
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
File: ygBGolNBzREDtgzOC5nqN1S6XEE.mft (raw, json)
Hash identifier: F4LlrRc2rYPO2qp1erPEjy8clZGgQSi4R6C2KoF1hnI=
Subject key identifier: 50:85:59:18:47:A3:16:2A:C4:2F:E4:C3:2B:A9:57:C9:C8:B6:0A:8E
Authority key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Certificate issuer: /CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Certificate serial: 01A08AFA86C5121E5AF7004FFCC61889DF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
Manifest number: 0741
Signing time: Thu 10 Sep 2026 11:01:09 +0000
Manifest this update: Thu 10 Sep 2026 11:01:09 +0000
Manifest next update: Fri 11 Sep 2026 11:01:09 +0000
Files and hashes: 1: stNqzIw6qQRyW22hrj_jya1vgPM.roa (hash: R7iZW3oZGdaZLmvsasGhYvRkXeTvpYwH54Of8otwpTw=)
2: ygBGolNBzREDtgzOC5nqN1S6XEE.crl (hash: QjDAZwGfwZSvF0T039y7MwSthsDqV8JhiJgIW7YzhE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:86:c5:12:1e:5a:f7:00:4f:fc:c6:18:89:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Validity
Not Before: Sep 10 11:01:09 2026 GMT
Not After : Sep 11 11:01:09 2026 GMT
Subject: CN=5085591847a3162ac42fe4c32ba957c9c8b60a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:cd:fe:d3:24:b3:6d:26:b5:42:fa:dd:31:
02:b9:a0:1c:69:fe:2e:69:bc:54:a1:1c:11:2e:94:
fb:e0:6d:68:d4:60:e4:9d:96:3c:0e:83:16:8d:86:
31:4d:b0:9a:5c:ce:fa:d8:bd:3d:f9:c9:3d:07:5f:
56:d1:8b:fb:3e:ed:61:e7:3a:c5:c0:f6:4b:23:d7:
94:9e:fa:6f:12:fd:2d:cf:35:4b:eb:1b:47:de:f2:
34:ab:25:55:e9:df:04:ca:d1:d7:ae:5c:e7:a9:3f:
9c:cb:21:54:44:de:f2:70:18:fc:ed:9c:78:7c:22:
fa:5a:fd:b4:21:c2:6c:4f:39:c4:04:55:63:40:ef:
b9:81:9d:bd:ba:f2:9e:76:20:61:af:a3:f2:d9:fe:
36:9b:cf:61:d6:2c:7c:a6:a2:ed:34:62:e0:77:d9:
e2:52:ae:5a:5a:7c:48:22:a4:2b:4f:2e:71:0c:d1:
8e:3b:32:f8:12:b2:46:b3:0a:ae:60:47:a1:23:a3:
30:61:cd:8f:9f:65:72:c6:00:3c:1f:e2:bc:20:a4:
be:94:0c:55:34:b6:65:0d:ab:c8:f9:c3:7d:63:fc:
a7:e8:3b:0d:62:7e:9a:35:d8:ad:31:67:fd:3a:86:
85:95:dd:2c:a3:dc:74:fe:84:e7:88:4c:82:e2:27:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:85:59:18:47:A3:16:2A:C4:2F:E4:C3:2B:A9:57:C9:C8:B6:0A:8E
X509v3 Authority Key Identifier:
keyid:CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a3:25:f6:9a:97:6d:c9:22:53:95:ab:67:20:ac:7d:3e:ca:
c8:5a:26:43:44:80:94:da:98:af:fd:38:51:06:81:b2:41:a1:
90:c4:dc:e3:47:07:f0:39:38:9c:24:90:f1:cf:e3:7e:74:ae:
64:33:e4:80:69:ca:08:21:c9:cf:83:65:6b:13:25:12:84:64:
ef:1e:60:83:f2:a7:10:a0:fa:08:a3:c7:f6:5e:f6:d1:50:52:
4c:70:8d:bb:8f:ae:db:25:37:63:41:76:ee:63:50:da:91:d3:
d8:60:36:77:06:d9:bd:6f:ff:27:5d:0f:30:68:fd:de:f6:ce:
7a:87:45:ce:f5:87:57:f2:29:2c:ce:35:c7:d5:71:d2:40:8d:
fe:a6:01:47:a1:a5:e6:d0:a4:d3:44:f3:c1:25:86:68:a4:e7:
10:c2:7c:09:66:b8:84:e1:08:a9:9c:d4:c1:e3:60:64:06:a0:
79:85:a5:fd:5a:0e:c9:cb:f1:6e:b8:9b:71:50:d4:f0:6b:3f:
32:fa:66:2b:4a:6e:98:a5:a5:f7:ae:e9:45:e5:f1:70:b9:5a:
b9:df:a4:16:6c:a4:cf:35:15:1b:5a:d7:75:78:97:83:1a:62:
18:e3:0e:05:97:cc:80:ae:1a:04:04:66:b3:dd:d7:63:56:cf:
b3:36:5b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:25:48 2026 by rpki-client