Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
File: ygBGolNBzREDtgzOC5nqN1S6XEE.mft (raw, json)
Hash identifier: ZXNVj7gw3dbeh8pkIjagzUD2vMqxZXbchLRS9VDbAaI=
Subject key identifier: 4A:E1:6D:31:05:BE:06:68:C6:14:E4:15:C1:86:37:EE:B6:B9:A5:64
Authority key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Certificate issuer: /CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Certificate serial: 019DCC06A74218B9D2E3381741C0BBB6B4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
Manifest number: 05D5
Signing time: Sun 26 Apr 2026 23:01:21 +0000
Manifest this update: Sun 26 Apr 2026 23:01:21 +0000
Manifest next update: Mon 27 Apr 2026 23:01:21 +0000
Files and hashes: 1: stNqzIw6qQRyW22hrj_jya1vgPM.roa (hash: R7iZW3oZGdaZLmvsasGhYvRkXeTvpYwH54Of8otwpTw=)
2: ygBGolNBzREDtgzOC5nqN1S6XEE.crl (hash: dvAHxquMRfQOYioWI6sQ0vNt1NEUNxHOgF53x8qxfTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:06:a7:42:18:b9:d2:e3:38:17:41:c0:bb:b6:b4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Validity
Not Before: Apr 26 23:01:21 2026 GMT
Not After : Apr 27 23:01:21 2026 GMT
Subject: CN=4ae16d3105be0668c614e415c18637eeb6b9a564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:c8:f2:55:1e:69:e2:b8:90:97:17:93:97:
6c:27:71:c8:a2:6e:4b:5e:aa:98:91:19:cb:ab:b2:
de:3a:d6:2b:a4:2e:28:35:33:df:e5:dc:8f:d3:d7:
bd:c4:36:ba:b2:19:70:4c:53:f1:0c:c2:ad:11:05:
38:5b:ff:6e:fa:e6:39:4d:f4:b1:79:38:70:61:d7:
94:61:37:cf:61:8f:52:50:74:79:96:74:c7:58:dc:
ea:cc:83:d6:3e:17:54:6c:63:ca:d8:eb:1b:3b:35:
fe:a2:01:9a:55:6b:55:b9:ce:fd:d5:0d:83:38:5e:
59:55:63:bf:08:f3:21:29:3d:ff:ae:24:fc:8f:46:
a0:66:fe:14:bf:02:4f:86:b3:3c:00:2a:50:ae:7c:
72:5e:ad:35:19:8a:86:a4:c6:94:9c:92:cb:a4:9c:
38:7f:f0:3c:e5:06:7b:19:fa:b4:16:7c:77:65:ce:
39:1a:eb:72:63:67:e3:94:2c:80:42:bc:5e:bc:b3:
37:05:23:d1:1d:e9:27:e0:00:d6:ff:36:84:a6:1a:
82:5f:ad:6d:12:cd:73:48:89:19:f9:d3:1d:bc:6e:
cb:0e:d9:64:4c:f3:0c:03:d0:e4:30:fb:3a:b0:c2:
19:4f:1b:62:8a:05:bb:88:bc:10:80:de:51:ef:a7:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E1:6D:31:05:BE:06:68:C6:14:E4:15:C1:86:37:EE:B6:B9:A5:64
X509v3 Authority Key Identifier:
keyid:CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:74:3e:78:81:a5:0f:7f:cb:1f:59:99:4a:5a:1b:b5:ad:ad:
69:6d:81:cc:fe:f8:41:e6:a2:fc:fd:93:c7:95:55:2a:27:45:
45:75:8b:6f:ed:8d:17:f9:44:fa:42:9e:7c:4e:24:6a:15:35:
22:a5:0b:7c:7e:3e:d7:b8:40:fe:69:bb:b7:40:78:b3:1c:14:
09:e8:f5:24:a0:84:3b:dc:e5:63:53:a3:4c:4d:d8:36:d6:2e:
14:76:a2:d4:a6:98:07:9f:de:48:3f:9a:01:a2:6e:85:b7:44:
cd:28:f6:df:36:f2:48:4d:1e:19:48:ca:ea:34:06:65:a5:4c:
7a:7f:38:d9:bf:69:ae:46:e8:35:07:68:7e:18:de:4a:86:20:
f4:40:ea:fc:9e:0f:39:0e:5f:ea:c7:07:ad:8b:7e:10:a1:0f:
1c:7d:d8:38:04:64:4f:1c:cb:ff:10:86:17:13:5b:15:6d:58:
7c:ce:1e:a8:5f:93:12:0c:e8:49:0d:f7:4d:17:4d:ad:20:4d:
4b:2d:15:20:a8:87:f1:0e:25:91:28:2c:a9:49:b1:8a:15:90:
a8:5f:8b:01:d2:a6:6b:31:88:42:84:36:19:5d:c3:ce:1a:f6:
94:e2:5b:1e:ed:45:5b:dc:fe:d6:d5:03:d0:c3:82:21:a9:01:
a0:f7:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:19:42 2026 by rpki-client