Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: lKuXyFTCngwTGnFb+m2bIpoyWwvo8U6AAVv7RtpMpJc=
Subject key identifier: 79:79:65:27:09:FF:12:70:7B:D6:15:CA:47:1F:AC:4E:8D:74:B9:80
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 019E48E85B11B615B3A91A342BB6374B6EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 191A
Signing time: Thu 21 May 2026 05:00:47 +0000
Manifest this update: Thu 21 May 2026 05:00:47 +0000
Manifest next update: Fri 22 May 2026 05:00:47 +0000
Files and hashes: 1: DTnex-UlwV0zKy6UASXDNP6H64M.roa (hash: OS8JKI81uoNsyPVMBJm7f0QmGbnDk6BbHN/7FVmcoHg=)
2: q0Xg32RLpaZ2ftlLqcFE1HiFMHM.roa (hash: veVsiD7OXuZtD0ZpV5SiKVt3Azw07hmLxG5Vpo3m3dM=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: Q9+qgtupACi1SsMLOUJKLpDcaYloBvFJRJstMs6PhLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:48:e8:5b:11:b6:15:b3:a9:1a:34:2b:b6:37:4b:6e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: May 21 05:00:47 2026 GMT
Not After : May 22 05:00:47 2026 GMT
Subject: CN=7979652709ff12707bd615ca471fac4e8d74b980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:f0:14:7d:7d:44:95:f2:87:62:d4:9d:1f:
d6:8e:d9:6f:19:48:40:6c:7f:08:3e:2c:31:c2:0c:
30:50:ed:cd:99:27:8b:45:d8:b0:34:4c:27:23:70:
18:5f:05:82:12:98:df:f1:8f:a9:67:55:3a:6d:89:
ea:a9:82:74:82:82:e8:4c:8d:69:89:ff:58:56:0c:
ef:39:86:37:64:c4:ac:85:60:d9:00:0c:0c:21:f5:
5b:ef:c8:d2:d8:b7:97:3d:00:dd:87:80:17:61:9a:
d1:c0:63:5f:cd:1e:07:3f:d8:02:fd:72:8e:02:a7:
eb:33:be:ea:5e:7f:35:1c:de:37:53:47:e3:fc:44:
1a:f2:6a:de:fd:2f:ce:27:ab:0a:e0:ee:fe:3c:c4:
a6:e1:03:6d:2c:a4:3d:61:cd:81:24:39:f8:b2:e1:
59:01:8e:17:01:6c:17:2a:4c:f2:77:00:8f:de:c7:
a4:b1:67:ec:8f:41:1b:9b:44:47:87:5c:15:15:3d:
27:01:0d:b0:3b:2f:89:a8:ff:0b:5e:9b:15:29:20:
da:60:69:e0:84:d8:60:33:ef:d4:cc:3a:53:71:e8:
2f:fe:c1:9d:b2:b8:3d:28:8e:9e:96:f8:66:c0:33:
a6:1c:6a:00:eb:83:12:77:d3:86:59:4f:d7:94:67:
56:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:79:65:27:09:FF:12:70:7B:D6:15:CA:47:1F:AC:4E:8D:74:B9:80
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fa:b7:96:88:3f:f0:a1:54:45:78:d3:cd:1f:3d:16:7e:f4:
1f:14:0a:84:e1:a2:13:5e:d9:00:74:41:04:d5:2e:c3:fa:1c:
3b:0c:a4:af:1b:20:23:36:f8:6b:15:ae:06:19:00:12:ba:89:
04:2a:04:35:02:32:86:2f:9b:08:13:c2:f8:24:68:70:06:13:
9c:54:cd:b3:e5:01:65:6d:90:47:a5:d9:f5:bc:7a:87:d6:f2:
cb:d8:f6:f2:35:27:ca:6b:32:b5:41:d7:5a:13:9b:20:12:9e:
4f:db:74:c8:8a:26:08:48:4d:6c:f3:bd:b9:45:1c:5a:50:66:
1b:dc:41:28:15:fe:a7:fd:dd:7f:af:2f:39:8a:80:33:9e:9e:
56:65:06:87:b0:54:0a:d6:cf:56:2f:5d:4a:f1:2c:42:d1:3d:
e0:c2:1e:0d:5d:15:65:7d:d8:ce:0a:52:58:45:21:07:45:8d:
d6:46:ca:68:5f:c7:23:62:3f:d5:88:06:02:51:fb:b6:fc:b5:
cd:c2:04:81:c2:88:2f:dc:09:3b:6a:01:de:ae:c8:07:08:08:
8f:3d:3b:63:43:fd:7e:ec:01:16:e3:09:cc:88:21:e6:2c:65:
ef:c5:92:5e:3b:77:aa:14:b7:59:33:c3:d4:78:03:78:f0:18:
7e:5a:99:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 15:41:04 2026 by rpki-client