Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: 29gYKsgE2kzBT0BcBauULiikxjjYZQIu6bYP+tCW+O8=
Subject key identifier: 6A:06:0B:54:C8:07:0A:6C:08:4D:9D:8A:6F:89:E2:57:EB:45:67:2E
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 01A128B14B01ED6BE9ED59AEC493099F11DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 1A97
Signing time: Sun 11 Oct 2026 02:01:09 +0000
Manifest this update: Sun 11 Oct 2026 02:01:09 +0000
Manifest next update: Mon 12 Oct 2026 02:01:09 +0000
Files and hashes: 1: DTnex-UlwV0zKy6UASXDNP6H64M.roa (hash: OS8JKI81uoNsyPVMBJm7f0QmGbnDk6BbHN/7FVmcoHg=)
2: q0Xg32RLpaZ2ftlLqcFE1HiFMHM.roa (hash: veVsiD7OXuZtD0ZpV5SiKVt3Azw07hmLxG5Vpo3m3dM=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: c1PEDsoa+AXo/ZqRz4H/2lvDurBFfQs+i7dsFp+PSj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b1:4b:01:ed:6b:e9:ed:59:ae:c4:93:09:9f:11:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Oct 11 02:01:09 2026 GMT
Not After : Oct 12 02:01:09 2026 GMT
Subject: CN=6a060b54c8070a6c084d9d8a6f89e257eb45672e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:40:f6:78:cf:aa:96:89:10:22:70:1c:3c:
ff:f0:b0:32:27:08:e0:a1:d0:9d:cc:22:2b:31:a2:
ba:b1:46:c7:29:66:15:e4:4f:5c:a3:36:52:6d:18:
07:e7:a5:bb:0b:1a:4e:df:e1:53:fc:dc:01:df:1b:
de:b0:ae:69:7e:01:4d:a0:7d:a3:e6:d1:d4:d9:e4:
76:95:1c:e5:ac:c9:10:22:f2:c6:3a:f6:d0:98:5e:
a7:77:5b:2e:d2:33:7f:d6:ee:75:20:dc:d9:59:88:
51:a6:80:b1:08:87:30:79:11:67:33:cc:b1:5c:10:
1f:68:da:23:b9:9a:8e:b7:c4:cc:35:86:a6:b1:e0:
e9:5b:ee:29:f3:34:8f:58:fe:99:b0:8a:2f:e9:98:
ee:71:b2:f9:9c:6e:98:e5:80:5a:42:55:16:5f:6b:
2a:d5:bf:86:17:aa:25:3e:29:71:1f:c4:4f:b3:49:
51:9b:44:a7:07:ae:b8:43:2a:71:c3:d9:b7:bf:ba:
62:e0:70:17:71:b4:41:fb:8e:08:cd:93:bd:81:e3:
ca:bc:b1:b0:79:db:72:41:44:f2:74:fc:94:91:40:
f6:d2:ae:34:c5:2b:93:4f:f2:20:65:4d:20:7e:7f:
96:f5:05:27:7f:9c:05:87:5f:43:7c:16:3f:53:46:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:06:0B:54:C8:07:0A:6C:08:4D:9D:8A:6F:89:E2:57:EB:45:67:2E
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ed:fc:25:95:52:2f:1e:7f:d7:4b:27:cf:f9:14:05:31:8a:
e4:11:bd:7a:c1:1d:ac:b6:bc:81:2b:fe:73:30:ce:b7:3b:13:
00:7c:92:c4:ac:87:8a:2a:30:c5:9a:dc:9f:41:cd:53:16:c3:
9f:95:ba:7f:c1:c0:aa:04:6f:dc:40:0a:b2:7f:c9:a7:2b:73:
b8:a4:f6:d6:23:d9:84:10:52:d5:38:a8:bb:52:c7:d6:ef:f5:
e8:8d:95:e2:da:a4:86:8a:48:6a:9d:90:e5:67:83:8a:f6:68:
5d:4b:1b:89:f6:90:dd:21:43:f9:25:6b:40:15:ad:f9:97:f7:
34:6a:a0:48:39:2b:d9:2c:8c:e3:52:3f:fc:49:85:d0:cc:93:
72:35:df:0d:63:89:c2:c0:fc:4c:27:78:64:c5:af:4e:2c:ab:
2f:ae:77:79:00:a0:83:ea:6d:f6:f5:42:71:8c:c4:74:10:c3:
b4:64:9f:c9:c8:e4:76:dc:27:72:29:3d:f5:be:d9:e9:0b:71:
4c:ee:70:6e:e3:dc:24:ca:0a:64:27:97:11:9a:76:2b:a5:16:
92:ea:ef:ef:37:d2:d9:f6:45:e3:77:d8:63:41:3b:7a:35:2d:
71:b7:0d:b7:b1:01:85:6e:f4:89:72:17:50:9b:2b:d2:51:82:
9c:55:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:15:51 2026 by rpki-client