Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
File: YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json)
Hash identifier: ROsso2uqQ4IE7BzInUEUd/qOI7lH/30tLcQtOzmiDdY=
Subject key identifier: BB:5B:65:A7:1B:F7:7E:79:62:4B:97:D8:B6:9C:73:82:AE:26:28:0F
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial: 019D28BB754BED5F644FE846ED7464144D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
Manifest number: 0A69
Signing time: Thu 26 Mar 2026 06:01:07 +0000
Manifest this update: Thu 26 Mar 2026 06:01:07 +0000
Manifest next update: Fri 27 Mar 2026 06:01:07 +0000
Files and hashes: 1: T9qIl1S9tQz4tEVjrSKAWFbOqcg.roa (hash: h4jSuRvvCuZIkrJ0uLJKVCyM1giPtJIbarHhGQfdVf0=)
2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: zU/vYs6eXQ0KLA5QRjWCjHbhXpeiNDQjApRDiWY+Y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:75:4b:ed:5f:64:4f:e8:46:ed:74:64:14:4d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
Validity
Not Before: Mar 26 06:01:07 2026 GMT
Not After : Mar 27 06:01:07 2026 GMT
Subject: CN=bb5b65a71bf77e79624b97d8b69c7382ae26280f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:80:58:ac:0d:66:82:ba:32:bd:d3:8c:e9:
75:12:38:0f:99:34:b7:10:7d:71:96:3e:a0:e0:5f:
22:b4:c3:3e:f1:21:c4:39:f9:ea:cc:a2:eb:7e:93:
cf:e0:5e:80:2d:67:1c:f7:8a:8c:ed:9c:1c:89:6d:
f6:76:c2:32:6c:fd:96:39:a7:f8:02:46:09:bd:54:
2a:76:d7:8d:2f:fc:21:c3:6c:7a:b6:b4:32:5c:67:
53:72:05:7b:23:2b:fb:5d:f0:4b:ef:3b:3c:b3:73:
dd:1f:49:a1:8d:a2:a2:3b:c7:92:15:7d:59:fc:39:
7f:91:db:07:b5:46:48:e2:5b:9a:80:6f:d0:4c:4c:
35:9d:a4:b1:d3:3d:07:19:d1:9e:ab:eb:e7:2b:11:
71:76:e8:fd:f0:17:83:71:c8:4e:da:e3:86:a5:46:
85:ae:a7:e1:45:5e:ab:03:3b:e3:6a:07:70:c6:b9:
19:a8:ff:20:5e:64:3e:28:ae:20:0d:84:17:42:0a:
9d:e5:58:1e:79:8c:f0:1a:9a:70:e7:f6:46:a0:74:
e0:24:59:b3:30:54:80:7f:0d:6a:7f:c7:af:ac:08:
ef:46:ab:a6:9b:35:33:1e:a2:88:06:a2:11:6e:df:
94:92:2d:8f:b4:0f:bb:bc:b9:14:1e:49:73:09:73:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5B:65:A7:1B:F7:7E:79:62:4B:97:D8:B6:9C:73:82:AE:26:28:0F
X509v3 Authority Key Identifier:
keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6a:b5:2b:df:85:e4:8e:69:80:ca:15:a5:21:15:23:a3:6d:
21:13:41:a3:27:49:3e:63:b7:c5:7f:57:6e:1f:b0:f8:02:ae:
25:98:68:26:6c:dd:11:ef:41:f9:c4:45:90:6f:24:65:34:b9:
0e:5c:8e:66:92:ac:ec:07:be:76:65:ae:03:02:42:80:8f:3a:
7f:4c:3c:7a:08:1c:d6:f3:0e:6c:b7:95:53:d9:1d:34:ba:b1:
9d:d6:7a:d3:e8:cc:e6:c2:5c:77:da:b3:d3:bb:ad:ea:62:5f:
d7:93:35:aa:41:0c:b8:2d:83:3e:62:f2:44:37:f3:96:07:d7:
0a:b8:c3:d4:ca:dd:52:6c:32:9d:73:8f:8b:d9:45:26:1f:92:
4e:77:c7:72:eb:7b:1d:62:6c:4f:0e:70:31:77:61:3d:15:1e:
95:74:a1:01:e1:e2:08:5c:62:b3:9e:2f:61:8a:e0:ab:7d:6d:
2c:59:26:9d:f3:b7:80:f7:4d:44:05:54:0d:bf:f4:b6:3b:86:
44:16:63:d3:13:3f:51:c6:dd:5e:89:e1:0a:e2:9b:de:1e:5a:
cf:c4:8e:b6:c6:8c:ce:2a:ca:2b:b5:d2:32:ac:03:0e:dd:98:
1b:81:5d:83:8b:33:37:22:cd:a5:e2:62:86:d8:5c:19:09:28:
9f:d7:aa:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou3VL7V9kT+hG7XRkFE1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMGIwNDM1NDYzNzQ2ZjVmMjM3ZDkzNjg3YmVjMmVhY2Yy
MjQ1NTEwHhcNMjYwMzI2MDYwMTA3WhcNMjYwMzI3MDYwMTA3WjAzMTEwLwYDVQQD
EyhiYjViNjVhNzFiZjc3ZTc5NjI0Yjk3ZDhiNjljNzM4MmFlMjYyODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVyAWKwNZoK6Mr3TjOl1EjgPmTS3
EH1xlj6g4F8itMM+8SHEOfnqzKLrfpPP4F6ALWcc94qM7ZwciW32dsIybP2WOaf4
AkYJvVQqdteNL/whw2x6trQyXGdTcgV7Iyv7XfBL7zs8s3PdH0mhjaKiO8eSFX1Z
/Dl/kdsHtUZI4luagG/QTEw1naSx0z0HGdGeq+vnKxFxduj98BeDcchO2uOGpUaF
rqfhRV6rAzvjagdwxrkZqP8gXmQ+KK4gDYQXQgqd5VgeeYzwGppw5/ZGoHTgJFmz
MFSAfw1qf8evrAjvRqummzUzHqKIBqIRbt+Uki2PtA+7vLkUHklzCXM9twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtbZacb9355YkuX2Lacc4KuJigPMB8GA1UdIwQY
MBaAFGILBDVGN0b18jfZNoe+wurPIkVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWdzRU5VWTNSdlh5TjlrMmg3N0M2czhpUlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80YmIyYWEtNDRjZC00M2I2LWE3NmYt
NjhjNTljMTliOTM1LzEvWWdzRU5VWTNSdlh5TjlrMmg3N0M2czhpUlZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi80YmIyYWEtNDRjZC00M2I2LWE3NmYtNjhjNTljMTliOTM1
LzEvWWdzRU5VWTNSdlh5TjlrMmg3N0M2czhpUlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmq1K9+F
5I5pgMoVpSEVI6NtIRNBoydJPmO3xX9Xbh+w+AKuJZhoJmzdEe9B+cRFkG8kZTS5
DlyOZpKs7Ae+dmWuAwJCgI86f0w8eggc1vMObLeVU9kdNLqxndZ60+jM5sJcd9qz
07ut6mJf15M1qkEMuC2DPmLyRDfzlgfXCrjD1MrdUmwynXOPi9lFJh+STnfHcut7
HWJsTw5wMXdhPRUelXShAeHiCFxis54vYYrgq31tLFkmnfO3gPdNRAVUDb/0tjuG
RBZj0xM/UcbdXonhCuKb3h5az8SOtsaMzirKK7XSMqwDDt2YG4Fdg4szNyLNpeJi
hthcGQkon9eq+w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:51:41 2026 by rpki-client