
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
File: YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json)
Hash identifier: rTENM8szsgd3VyZng37/BVVyQcUNoBnxWanwfZSpeLQ=
Subject key identifier: BC:4B:3B:A2:F9:42:82:8D:0E:F3:19:8C:F5:14:50:78:29:36:90:7D
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial: 01A1095D4C0F535DF92345F98F7B2128EA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
Manifest number: 0C6B
Signing time: Mon 05 Oct 2026 00:01:11 +0000
Manifest this update: Mon 05 Oct 2026 00:01:11 +0000
Manifest next update: Tue 06 Oct 2026 00:01:11 +0000
Files and hashes: 1: T9qIl1S9tQz4tEVjrSKAWFbOqcg.roa (hash: h4jSuRvvCuZIkrJ0uLJKVCyM1giPtJIbarHhGQfdVf0=)
2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: gJvwcggBZarLtteQOgN0nYZNIMgm9bnYhhaWiP38lU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:5d:4c:0f:53:5d:f9:23:45:f9:8f:7b:21:28:ea:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
Validity
Not Before: Oct 5 00:01:11 2026 GMT
Not After : Oct 6 00:01:11 2026 GMT
Subject: CN=bc4b3ba2f942828d0ef3198cf51450782936907d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:17:f3:73:5a:cd:76:bb:bc:4d:95:d3:a3:
31:70:c7:5f:17:1c:5f:10:45:a8:e9:3d:29:52:3a:
bd:f4:2d:cc:b9:2f:6c:8b:6e:ea:45:3b:ff:88:f3:
7a:08:42:ab:3f:63:be:b4:93:c3:8a:5b:74:82:25:
b7:32:6b:21:ac:f4:0f:19:26:c8:d6:ae:3e:c4:3d:
12:d9:18:d1:41:1a:1d:fc:8f:b6:96:86:b8:b9:7c:
da:6b:c8:e0:5e:a0:42:35:a2:84:47:82:19:82:6f:
18:df:0a:21:b2:e1:95:06:28:02:20:9b:23:48:a8:
37:50:3e:0d:53:36:dd:22:f9:4e:04:75:37:45:d4:
87:5a:25:46:9d:14:55:87:f8:67:a7:a3:a4:18:ae:
6a:24:85:11:ea:19:ff:bc:bf:5e:7e:f6:ca:00:40:
bb:34:f6:0a:9c:29:9a:68:cb:50:fa:cc:dd:b0:5a:
14:29:52:b7:04:ea:36:15:cb:9f:42:0c:c7:54:88:
54:64:fa:e2:ac:7b:30:cd:cf:9b:3a:90:6f:e3:9a:
9a:b3:5f:58:e2:84:d2:26:80:9e:dd:cf:1a:44:a5:
dd:a4:f6:42:a4:d8:74:e6:28:85:81:c1:63:4a:54:
71:02:ae:b6:5a:16:23:2d:54:4b:94:63:af:19:96:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4B:3B:A2:F9:42:82:8D:0E:F3:19:8C:F5:14:50:78:29:36:90:7D
X509v3 Authority Key Identifier:
keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:96:e9:d6:1b:9e:4e:75:a1:12:8a:40:4f:7f:82:41:b7:d6:
1d:dd:69:d4:20:99:97:9a:17:e6:55:96:7a:18:0d:f2:f6:11:
6d:dc:cf:da:f0:51:c0:8f:2b:7b:2b:a0:25:2e:21:7c:50:0e:
f6:ca:cd:17:b3:46:0e:b6:c5:c3:b1:91:10:8a:7a:e1:83:78:
a3:9c:6e:d4:ad:04:d6:8a:f3:c4:bd:10:38:ca:ca:ff:fb:48:
72:0f:b1:01:36:59:36:7b:f9:ba:96:0d:32:cc:15:79:63:0b:
f6:c4:c6:22:ec:6e:d5:eb:be:dc:c8:7c:c0:09:7a:8d:e6:31:
37:6c:0b:a3:1f:cb:23:95:43:46:7d:6e:ec:53:4a:71:b9:53:
84:9c:0b:9f:34:40:3e:90:b9:3e:96:05:4f:dc:4e:9a:b7:47:
d1:7c:49:5e:a7:2f:d9:a9:9b:1b:f0:db:ea:4a:48:17:58:78:
19:27:5b:65:22:2b:a7:5a:5b:67:c7:f1:5f:58:d7:90:47:ba:
7a:de:9a:e5:27:ec:26:5d:a5:dd:a8:4e:7d:7a:e1:c5:4f:f6:
c7:ce:dc:55:5a:1e:b8:e3:6e:c6:db:9d:87:e1:5d:fd:97:2c:
72:43:cb:9f:5a:8e:57:37:25:23:78:ad:f7:e6:62:22:7d:0a:
b9:c3:dc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:31:18 2026 by rpki-client