Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
File: YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json)
Hash identifier: zP9MtZPFyjAQaSR4NfNOtp9EBjTA1R74ADw5Igfv9U8=
Subject key identifier: 3A:FE:0E:70:8D:FB:03:FA:7F:76:F7:06:BB:E6:AD:A4:D1:3A:8E:35
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial: 019D382E3E2B75AD05616F089BBEC5D4F1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
Manifest number: 0A71
Signing time: Sun 29 Mar 2026 06:00:47 +0000
Manifest this update: Sun 29 Mar 2026 06:00:47 +0000
Manifest next update: Mon 30 Mar 2026 06:00:47 +0000
Files and hashes: 1: T9qIl1S9tQz4tEVjrSKAWFbOqcg.roa (hash: h4jSuRvvCuZIkrJ0uLJKVCyM1giPtJIbarHhGQfdVf0=)
2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: MlhbbzNnccAGxnc8vAMcv0OoE3MlN1mQxo688cOpNzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3e:2b:75:ad:05:61:6f:08:9b:be:c5:d4:f1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
Validity
Not Before: Mar 29 06:00:47 2026 GMT
Not After : Mar 30 06:00:47 2026 GMT
Subject: CN=3afe0e708dfb03fa7f76f706bbe6ada4d13a8e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:dc:27:48:76:d5:ff:d7:b4:57:c7:11:b2:
7f:90:ec:e6:12:c0:cc:e2:15:a2:f8:18:24:f2:8f:
34:a2:99:92:7f:73:d7:dc:95:7a:fb:a8:d7:60:e1:
79:71:bc:a0:78:42:d7:11:ec:0d:0f:b7:57:f9:5a:
5c:77:af:f0:e3:f4:7d:17:4c:97:c2:94:33:cf:b9:
e9:a7:95:1b:7b:08:68:2d:5e:cc:44:a8:a8:25:e6:
cf:00:55:c0:ee:72:2e:44:73:06:c4:92:0d:56:0f:
c2:d9:f7:71:52:cb:0e:45:e7:a0:49:b3:8d:65:01:
1b:07:bd:d6:17:07:31:b1:5a:b1:bd:1f:87:5e:b7:
05:47:fa:9e:ec:41:43:1e:cf:f8:3a:30:31:70:1c:
84:2f:6a:5a:2c:16:a8:68:90:09:ff:3d:43:c2:fb:
19:80:32:aa:0c:da:5d:8d:d9:3b:98:20:22:a5:a3:
36:32:b3:36:ea:1e:17:19:5f:ec:a9:05:67:4c:53:
99:7c:72:6d:0c:bb:5a:c6:9d:88:b1:10:af:6b:5a:
2c:b2:18:6c:16:62:ea:1e:fc:8f:42:15:47:43:01:
1f:29:b8:c9:1b:44:1b:0f:5f:7a:46:24:f4:75:ac:
5d:77:e0:b1:eb:be:11:cf:65:d3:69:f5:7b:90:11:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FE:0E:70:8D:FB:03:FA:7F:76:F7:06:BB:E6:AD:A4:D1:3A:8E:35
X509v3 Authority Key Identifier:
keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5d:b3:a2:79:31:1e:34:d5:ba:a3:50:71:c1:46:a2:01:4d:
b4:3f:b5:07:45:07:54:ed:fc:fc:60:89:59:98:19:f1:c7:4b:
07:b4:34:fb:f9:ea:28:66:4b:b4:7f:bc:36:9a:1c:ad:e0:81:
61:8a:61:96:12:5a:c6:1d:4c:4f:87:8a:d5:a0:b1:8e:92:0b:
f5:79:7b:d0:8a:8c:1c:ad:61:e8:b3:89:45:e9:45:c3:07:c9:
df:0e:d3:82:a4:9d:c3:39:8a:26:ef:d3:a2:32:a4:46:07:09:
8b:9e:2a:44:e5:8a:67:16:28:44:47:d5:14:90:a7:d6:6d:a1:
92:61:33:62:b5:f3:d6:68:ab:25:7f:37:75:45:70:a1:c6:02:
bb:e1:93:e8:4a:2f:27:dd:b9:3f:69:50:22:cf:11:40:32:aa:
7d:00:7b:df:9d:fd:ad:9f:6f:e5:63:7f:39:2b:86:d8:3a:1a:
1c:1c:8c:42:c7:c0:84:16:2c:4b:7d:13:75:e4:09:4b:34:f9:
08:56:84:03:bf:93:d0:cf:6b:63:ec:f9:f8:31:e6:19:f7:89:
7c:09:d5:8f:3b:41:b4:ec:91:e4:1e:4d:bc:63:10:60:11:73:
4c:13:2e:02:6c:4c:15:b5:59:ce:f4:d1:44:71:48:ee:97:29:
cd:a9:02:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:48:53 2026 by rpki-client