Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json)
Hash identifier: yrrdEOu8LKOxrSHrqeWuWoCwxLiNx3bw2DI2FB5VqBU=
Subject key identifier: DD:C4:91:6F:9C:2F:CD:38:95:A4:48:25:01:2C:D7:58:69:52:0D:13
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial: 019CAE35C0A4EACD48A27403F1BAB7175086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 11:01:23 +0000
Manifest this update: Mon 02 Mar 2026 11:01:23 +0000
Manifest next update: Tue 03 Mar 2026 11:01:23 +0000
Files and hashes: 1: T2mZHvF7TLgjiL-Q1DgKiQZFo_I.roa (hash: Zgyh/lWhi2LC0/9lTBDZMxFTlCwhP+uAru3WvOE4Wy4=)
2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: mP8mlp/viVE7PtlCgvF6wlPF2bW2PNVFGEb9A6Vdbso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:c0:a4:ea:cd:48:a2:74:03:f1:ba:b7:17:50:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
Validity
Not Before: Mar 2 11:01:23 2026 GMT
Not After : Mar 3 11:01:23 2026 GMT
Subject: CN=ddc4916f9c2fcd3895a44825012cd75869520d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:36:dc:52:9e:d4:2c:40:96:d0:35:a8:30:
12:f3:28:de:4e:a1:20:1f:bc:40:27:bd:0b:ca:17:
7b:67:16:b7:b6:85:5f:6a:4e:83:96:6b:57:0d:a6:
ad:ae:fd:92:66:9f:49:0e:e7:ac:dc:cf:d0:ca:48:
97:de:1e:58:f6:41:a7:48:8a:bd:e4:82:2a:f5:a6:
b3:c6:4f:7f:a3:2f:83:14:f9:23:8b:3b:40:cd:61:
41:9f:5d:7e:d0:3f:c5:fd:8d:f2:65:13:2c:f3:82:
54:91:95:4c:0f:16:6c:37:86:b1:d4:12:dd:1d:47:
8e:64:fc:bd:f7:2a:d7:4f:df:65:c9:d1:d2:dc:73:
3e:2f:1f:e2:3b:1f:1d:af:54:23:21:aa:0d:6a:d2:
92:cc:bc:b9:1b:c6:24:94:bf:51:0b:af:96:67:7f:
40:c5:ea:0d:26:af:35:ae:48:0d:4b:43:ef:62:cf:
9e:77:09:e7:9b:99:67:4b:9e:c6:2a:f4:3b:dd:0d:
48:cb:9e:da:6d:a8:46:8c:2c:55:d2:bb:d2:1a:cf:
ba:71:05:ce:5c:4d:c1:96:c7:a5:4f:63:30:72:3a:
93:ac:7a:1e:f9:7b:4d:2c:2a:6f:aa:90:b3:10:ce:
e0:b6:e2:ef:35:c1:c9:d3:f0:5d:2f:93:18:0e:64:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C4:91:6F:9C:2F:CD:38:95:A4:48:25:01:2C:D7:58:69:52:0D:13
X509v3 Authority Key Identifier:
keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:94:43:cf:59:6b:72:4a:c8:49:a0:fa:3e:ec:1f:f1:35:d2:
57:2e:96:26:9b:78:eb:e9:25:91:3c:3b:12:2f:31:4c:6a:4c:
de:0e:8b:32:23:79:c1:9f:94:05:76:de:b0:b1:a8:99:8f:dc:
e4:5d:ee:1c:d3:28:e8:e4:e9:1f:de:62:ec:a0:bb:31:9a:36:
10:6a:13:4f:4e:e4:84:70:32:c4:a6:1f:f1:db:f3:8e:df:53:
d9:38:02:1e:65:8b:3d:fe:09:34:55:f9:d7:9a:19:ed:dd:88:
16:80:8a:b4:a0:0c:04:3f:7f:f9:56:72:63:ce:9a:18:27:ac:
e1:e7:fd:61:62:58:58:5f:81:cf:b8:0c:59:18:d5:72:8b:b8:
74:5f:ad:35:e1:09:2b:c9:86:43:08:08:9a:e0:4e:46:b9:a6:
9d:de:b6:da:4b:d0:77:23:c4:69:af:e7:86:89:69:bc:26:e0:
87:df:b4:e1:d1:04:0b:d5:c5:72:3b:16:ba:13:9c:65:9d:d4:
79:5e:1f:ad:83:d2:12:75:aa:37:4a:d9:8f:8e:d7:9e:b0:71:
ca:ff:ef:3e:fa:44:fa:61:66:94:43:bc:33:42:94:52:ca:1d:
96:71:2d:70:32:3c:75:d4:13:4c:60:ab:4d:88:e2:91:b6:b0:
a5:54:3c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:21 2026 by rpki-client