Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: Y+YPssup0SFqXp8UcntEEKX5JUXvQYIBsA1/vBgVk8Q=
Subject key identifier: 00:6F:52:EC:08:60:C7:4F:D1:63:A3:B2:D6:A5:B5:2B:9D:C1:97:B6
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 01A0201EA699351A62715364AA1102380E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 1A0E
Signing time: Thu 20 Aug 2026 17:01:14 +0000
Manifest this update: Thu 20 Aug 2026 17:01:14 +0000
Manifest next update: Fri 21 Aug 2026 17:01:14 +0000
Files and hashes: 1: DTnex-UlwV0zKy6UASXDNP6H64M.roa (hash: OS8JKI81uoNsyPVMBJm7f0QmGbnDk6BbHN/7FVmcoHg=)
2: q0Xg32RLpaZ2ftlLqcFE1HiFMHM.roa (hash: veVsiD7OXuZtD0ZpV5SiKVt3Azw07hmLxG5Vpo3m3dM=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: jsGUv86W0BvXjUdaGa/3hVkVYFJywzZuzPw6e263sj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1e:a6:99:35:1a:62:71:53:64:aa:11:02:38:0e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Aug 20 17:01:14 2026 GMT
Not After : Aug 21 17:01:14 2026 GMT
Subject: CN=006f52ec0860c74fd163a3b2d6a5b52b9dc197b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:d1:f5:58:dc:69:88:c3:5e:ce:28:8b:8f:
84:48:01:44:10:f7:07:c7:be:4c:0a:d3:10:68:fd:
fa:51:11:6a:ee:41:68:1b:ba:ec:4d:20:f9:ce:0c:
54:bf:8d:54:5e:c8:88:5d:df:98:3c:93:ce:c3:3c:
c4:99:48:4e:2f:a2:73:ad:cf:77:f0:95:a1:0d:6d:
14:8e:5d:08:da:6a:83:3b:b4:12:14:f5:11:3b:4d:
8b:a2:2c:f8:4b:45:ce:8b:05:c2:e4:6e:70:aa:93:
49:30:fe:ce:ef:44:ed:81:33:21:24:43:7c:e5:10:
1c:ae:0f:41:12:81:40:94:a1:52:e6:07:09:f4:cd:
d4:44:41:72:a5:cb:15:52:b8:58:6a:dd:e3:35:0e:
8e:37:4c:e5:9c:b4:13:9c:ac:d3:83:bb:40:6d:10:
35:47:79:c8:e6:48:2b:44:56:c1:1d:02:a1:4d:f2:
22:81:7a:34:62:47:e4:fc:57:11:e0:b0:46:40:3e:
87:4c:fd:61:17:29:ea:ae:51:90:d8:fc:79:33:c7:
da:28:80:78:7d:d4:0b:33:79:d3:ac:16:ec:58:d2:
33:19:6c:32:87:17:2e:23:44:66:dc:f7:c3:5d:85:
b1:99:0f:30:7d:5a:67:35:09:59:66:fb:ee:8c:ed:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6F:52:EC:08:60:C7:4F:D1:63:A3:B2:D6:A5:B5:2B:9D:C1:97:B6
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1b:0c:98:c7:37:66:f6:8d:7b:96:4d:d4:34:29:a9:95:ea:
dc:15:13:e1:1a:35:ea:df:c7:fb:d8:ea:73:1f:e7:be:bb:c6:
a3:d4:2b:72:ac:7a:2f:d0:df:1d:50:48:98:bf:c6:ba:00:d4:
b6:ff:f4:94:33:ff:1d:23:66:52:e0:08:3c:c1:94:3d:5b:64:
05:1a:e1:49:34:29:43:1c:af:3f:9e:b6:f3:a8:66:a5:cd:f7:
03:a1:a6:7f:b7:b2:6d:64:41:d5:75:11:d1:6f:6e:52:1f:d1:
b9:4d:87:6f:bd:3a:37:f5:54:ef:fd:8a:9c:6f:fd:c7:42:9b:
9b:5a:60:f8:14:36:bf:13:3a:01:70:ae:95:35:99:c5:6e:11:
e2:fe:35:4c:2e:86:11:00:48:d5:2a:f7:b7:8c:16:a9:d6:6e:
3b:64:1a:17:35:15:1d:3f:88:7f:00:c9:20:52:71:9b:2f:78:
26:5e:4c:4e:87:a3:21:1a:74:2c:42:db:cf:4a:99:f0:e8:8b:
69:3c:f4:e8:92:e5:2f:de:68:9d:22:b5:b4:dc:02:a2:df:4b:
9a:4c:9c:c4:78:b2:41:63:b3:6e:d3:d1:59:d1:f1:94:2b:4e:
d4:9b:ae:ea:c9:5a:dd:a1:4b:2a:73:17:35:5b:a7:1e:46:d9:
00:b9:6d:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgHqaZNRpicVNkqhECOA5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNTIyMGU1M2U0ZjgxY2EyNThjY2ZlYTE4NzI4MDI4MGY1
ZjYyMWEwHhcNMjYwODIwMTcwMTE0WhcNMjYwODIxMTcwMTE0WjAzMTEwLwYDVQQD
EygwMDZmNTJlYzA4NjBjNzRmZDE2M2EzYjJkNmE1YjUyYjlkYzE5N2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXbR9VjcaYjDXs4oi4+ESAFEEPcH
x75MCtMQaP36URFq7kFoG7rsTSD5zgxUv41UXsiIXd+YPJPOwzzEmUhOL6Jzrc93
8JWhDW0Ujl0I2mqDO7QSFPURO02Loiz4S0XOiwXC5G5wqpNJMP7O70TtgTMhJEN8
5RAcrg9BEoFAlKFS5gcJ9M3UREFypcsVUrhYat3jNQ6ON0zlnLQTnKzTg7tAbRA1
R3nI5kgrRFbBHQKhTfIigXo0Ykfk/FcR4LBGQD6HTP1hFynqrlGQ2Px5M8faKIB4
fdQLM3nTrBbsWNIzGWwyhxcuI0Rm3PfDXYWxmQ8wfVpnNQlZZvvujO37UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABvUuwIYMdP0WOjstaltSudwZe2MB8GA1UdIwQY
MBaAFMpSIOU+T4HKJYzP6hhygCgPX2IaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODkt
ZjIzYzVhNTMxODIzLzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODktZjIzYzVhNTMxODIz
LzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhsMmMc3
ZvaNe5ZN1DQpqZXq3BUT4Ro16t/H+9jqcx/nvrvGo9Qrcqx6L9DfHVBImL/GugDU
tv/0lDP/HSNmUuAIPMGUPVtkBRrhSTQpQxyvP56286hmpc33A6Gmf7eybWRB1XUR
0W9uUh/RuU2Hb706N/VU7/2KnG/9x0Kbm1pg+BQ2vxM6AXCulTWZxW4R4v41TC6G
EQBI1Sr3t4wWqdZuO2QaFzUVHT+IfwDJIFJxmy94Jl5MToejIRp0LELbz0qZ8OiL
aTz06JLlL95onSK1tNwCot9LmkycxHiyQWOzbtPRWdHxlCtO1Juu6sla3aFLKnMX
NVunHkbZALltLA==
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:34:43 2026 by rpki-client