Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: j/CTV+q3VsnAKpMPQDVcdzEygWer3q2FXSfnAwSPoMM=
Subject key identifier: E1:06:5B:F3:9E:A6:79:10:6E:BD:66:47:FC:05:23:4C:6E:DF:7E:80
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 01A124D484282C3D7C703FC38EC94DF4B6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 1A95
Signing time: Sat 10 Oct 2026 08:01:09 +0000
Manifest this update: Sat 10 Oct 2026 08:01:09 +0000
Manifest next update: Sun 11 Oct 2026 08:01:09 +0000
Files and hashes: 1: DTnex-UlwV0zKy6UASXDNP6H64M.roa (hash: OS8JKI81uoNsyPVMBJm7f0QmGbnDk6BbHN/7FVmcoHg=)
2: q0Xg32RLpaZ2ftlLqcFE1HiFMHM.roa (hash: veVsiD7OXuZtD0ZpV5SiKVt3Azw07hmLxG5Vpo3m3dM=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: wWvmUj3lcRtG8Yf1MerdEa7qYqYdU6EEbIxr5bL+Uyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:84:28:2c:3d:7c:70:3f:c3:8e:c9:4d:f4:b6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Oct 10 08:01:09 2026 GMT
Not After : Oct 11 08:01:09 2026 GMT
Subject: CN=e1065bf39ea679106ebd6647fc05234c6edf7e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:40:b0:85:21:5f:ae:d5:06:a5:3c:8f:41:
58:c8:ca:8f:55:75:cd:41:54:81:9b:8a:cf:31:ed:
60:4b:12:38:d9:73:d6:05:cf:fa:8f:06:ed:c8:8f:
12:b9:1c:14:5a:73:95:98:70:f4:e3:cc:05:fa:bb:
13:39:02:5f:67:e2:fa:1a:c0:85:83:6e:07:95:51:
79:da:60:f9:be:cd:ea:5a:53:87:85:78:e8:5a:2e:
cb:5b:f3:64:e9:2d:f3:7e:6b:3e:29:4a:5d:1c:9d:
20:bb:b8:3c:0c:4e:df:5e:83:a3:47:07:8d:04:43:
eb:e2:48:16:93:7b:4b:49:78:73:ee:52:4b:38:06:
f8:90:6a:31:57:35:4b:97:ff:72:94:3e:1b:04:6e:
81:da:88:b2:d2:dd:dc:5c:e9:bf:c1:8d:9c:8f:f2:
3c:7b:e7:15:b0:0a:1f:fe:84:09:c4:14:6c:a4:76:
d4:26:9b:bc:19:23:c9:b7:a6:d9:9d:e5:6a:4f:27:
50:84:48:7f:b7:d8:5f:3e:6b:08:13:8e:41:d4:8a:
7d:84:f8:ba:ca:ce:8e:c3:02:46:b7:56:d1:2b:fe:
2b:a0:92:5c:a6:00:1a:74:d1:eb:58:0a:85:cf:4f:
d9:e8:c5:87:5c:be:57:b0:67:a5:7c:2e:09:85:f5:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:06:5B:F3:9E:A6:79:10:6E:BD:66:47:FC:05:23:4C:6E:DF:7E:80
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:54:67:3b:33:77:2c:78:5c:c8:22:66:2f:ce:29:49:eb:8b:
20:b1:ed:e5:c5:ff:38:8d:f3:62:46:a2:1e:98:da:e0:33:6c:
06:bf:b5:5f:b7:b3:50:4d:6c:9e:56:97:e4:4a:ac:bf:d9:4a:
77:03:f9:43:03:85:3f:58:6e:8d:7f:df:6d:b7:ce:ba:44:cc:
4d:26:07:05:35:aa:12:01:6e:6c:87:84:ed:77:4f:92:d2:d1:
58:c3:35:a6:61:40:24:e1:92:8f:cd:77:ce:00:bf:dc:5b:07:
0b:73:9d:fb:36:f8:7c:e2:06:a3:da:1e:7e:05:1f:95:95:9c:
73:15:92:37:67:b9:88:1e:6c:d8:59:bb:5d:f5:93:58:4d:12:
67:bb:90:f9:a7:15:4c:05:cb:e6:a6:ad:ea:9d:7c:29:7f:96:
6c:90:43:4e:9b:74:33:15:bd:84:7b:b1:10:f6:91:e6:0d:4c:
cb:0e:ab:b0:02:11:32:8a:88:31:5c:5a:df:8f:61:df:b9:55:
61:66:46:37:8a:a9:5f:cb:31:92:e4:6f:f6:bc:f2:34:39:02:
f0:3d:a1:8c:4e:e3:fb:44:37:89:1c:96:a3:05:7d:44:6b:f3:
af:49:66:13:8c:80:9d:06:13:91:72:71:ec:38:d7:6f:04:56:
c3:a3:ee:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEk1IQoLD18cD/DjslN9LbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNTIyMGU1M2U0ZjgxY2EyNThjY2ZlYTE4NzI4MDI4MGY1
ZjYyMWEwHhcNMjYxMDEwMDgwMTA5WhcNMjYxMDExMDgwMTA5WjAzMTEwLwYDVQQD
EyhlMTA2NWJmMzllYTY3OTEwNmViZDY2NDdmYzA1MjM0YzZlZGY3ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+lAsIUhX67VBqU8j0FYyMqPVXXN
QVSBm4rPMe1gSxI42XPWBc/6jwbtyI8SuRwUWnOVmHD048wF+rsTOQJfZ+L6GsCF
g24HlVF52mD5vs3qWlOHhXjoWi7LW/Nk6S3zfms+KUpdHJ0gu7g8DE7fXoOjRweN
BEPr4kgWk3tLSXhz7lJLOAb4kGoxVzVLl/9ylD4bBG6B2oiy0t3cXOm/wY2cj/I8
e+cVsAof/oQJxBRspHbUJpu8GSPJt6bZneVqTydQhEh/t9hfPmsIE45B1Ip9hPi6
ys6OwwJGt1bRK/4roJJcpgAadNHrWAqFz0/Z6MWHXL5XsGelfC4JhfVqGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEGW/OepnkQbr1mR/wFI0xu336AMB8GA1UdIwQY
MBaAFMpSIOU+T4HKJYzP6hhygCgPX2IaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODkt
ZjIzYzVhNTMxODIzLzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODktZjIzYzVhNTMxODIz
LzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1RnOzN3
LHhcyCJmL84pSeuLILHt5cX/OI3zYkaiHpja4DNsBr+1X7ezUE1snlaX5Eqsv9lK
dwP5QwOFP1hujX/fbbfOukTMTSYHBTWqEgFubIeE7XdPktLRWMM1pmFAJOGSj813
zgC/3FsHC3Od+zb4fOIGo9oefgUflZWccxWSN2e5iB5s2Fm7XfWTWE0SZ7uQ+acV
TAXL5qat6p18KX+WbJBDTpt0MxW9hHuxEPaR5g1Myw6rsAIRMoqIMVxa349h37lV
YWZGN4qpX8sxkuRv9rzyNDkC8D2hjE7j+0Q3iRyWowV9RGvzr0lmE4yAnQYTkXJx
7DjXbwRWw6Pu3g==
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:53:54 2026 by rpki-client