Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
File: YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json)
Hash identifier: H1zDBVno8drw9PdEovUMpmeQU0Xyu8HRnxqs0ZLqRPQ=
Subject key identifier: B4:89:B0:0A:6A:04:98:63:77:D8:5C:A2:FB:D2:EA:92:0B:44:F4:F7
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial: 019F13419DA6BFFA7132410527BB0ACE7610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
Manifest number: 0B67
Signing time: Mon 29 Jun 2026 12:01:34 +0000
Manifest this update: Mon 29 Jun 2026 12:01:34 +0000
Manifest next update: Tue 30 Jun 2026 12:01:34 +0000
Files and hashes: 1: T9qIl1S9tQz4tEVjrSKAWFbOqcg.roa (hash: h4jSuRvvCuZIkrJ0uLJKVCyM1giPtJIbarHhGQfdVf0=)
2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: a/ixHt3gRrrtwPGCho9X7608HidgRqaDpnULYCnrEaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:41:9d:a6:bf:fa:71:32:41:05:27:bb:0a:ce:76:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
Validity
Not Before: Jun 29 12:01:34 2026 GMT
Not After : Jun 30 12:01:34 2026 GMT
Subject: CN=b489b00a6a04986377d85ca2fbd2ea920b44f4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:ec:69:8d:54:64:6e:a3:1c:9f:78:c0:df:
29:c8:4b:93:89:d7:27:11:29:db:4a:8c:16:ff:4d:
8e:57:a4:1f:23:ef:93:cd:36:ae:ed:5a:ec:f0:5e:
d4:34:2e:8f:d3:19:66:8b:0b:4d:2a:d8:19:29:33:
71:31:3e:97:9b:04:c2:91:d1:80:30:97:bb:19:67:
e0:35:c7:d0:dc:f0:5c:d9:c5:1d:d7:ee:18:df:90:
f3:ac:75:77:88:ba:a8:b6:7b:73:d1:2b:cb:7b:0f:
56:58:95:18:28:95:f8:47:0d:8d:34:f4:1d:b0:0f:
d3:ef:19:99:0f:de:1b:e7:6a:8f:d0:d0:1e:96:23:
e9:09:cc:cd:03:de:6b:ec:89:a8:d4:78:b6:ad:96:
a2:bb:5c:99:a3:d8:53:39:92:c4:c3:96:d0:ba:11:
01:b5:63:44:c7:fd:4d:16:f8:c0:d9:0d:43:0f:d6:
c1:d4:71:30:9d:4f:71:7f:5d:be:4e:17:32:98:a6:
38:b4:dc:2f:03:15:e0:1f:83:9d:fb:05:a1:f2:0e:
43:c5:48:ab:d2:ba:f7:68:c1:7a:d3:f0:77:7c:a3:
7f:1a:db:dd:1c:74:b6:ff:71:66:19:9b:9b:57:1f:
b0:88:5a:b7:07:39:cb:89:59:76:18:1f:18:d7:d5:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:89:B0:0A:6A:04:98:63:77:D8:5C:A2:FB:D2:EA:92:0B:44:F4:F7
X509v3 Authority Key Identifier:
keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b8:5a:67:58:9a:14:73:58:09:09:ed:e6:20:16:96:c6:ba:
69:04:b8:79:89:10:26:a8:af:7a:7a:05:92:c4:4f:c0:61:96:
0f:22:6d:2f:07:06:85:ef:cc:d9:c6:a8:9d:22:32:11:95:80:
da:90:a1:c4:f9:1e:2b:77:50:f6:a9:81:c8:3a:e0:bd:1c:1e:
93:81:2b:a0:22:fc:42:fc:c1:34:01:ee:6a:1b:2e:2a:84:24:
6f:2a:ae:76:96:ff:05:51:2c:c4:94:8d:ec:a7:74:11:20:7d:
80:97:6e:00:4e:c9:8c:1a:70:11:be:7e:c8:32:b2:44:83:21:
35:40:6e:83:ea:7f:3c:7a:dc:7e:07:8e:eb:e4:cb:29:4e:6c:
bd:4e:fc:84:fe:0e:fd:80:25:a0:85:52:e1:4b:37:d9:32:a9:
82:47:ad:b9:dc:03:6a:fa:ed:80:d3:29:c5:e1:32:b3:99:e2:
73:b6:bb:09:f0:55:18:9d:ba:33:0d:76:9d:44:4c:c9:1d:16:
92:3d:1e:70:89:dc:de:65:eb:7f:a8:ea:05:36:32:3a:ca:70:
86:4f:ba:4e:9e:b5:d8:ac:87:f9:35:7f:cc:4a:75:83:8d:2a:
cb:61:36:50:ed:24:99:f2:eb:4d:c8:48:9a:8b:af:14:50:3c:
50:6f:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:33:15 2026 by rpki-client