
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
File: YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json)
Hash identifier: z3+Ggyh4hBYpkKVbHrR1t9n9gL50YomtrkWh243Up2o=
Subject key identifier: E7:75:B9:8F:F0:D6:85:52:EF:15:B4:79:C6:60:79:2E:7D:4C:08:7D
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial: 019E2994D36FED4393BCE2F97CA6B3D62DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
Manifest number: 0AEE
Signing time: Fri 15 May 2026 03:01:19 +0000
Manifest this update: Fri 15 May 2026 03:01:19 +0000
Manifest next update: Sat 16 May 2026 03:01:19 +0000
Files and hashes: 1: T9qIl1S9tQz4tEVjrSKAWFbOqcg.roa (hash: h4jSuRvvCuZIkrJ0uLJKVCyM1giPtJIbarHhGQfdVf0=)
2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: AK9iiF9vXu8gCQlcT9qGBkO6cL/N+mMK1XnAGW9PUNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:d3:6f:ed:43:93:bc:e2:f9:7c:a6:b3:d6:2d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
Validity
Not Before: May 15 03:01:19 2026 GMT
Not After : May 16 03:01:19 2026 GMT
Subject: CN=e775b98ff0d68552ef15b479c660792e7d4c087d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:a7:f8:3d:d1:54:40:02:7b:0c:ba:cc:45:
00:b6:79:02:10:71:b5:ac:4a:39:6c:0b:9d:e8:4f:
da:dc:42:80:83:05:46:3b:a4:11:09:96:85:db:13:
bb:40:87:93:35:b0:a6:26:42:ec:4a:da:ee:2e:8d:
ed:9a:8c:17:4a:81:a7:09:f4:ac:d2:d4:e3:d3:9e:
34:96:83:a6:7e:70:52:01:09:bd:08:cf:a0:e9:44:
7c:83:58:77:89:5d:ff:70:94:12:4e:02:bf:9f:f1:
86:81:66:31:07:4b:7c:bd:7c:cc:cf:2b:48:53:ec:
fc:fd:07:82:e3:d0:91:fd:36:7f:31:c8:66:91:53:
87:8a:24:84:a2:3d:37:f5:ae:05:2b:56:1b:fd:77:
ad:aa:55:ed:51:63:a2:8d:29:24:7c:66:71:ae:d8:
5b:11:9c:43:c5:4d:f0:49:4c:b6:f3:7a:d0:8d:b6:
66:99:7d:65:4a:bf:08:56:45:bc:b4:f7:e7:7c:39:
d9:9c:dc:6c:75:68:2b:bf:8e:aa:c7:88:1a:0a:e4:
09:a0:90:fd:c6:6d:6a:bb:cc:b8:20:69:0f:a3:da:
7e:ac:7f:f9:f6:54:99:fb:b5:e7:35:32:4d:f4:73:
22:df:ab:fc:3d:1f:87:0a:6e:1b:16:17:29:1b:c7:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:75:B9:8F:F0:D6:85:52:EF:15:B4:79:C6:60:79:2E:7D:4C:08:7D
X509v3 Authority Key Identifier:
keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0a:c6:a5:c1:b5:99:13:93:f1:be:ca:37:d5:fc:4b:13:72:
fa:e0:1c:e0:98:55:4a:4c:c8:34:f5:09:54:86:25:1c:96:21:
73:d0:84:e2:53:b4:96:c0:d3:6c:a8:60:a7:cd:f6:ad:d1:52:
94:d1:4a:77:0e:35:a3:d5:65:50:90:69:61:3b:5f:ef:08:ed:
c5:03:14:81:26:ba:69:03:4d:cd:3a:66:40:6a:10:58:8e:43:
94:42:29:33:48:95:f8:cf:0d:44:9c:47:21:f5:c3:2f:17:f3:
ce:71:df:ad:af:3c:60:af:10:cc:af:b3:43:7c:85:5c:46:eb:
5e:5a:31:6e:96:a2:2d:87:3e:09:12:86:2d:0e:29:81:4b:9a:
a2:2e:18:df:da:ce:a4:7f:78:22:67:7b:13:5f:a3:67:75:3a:
ff:a3:5d:9c:de:a1:c7:5c:23:b2:ee:b2:d9:eb:47:11:4d:39:
61:3f:f4:9e:71:c2:9d:b3:5c:6c:ee:98:30:70:8f:f7:dd:23:
5b:e6:ba:f9:7e:26:be:a0:ae:1e:e0:70:70:ca:17:ea:00:c8:
41:56:f7:a3:30:e0:99:e4:9d:4a:68:c5:5a:7b:cb:36:7c:93:
33:da:cb:78:7a:5e:e2:56:44:9b:52:91:ec:7b:a9:1f:ba:a3:
08:fe:f8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:27:52 2026 by rpki-client