject: CN=7d1cc9bd09d302f9aa1e810e95555061a025a091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0c:5d:b2:7b:1d:18:14:07:67:34:bb:fe:ae:
fb:36:f8:2e:49:3a:91:a1:8e:1e:a6:3e:4c:cb:a3:
a0:90:1b:1e:4d:1d:54:6d:8d:0a:fa:cd:78:c2:79:
3f:69:f3:34:c6:5c:f9:88:d2:b6:80:63:29:07:fd:
d4:3f:d7:71:ce:65:75:a5:69:f0:14:0c:a8:a3:b0:
36:ff:c9:21:44:11:6c:17:ef:4b:b9:c5:14:7b:da:
14:0f:93:6b:c1:4b:ee:88:eb:cd:98:f8:3e:da:bb:
87:6c:dc:45:7a:c3:16:48:21:99:02:a3:e5:e6:ee:
21:82:e4:85:04:95:48:d3:97:5c:df:4e:6e:d4:c6:
33:77:8c:9e:f8:79:76:2c:f6:27:73:dc:07:4f:33:
45:32:4a:b9:f4:cc:c6:b6:3b:c7:c6:4b:0e:1d:65:
eb:09:db:73:a3:d5:37:43:c0:7f:6f:ca:e1:70:84:
77:aa:b3:e5:e6:b8:d3:5d:03:c9:71:60:8b:24:ae:
eb:92:6d:6e:8f:f2:92:58:e9:b0:8e:17:97:0c:45:
81:37:53:16:3f:40:c2:70:64:70:69:7a:bc:03:06:
3e:c0:0a:0e:2f:4a:7a:85:7d:3e:3f:29:a5:e5:da:
79:81:7c:5d:64:a6:42:98:f9:56:7f:09:f2:12:16:
73:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:C9:BD:09:D3:02:F9:AA:1E:81:0E:95:55:50:61:A0:25:A0:91
X509v3 Authority Key Identifier:
keyid:CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f4:ff:a7:3d:f4:63:21:92:d9:be:3f:09:cb:2a:d7:ae:ec:
24:a5:3d:50:1a:a0:58:27:01:6f:72:09:e0:c4:11:71:88:9f:
36:e9:bd:57:64:33:ad:d2:3b:fd:cb:5a:b2:21:00:ad:45:3b:
b7:4e:0c:ee:db:d0:3b:c7:5a:5e:42:53:e2:4c:78:df:32:db:
4c:d1:7c:54:68:e6:6e:68:5c:d6:fa:ed:3f:a4:38:da:5c:1c:
f8:00:b0:d5:b7:ad:b5:f2:f1:bd:11:d2:76:e6:56:5f:56:85:
55:73:67:12:96:07:98:b7:8e:fc:da:8d:b6:79:61:f9:f1:e1:
c7:d0:61:4e:42:29:b1:de:0f:06:cc:f1:32:1b:8d:83:f0:24:
e6:35:87:55:2f:db:40:68:23:a2:98:45:86:ed:4e:a2:87:53:
f4:c6:e2:3f:96:74:92:bc:60:a3:5e:35:01:0e:de:99:52:04:
81:38:e9:e6:1d:34:c6:37:2d:31:74:cb:7f:ce:c6:46:e4:c6:
74:69:0a:1b:de:a9:4d:4a:29:1c:57:50:74:bb:0e:a4:d6:3b:
4a:6d:eb:7a:c8:01:8c:ab:1b:2c:b4:8d:9f:f5:a0:60:dc:3d:
0e:9e:7e:2b:e4:90:8e:8e:93:58:fd:7b:92:16:44:3b:50:1c:
2a:b1:6f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:27 2026 by rpki-client