Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
File: YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json)
Hash identifier: cxvCKM/KEOro4lmlMNuIYDgd/cuEMOmU3q045MmOAaQ=
Subject key identifier: EA:8F:DF:95:16:0D:01:CB:0B:88:AB:8B:C0:6E:EB:1B:9E:0E:26:FC
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial: 01A004A76BD3FC7805233AC3BE5C0F56F0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
Manifest number: 0BE4
Signing time: Sat 15 Aug 2026 09:01:15 +0000
Manifest this update: Sat 15 Aug 2026 09:01:15 +0000
Manifest next update: Sun 16 Aug 2026 09:01:15 +0000
Files and hashes: 1: T9qIl1S9tQz4tEVjrSKAWFbOqcg.roa (hash: h4jSuRvvCuZIkrJ0uLJKVCyM1giPtJIbarHhGQfdVf0=)
2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: zkR6r7lC/v7MZ83m+4oAdH3OwSwSpe5r4poCAB33B5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:a7:6b:d3:fc:78:05:23:3a:c3:be:5c:0f:56:f0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
Validity
Not Before: Aug 15 09:01:15 2026 GMT
Not After : Aug 16 09:01:15 2026 GMT
Subject: CN=ea8fdf95160d01cb0b88ab8bc06eeb1b9e0e26fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:32:68:1f:78:4a:ca:39:a6:d0:6d:9f:bd:
56:9a:5c:b3:04:b4:c9:6a:2d:8c:5d:1d:5a:99:c3:
bc:bf:40:44:a8:84:f9:ff:20:e7:5e:8c:30:ff:06:
11:2a:e7:30:2a:25:cc:f2:19:cc:a8:39:fd:03:10:
35:bc:79:29:89:09:da:90:4e:36:17:71:fe:03:9a:
7d:ac:11:d4:e2:59:0f:56:48:06:42:3d:f1:34:07:
36:bb:9f:43:4b:b9:b6:46:ee:60:75:1b:dd:10:1d:
0f:14:31:0c:ce:6c:5b:9d:50:cb:dc:1d:1d:67:f0:
37:1f:6b:b3:00:c3:e6:c8:53:44:7e:b0:00:86:cb:
42:d0:7b:71:da:ba:db:cd:4d:30:1d:84:77:89:53:
b7:65:69:de:ad:7e:5e:bc:e5:8e:8c:31:88:bf:39:
cc:e9:20:d0:82:46:b0:76:2f:85:ad:f3:02:94:4b:
75:28:85:01:64:ee:43:43:b4:6a:45:2e:01:24:fb:
73:b1:9d:7b:8c:72:a9:e4:ab:e9:bc:d9:e7:bc:2d:
30:8d:b9:96:eb:77:64:94:03:52:8c:23:6e:7f:db:
b5:f0:db:5a:c8:23:db:d8:f9:4f:49:22:5f:d7:a9:
24:b1:6e:af:d2:40:f3:3c:1c:97:5f:4e:3e:54:c2:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8F:DF:95:16:0D:01:CB:0B:88:AB:8B:C0:6E:EB:1B:9E:0E:26:FC
X509v3 Authority Key Identifier:
keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:7f:41:d3:7a:8a:de:69:40:c0:37:4b:42:b5:f1:18:64:49:
0a:ea:20:7d:32:df:e7:89:a6:83:19:8e:88:66:4e:87:37:44:
07:db:ef:d1:c4:ee:2e:38:63:a8:dc:a0:97:e5:0d:30:64:80:
b5:2d:72:e9:c5:44:99:5c:19:83:5d:f6:a6:77:d0:25:cb:3e:
de:36:62:aa:86:d3:66:1e:d5:2e:9e:ba:b9:7d:2c:2c:60:8f:
a8:37:b5:b0:61:5c:56:5d:05:16:fe:44:25:96:c4:3b:d9:ad:
f6:9b:db:80:29:85:db:65:00:21:d0:9d:bd:e6:56:8c:8b:6b:
78:39:3b:06:a9:27:aa:5d:4d:0a:c6:ec:c7:98:01:87:b9:59:
9a:94:73:74:09:0b:15:37:f1:18:8c:da:b7:3d:58:24:9d:7e:
b2:74:1a:a3:ba:66:ff:86:d0:09:5a:3a:11:d2:0a:3d:61:91:
a6:31:bb:e1:e1:27:76:b2:01:7a:d5:94:b0:82:0d:3d:d5:68:
19:46:6d:63:59:dd:43:a9:79:40:6f:d7:32:ee:4c:17:29:1e:
95:73:93:f3:b0:e4:5b:50:51:ed:4a:7a:92:e2:0b:0b:59:84:
d2:65:67:b7:55:59:db:05:6e:dc:8e:02:9b:a0:a3:09:9d:3e:
1d:44:df:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 17:11:02 2026 by rpki-client