Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
File: ygBGolNBzREDtgzOC5nqN1S6XEE.mft (raw, json)
Hash identifier: +5kSkHL0YIVCtEEN687LjGloMQzsWVsefUtE0OIDXJI=
Subject key identifier: 9F:23:BD:DE:AF:FD:3B:BD:F9:00:D9:9E:18:BC:2E:C5:A6:75:D2:21
Authority key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Certificate issuer: /CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Certificate serial: 01A0C10C9A3904F6050A2937C2E8DFAA80C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
Manifest number: 075D
Signing time: Sun 20 Sep 2026 23:00:23 +0000
Manifest this update: Sun 20 Sep 2026 23:00:23 +0000
Manifest next update: Mon 21 Sep 2026 23:00:23 +0000
Files and hashes: 1: stNqzIw6qQRyW22hrj_jya1vgPM.roa (hash: R7iZW3oZGdaZLmvsasGhYvRkXeTvpYwH54Of8otwpTw=)
2: ygBGolNBzREDtgzOC5nqN1S6XEE.crl (hash: x+SZC3/vC+9Q80L2zDXd+DhAm+M7tIodHtSRoikfGhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:9a:39:04:f6:05:0a:29:37:c2:e8:df:aa:80:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Validity
Not Before: Sep 20 23:00:23 2026 GMT
Not After : Sep 21 23:00:23 2026 GMT
Subject: CN=9f23bddeaffd3bbdf900d99e18bc2ec5a675d221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:42:c3:a6:2c:b5:7f:26:a7:eb:14:38:1d:89:
be:84:59:6f:54:18:29:03:9e:c4:5a:52:ae:a3:97:
90:08:04:df:e6:5a:02:40:6d:96:8a:77:56:b4:f0:
d6:b5:3a:63:b0:e4:20:9b:35:7f:4a:a8:4c:36:bc:
6e:c3:ca:49:eb:e8:80:f8:5b:03:9f:f3:ae:b2:1f:
0d:75:fb:8f:ab:bd:74:ee:8a:56:01:1a:88:76:12:
ab:8e:a0:32:8e:68:f0:c3:c1:98:15:8f:0d:cd:c5:
b7:d0:13:7a:1e:c2:b2:0d:b2:7e:32:9b:f8:73:76:
d7:a5:f2:0b:f1:fa:5d:27:4b:6e:26:4e:78:4a:1a:
26:cd:c2:f5:54:a2:bb:ec:61:3f:15:fd:8e:3e:29:
3f:d4:11:2d:35:12:31:30:78:9a:5e:55:d5:5b:57:
81:dd:24:40:d9:21:9f:5a:d9:7c:2a:c5:d4:99:c4:
be:f0:0f:f4:9a:bb:19:6a:0f:40:f4:ce:ee:7f:c5:
fa:d9:98:f6:76:5d:6c:b2:33:db:f5:69:83:4e:2c:
88:bd:c5:16:ff:86:79:37:bd:c8:84:45:9a:f2:9f:
17:2a:1a:da:fd:05:2e:6f:4f:0d:5f:a6:a2:83:52:
9b:ed:c7:a5:ae:31:cf:b8:cd:a6:dd:8c:c9:dd:79:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:23:BD:DE:AF:FD:3B:BD:F9:00:D9:9E:18:BC:2E:C5:A6:75:D2:21
X509v3 Authority Key Identifier:
keyid:CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fc:ef:ef:db:7a:15:df:23:e2:8a:c8:ee:67:dc:7f:93:3c:
15:29:78:71:dc:78:45:5c:23:05:84:03:9e:e3:2f:4a:8c:23:
bf:41:c8:5f:b7:10:e2:e8:0f:54:e1:f6:7f:74:46:86:a7:26:
52:59:f1:7a:48:e9:02:e2:63:4a:68:03:33:c0:20:9a:0e:aa:
be:bd:f7:87:fd:ec:44:21:38:bd:42:7a:29:97:4a:6a:c5:4f:
f4:f4:9f:32:d1:3f:01:02:b6:0e:9a:d3:68:b5:25:36:b4:6e:
d0:b1:aa:dc:ca:72:8d:f7:c2:79:b1:98:e7:30:67:7b:96:45:
36:97:e0:04:cb:b5:cb:d5:75:d5:6e:5a:05:60:4b:cb:41:6f:
1b:89:e7:8b:8a:a6:4f:ab:a7:53:4b:5d:b8:61:b4:f0:3c:6a:
a4:f2:4b:bf:f1:88:41:e7:f7:26:d3:69:b8:74:73:2b:ce:df:
c3:f5:ef:3a:dc:30:cb:71:83:1b:f0:e1:a1:b0:59:f8:7f:78:
b2:08:34:c2:6a:6a:da:12:6c:a1:80:68:d2:75:1b:5f:b1:06:
b4:42:40:07:42:01:c9:56:d8:3a:a3:ec:6f:3a:89:53:f7:3b:
6c:95:88:60:4e:43:22:d0:fb:ed:ee:d0:5b:44:45:5c:20:54:
34:b2:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:45:31 2026 by rpki-client