Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
File: ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft (raw, json)
Hash identifier: NasaGkj96Odaw4haZydQFiTc1m+zYX77O054oFHZN4I=
Subject key identifier: CF:AC:24:27:B9:2C:BD:D7:7C:32:0A:99:9E:B0:39:E5:18:98:E0:33
Authority key identifier: CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
Certificate issuer: /CN=ca5154158905d1d44c4588dfd25802f324a93d61
Certificate serial: 019DA41CFAE9A5E13D8AE5829EB5DCDA334B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
Manifest number: 071F
Signing time: Sun 19 Apr 2026 05:00:55 +0000
Manifest this update: Sun 19 Apr 2026 05:00:55 +0000
Manifest next update: Mon 20 Apr 2026 05:00:55 +0000
Files and hashes: 1: 4okKBfXSNKomjqjfKSyXyfQW8mg.roa (hash: c/G+cvhNW3akdlAhAKvUtf/mU2MrPEwZm3MMXGbYwZo=)
2: jDQ8F_F11yNWOX6kbTNP0Ql0Wi8.asa (hash: a4/BoGxMxUQA6ejTQInWpx7OBve66J6mI7qjuV4Hb5Q=)
3: ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl (hash: UNfNPh6tUEQ792BnFku3wo6PrAZsdrTfKkTPKb5fLVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:fa:e9:a5:e1:3d:8a:e5:82:9e:b5:dc:da:33:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5154158905d1d44c4588dfd25802f324a93d61
Validity
Not Before: Apr 19 05:00:55 2026 GMT
Not After : Apr 20 05:00:55 2026 GMT
Subject: CN=cfac2427b92cbdd77c320a999eb039e51898e033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:f2:40:4f:f9:10:a7:dd:26:f5:cf:7a:fc:
ca:ac:4e:bb:79:c9:74:e2:6b:69:fe:7c:54:b2:6f:
18:36:bc:b7:cd:f3:81:31:8c:1b:45:8d:5f:10:99:
43:fb:88:b7:a1:76:2a:51:00:05:d5:74:d9:f9:31:
8a:62:37:95:5b:95:89:ad:11:7c:a9:28:a8:a3:b7:
b6:33:57:65:27:85:04:09:16:38:ab:55:d3:53:84:
1e:01:45:f5:fd:db:d7:d1:c9:b7:b9:99:fe:9c:86:
39:7f:09:1f:f1:b6:51:e9:76:f8:73:88:63:f0:79:
53:4f:28:91:2b:47:a5:16:f6:14:16:1c:73:07:7c:
8a:1b:ff:f9:21:6c:26:d4:4c:83:80:91:ee:b6:bc:
44:a0:b8:1a:a4:80:ec:7e:d1:c3:44:17:27:8f:7d:
f3:d2:09:e9:90:39:4e:f5:95:28:da:7a:2e:33:63:
a3:44:d2:a9:29:20:17:1a:af:e9:f1:b5:46:a1:2a:
d5:75:15:87:8c:81:0e:9e:fe:fe:de:18:11:7e:d0:
7c:12:7e:51:04:fe:5d:fe:e3:7f:a1:72:23:2b:69:
29:22:1f:28:29:e8:0e:18:82:09:22:75:f2:a5:8b:
83:a9:79:b9:18:87:5c:15:b4:b4:e1:1f:a1:4a:70:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AC:24:27:B9:2C:BD:D7:7C:32:0A:99:9E:B0:39:E5:18:98:E0:33
X509v3 Authority Key Identifier:
keyid:CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3d:8c:50:70:b7:b7:79:e4:af:91:62:1f:ef:38:fb:9e:22:
4a:42:f5:25:d4:34:fc:6e:9d:62:65:9e:56:dc:34:af:12:d5:
3b:52:f9:80:0c:82:ee:0b:f2:2c:7d:5e:c8:40:28:e6:cc:5b:
60:ca:7a:1b:af:7c:88:ab:1d:a5:27:fd:30:e7:8f:6d:06:4d:
51:5b:5b:86:3e:ae:5f:95:16:c1:f5:8f:98:63:f1:4c:27:a8:
bf:93:6d:20:1d:ed:35:91:e7:5f:ee:7b:ad:74:48:6a:89:32:
58:cb:95:c7:00:e9:e6:2f:92:a8:ef:d0:00:13:76:bb:8c:99:
44:5d:20:77:d3:be:f7:5d:2f:05:fa:57:cb:1d:68:4f:65:75:
ac:fd:cc:46:d4:5c:4f:1c:5f:40:7a:2a:55:41:b6:f0:d2:56:
f5:98:07:7f:28:2d:b4:00:87:c9:70:dc:79:29:0f:79:f8:34:
bf:80:f8:27:09:b9:d9:80:18:80:31:52:52:42:ad:78:90:9c:
cc:16:ef:7c:3a:dc:ea:df:e9:64:c8:7c:27:6f:b9:12:db:1a:
be:3a:9b:e6:2d:c3:b7:df:16:78:ce:8e:14:71:85:f9:0d:17:
00:9f:a5:16:f0:f2:f5:a0:59:85:aa:fa:03:6b:d4:ae:a4:df:
0f:1d:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:40 2026 by rpki-client