Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: 1Qw6pjh14H8prO2ymTSfOc2bPa1ug/gaQU9lHL2GF9M=
Subject key identifier: F0:35:1F:EE:F9:1C:12:9B:F9:63:8A:8A:12:ED:CA:56:EA:90:CA:47
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 01A12A9F574A3BF7AD1433520D541AE9C94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 1A98
Signing time: Sun 11 Oct 2026 11:00:47 +0000
Manifest this update: Sun 11 Oct 2026 11:00:47 +0000
Manifest next update: Mon 12 Oct 2026 11:00:47 +0000
Files and hashes: 1: DTnex-UlwV0zKy6UASXDNP6H64M.roa (hash: OS8JKI81uoNsyPVMBJm7f0QmGbnDk6BbHN/7FVmcoHg=)
2: q0Xg32RLpaZ2ftlLqcFE1HiFMHM.roa (hash: veVsiD7OXuZtD0ZpV5SiKVt3Azw07hmLxG5Vpo3m3dM=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: hTRRWcsrxa9tj06hb96Y4e7evibHTyAabczO23rsbl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:57:4a:3b:f7:ad:14:33:52:0d:54:1a:e9:c9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Oct 11 11:00:47 2026 GMT
Not After : Oct 12 11:00:47 2026 GMT
Subject: CN=f0351feef91c129bf9638a8a12edca56ea90ca47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:78:57:e5:cf:23:00:f9:83:30:1a:68:a0:41:
d8:11:4a:ae:88:19:ed:9a:4e:34:bf:13:63:3f:8b:
f2:0a:28:03:bb:11:1a:ef:d6:81:47:49:75:6c:b8:
b6:2d:11:1d:3b:79:35:41:dd:0a:bd:4b:f3:30:cf:
64:c4:ce:34:38:98:6e:ed:cc:cb:19:9d:ce:d4:d0:
64:85:48:40:40:76:e2:14:5d:aa:a6:de:ef:6d:28:
71:37:b2:2c:06:37:ef:59:f0:ee:d8:27:80:39:7d:
66:29:65:0e:75:03:d6:af:2a:b1:52:74:a9:a7:40:
fd:34:c8:04:13:bb:39:72:1a:2c:c0:ae:97:8c:e2:
c8:34:0c:6f:3c:88:49:e0:e8:23:73:78:0b:6f:f8:
36:bb:aa:07:fd:d9:b7:1a:54:24:a9:78:d9:bc:cf:
88:4c:d1:7d:09:ad:fd:76:c0:5d:cf:77:f9:54:bd:
e7:7b:ae:8f:52:23:84:d0:de:a9:4c:32:08:1a:4b:
86:02:6d:1b:ee:16:f8:2a:27:0e:4f:a7:36:a8:bb:
a0:d9:ac:ca:26:5e:8e:09:c0:5a:47:c5:11:bf:5a:
e0:05:d3:1f:96:65:da:68:93:30:81:43:a6:e4:98:
e8:6a:18:bc:56:9a:1d:48:85:86:ca:76:fd:4d:d3:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:35:1F:EE:F9:1C:12:9B:F9:63:8A:8A:12:ED:CA:56:EA:90:CA:47
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ad:05:d0:68:52:64:07:c4:a8:0e:7e:36:dd:89:5a:9a:ef:
96:76:cf:d4:e4:34:f9:d0:56:bd:93:d3:20:08:d7:37:d6:0e:
15:7d:3c:69:47:b5:48:3e:2b:d7:bd:27:ab:62:3d:93:f7:14:
09:3e:5c:ed:f5:8d:dd:5c:87:2d:92:b2:41:07:8b:4d:bd:d6:
96:cb:a3:4f:67:fe:12:47:2a:f4:d4:33:54:a2:1c:d6:a0:c6:
cc:9b:04:a3:7e:7a:61:00:d7:73:a5:04:0e:98:17:30:b8:03:
1a:f5:84:03:d0:db:5b:41:59:fd:d9:5b:e0:b5:23:89:7e:3e:
e1:40:9f:58:34:f1:cf:e9:43:40:2f:34:42:ab:2e:1a:39:49:
04:06:bd:2d:97:24:13:9f:c2:bc:4a:b1:6d:b9:21:0a:0c:f5:
8a:18:ab:d3:d3:77:de:4a:14:67:94:54:33:0f:2d:cf:d1:b8:
0a:8b:8f:c3:03:50:d1:8f:1f:d2:76:d3:f6:46:05:b1:3b:ca:
58:1d:23:84:eb:91:54:48:de:a9:d4:66:56:3f:5e:5e:47:88:
6e:43:1d:69:6c:43:5d:67:ee:c0:2e:38:38:25:21:84:7f:d7:
16:05:d1:bf:53:d5:d4:97:a7:f7:dd:36:78:3b:87:76:6e:79:
e2:ab:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:44:26 2026 by rpki-client