Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
File: yRggtQAH5BxT3WAps3lU01cvTCk.mft (raw, json)
Hash identifier: xCXzomg0+cnEriijrnpuXPTA65Xzo2eYt9vYM56u66s=
Subject key identifier: 21:87:7F:47:F8:B2:04:47:BE:EF:A6:59:41:20:68:91:5A:61:A5:26
Authority key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
Certificate issuer: /CN=c91820b50007e41c53dd6029b37954d3572f4c29
Certificate serial: 019DCFE300B9A7F0F00C8C23E614A25F17FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
Manifest number: 1422
Signing time: Mon 27 Apr 2026 17:00:53 +0000
Manifest this update: Mon 27 Apr 2026 17:00:53 +0000
Manifest next update: Tue 28 Apr 2026 17:00:53 +0000
Files and hashes: 1: hOC_g0aFFJDt5mJXYMKufHdXY_Y.roa (hash: /1Qaua2qcuy21kP73vJzs1KKO/Ht1pr5AntmjkyRFoc=)
2: yRggtQAH5BxT3WAps3lU01cvTCk.crl (hash: WVbbR/RmRhkC6Jp/wsWvZ3PiXID9WC9p96xPV8KZINU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:00:b9:a7:f0:f0:0c:8c:23:e6:14:a2:5f:17:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91820b50007e41c53dd6029b37954d3572f4c29
Validity
Not Before: Apr 27 17:00:53 2026 GMT
Not After : Apr 28 17:00:53 2026 GMT
Subject: CN=21877f47f8b20447beefa659412068915a61a526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:dd:b7:44:ca:1d:09:01:75:2a:d2:e3:fe:
21:54:c5:1a:45:28:38:a3:5e:d1:1f:70:0c:17:85:
31:5f:b3:ec:d8:a5:ff:60:71:37:65:4a:e9:8b:74:
77:e3:8f:ab:11:3f:59:37:45:e0:97:ed:e9:c3:81:
2c:86:2c:26:ca:3b:48:21:e3:61:87:bd:7d:83:4b:
3b:c5:ee:87:dc:07:9b:1f:34:2f:f7:59:bd:62:2a:
8f:89:64:b6:20:ce:fc:87:86:9e:cd:dc:8e:16:bd:
81:14:d7:67:8d:40:6b:5f:cb:f4:25:cb:05:61:1b:
91:9a:ee:4d:0a:fe:89:4e:f5:80:7f:79:f1:52:80:
19:b9:ab:77:c5:d2:af:dc:aa:95:f4:3a:24:b1:ec:
97:e7:18:44:65:e7:db:02:30:26:a8:a3:96:6d:48:
7e:45:a8:3d:b5:4d:0f:b5:93:24:a9:9c:6b:83:9e:
8f:40:7d:97:a4:94:8a:70:76:86:c4:cc:c6:51:42:
b4:d2:62:22:b9:a0:be:8c:82:b2:65:3d:f0:6c:0f:
f6:c4:cb:a1:3b:79:d9:ab:16:70:52:d0:7a:9a:ff:
13:bc:c8:b5:95:80:34:f4:89:0f:46:36:30:91:b5:
86:65:9f:24:d8:21:63:e1:b6:8f:a6:47:e6:52:ac:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:87:7F:47:F8:B2:04:47:BE:EF:A6:59:41:20:68:91:5A:61:A5:26
X509v3 Authority Key Identifier:
keyid:C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e1:ad:61:d3:fd:b3:a1:14:d1:6c:d5:99:92:9d:83:09:13:
07:88:0c:c3:24:d6:1a:67:b2:57:e6:9e:37:98:07:ba:c7:59:
41:92:15:ea:fa:93:af:71:0c:87:21:bd:49:3a:de:bc:54:ec:
08:45:f5:91:72:65:bc:23:14:43:1d:69:60:e0:f2:e0:4c:c8:
9b:5d:c7:0c:71:ef:da:72:a9:04:75:24:38:53:58:58:59:66:
36:71:bf:0c:92:fc:02:f4:10:ac:a7:47:82:4a:6d:10:58:7d:
62:93:f5:a5:4a:3b:a8:11:c7:61:e2:a8:09:00:22:57:0d:b6:
a7:4f:9d:e8:26:53:f6:fe:5d:fb:63:4b:e0:f6:39:c3:a8:30:
26:26:ca:41:bb:c5:0e:35:79:f5:65:af:2b:9d:7d:d3:5b:ad:
b6:cb:1d:ef:b6:93:58:12:fe:f0:4e:88:cc:ac:25:b8:ba:5b:
95:fb:ad:ee:9e:4f:a9:cc:b4:1c:31:13:c5:cb:43:45:36:5a:
04:17:5f:c5:68:ef:38:47:65:ff:11:ed:1f:d2:7c:c5:83:50:
35:5b:5b:0f:44:6b:68:31:8c:84:ab:8a:59:29:24:d3:2e:d0:
7b:88:5b:0a:b5:56:e6:bb:52:64:c9:62:2b:0e:19:31:6a:f5:
52:7e:b5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:16:22 2026 by rpki-client