Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: bXmEcAlsmEfIyVEipzrIrTiXacEHj3cetoVJ5lMz3J0=
Subject key identifier: 17:FF:79:AF:42:C6:C1:58:0A:00:85:46:E8:60:11:BE:24:BC:E9:77
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 01A003265122973D0E09A16BE4006BF7F0E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1A09
Signing time: Sat 15 Aug 2026 02:00:37 +0000
Manifest this update: Sat 15 Aug 2026 02:00:37 +0000
Manifest next update: Sun 16 Aug 2026 02:00:37 +0000
Files and hashes: 1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: oAOE53L2YjZJxM1W9bC1c/rZbJfV2x5Jq1+Cr1QX3CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:51:22:97:3d:0e:09:a1:6b:e4:00:6b:f7:f0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Aug 15 02:00:37 2026 GMT
Not After : Aug 16 02:00:37 2026 GMT
Subject: CN=17ff79af42c6c1580a008546e86011be24bce977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:00:7b:bb:ea:f0:f1:33:36:c5:96:3d:b6:
11:6a:33:20:b0:16:14:a8:cf:2b:bc:f1:7b:c1:dc:
49:3e:ec:1d:50:45:f8:e3:b9:b1:e8:78:55:b7:ea:
9b:e2:cc:c0:11:a0:20:57:6a:6d:97:88:b3:d1:1e:
6a:2c:7a:07:26:ff:20:eb:46:39:7b:fb:a8:ff:2b:
35:b9:2f:63:e9:14:52:6d:a2:66:68:6e:95:e9:a7:
22:45:5f:87:6c:9b:71:f8:b1:4a:64:11:6c:fc:00:
8c:2b:79:22:1f:92:e2:91:42:5c:ae:a9:36:19:d2:
73:17:29:e4:5a:12:5f:65:74:0d:ea:1c:6b:84:68:
7a:c2:35:aa:15:37:08:48:b5:b9:50:f3:41:e1:89:
4e:5b:63:6b:56:0c:d7:2c:10:c5:02:28:62:e8:e2:
78:0e:b3:1b:b1:88:de:d7:a6:1d:0a:c3:8b:48:9c:
de:10:8d:ed:12:d7:df:b0:88:d2:0e:3b:4a:dc:cf:
76:93:d2:af:92:a7:cf:81:6c:8b:98:53:78:49:aa:
17:f4:ff:14:67:9d:be:89:92:a3:20:6a:c5:c5:02:
ef:e2:13:11:f9:e5:fb:44:ba:94:b5:69:8e:c2:fc:
3c:0f:d3:e5:d3:75:9d:c9:62:00:e1:b8:a2:6f:53:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:79:AF:42:C6:C1:58:0A:00:85:46:E8:60:11:BE:24:BC:E9:77
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:78:c6:7c:b1:ec:b7:be:e2:bc:a3:4e:70:49:38:cc:74:84:
04:3f:62:e2:92:55:61:8d:e5:ff:f9:e5:a1:8e:8e:c5:5e:25:
37:8d:56:6f:7c:44:9b:46:bb:e5:3a:fa:61:a6:26:28:61:b1:
e6:2a:45:34:a1:8a:67:60:21:e6:28:f0:5c:5a:8c:67:98:6e:
d8:d2:f8:5c:74:63:4f:be:da:72:31:4d:d6:d5:6b:cb:12:34:
73:22:26:96:da:00:d1:a5:da:1d:a5:b5:af:6e:78:f3:52:01:
d3:99:77:9c:7c:5b:3f:b6:3d:3c:8d:aa:33:7e:f0:70:a6:1f:
78:a6:ee:5f:8d:3c:8b:32:3d:8e:d5:62:3f:de:6c:e2:4f:ef:
ba:40:05:bc:52:90:26:67:d6:b1:df:fa:4d:ff:97:b2:2b:32:
8f:e8:7a:c9:20:82:0d:58:73:c4:8d:cb:c2:ed:5b:c0:5b:f0:
0e:e5:22:b2:84:58:d4:e2:b6:57:f9:f4:11:16:02:97:8e:c7:
b9:fd:c1:ce:7c:cd:5c:e1:83:6c:9d:e6:b7:3a:61:13:2c:2c:
28:b5:ae:97:c5:ec:83:8b:68:f7:a4:6f:ad:6c:1b:1e:58:3c:
6e:d5:78:d2:6a:13:85:0d:ac:28:f4:48:fd:86:f9:e0:4d:aa:
25:9d:e7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 11:42:33 2026 by rpki-client