Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: i2J3RqaqE7YdtzsCWrEKUX2U97VXgSb6iL2ksx650qk=
Subject key identifier: 95:B0:B2:7B:51:9C:86:31:BA:E9:AC:F4:43:97:8B:2E:53:E7:EC:D7
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 01A0924601A36F711BD223DC300CD7A05FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 1A4C
Signing time: Fri 11 Sep 2026 21:00:56 +0000
Manifest this update: Fri 11 Sep 2026 21:00:56 +0000
Manifest next update: Sat 12 Sep 2026 21:00:56 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: d5GJnedWNNRduuqyuk1eDGlP5xkONXX1bDfwkO+Wy+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:46:01:a3:6f:71:1b:d2:23:dc:30:0c:d7:a0:5f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Sep 11 21:00:56 2026 GMT
Not After : Sep 12 21:00:56 2026 GMT
Subject: CN=95b0b27b519c8631bae9acf443978b2e53e7ecd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:d8:88:f1:fa:ff:18:9d:7f:7d:b0:4c:c2:
3b:2c:c1:f5:e7:c0:cb:69:c5:f8:bd:8c:55:22:52:
c0:5e:2d:bd:37:ab:be:34:6e:e7:cd:f8:24:d9:76:
9d:aa:13:b2:b0:8a:57:ce:7a:b6:88:04:63:bf:64:
b4:c5:5a:4c:16:11:21:0d:da:8e:f7:f9:f9:cb:b1:
9a:db:8c:c3:ca:39:16:d7:6f:86:e4:84:b9:dd:78:
cc:9e:02:3d:f3:3f:d2:ad:7e:73:a2:c1:00:57:bd:
3c:72:05:6e:55:48:64:6f:aa:0a:34:e9:ca:b2:74:
07:e4:a2:1c:15:f2:20:bb:d0:89:ec:ff:6f:17:22:
6c:cf:c6:a7:36:7f:fb:4b:99:33:bb:16:87:99:34:
b0:c5:e0:27:47:95:46:ff:39:bd:47:39:49:b2:2c:
5d:5a:10:07:d2:46:d5:14:f9:dd:3d:ca:46:54:e8:
5f:2a:d5:66:d6:c5:dc:40:fa:e9:79:ce:4a:e4:22:
8f:80:06:32:61:76:23:8f:18:85:f4:87:49:de:0c:
b8:25:cc:73:78:fb:9a:5b:ac:0a:6f:e6:6b:91:0a:
4f:fb:b1:35:48:bf:6d:d5:17:90:e1:3f:53:46:72:
e5:9a:45:db:e4:a5:3c:8e:b1:be:35:11:84:42:11:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B0:B2:7B:51:9C:86:31:BA:E9:AC:F4:43:97:8B:2E:53:E7:EC:D7
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1a:ca:42:4a:4c:0e:d9:64:38:0a:ec:36:dc:a6:cd:61:f3:
6f:39:e1:f4:49:59:34:78:41:9c:2e:df:1a:87:f1:bb:70:10:
ba:d1:0f:57:64:ac:53:f6:47:17:5f:dc:9e:76:42:4f:c9:47:
dd:3e:c3:87:08:4f:88:5d:ff:85:ac:0e:76:bb:7f:46:cd:2b:
fe:13:8b:74:46:81:37:90:79:01:28:f0:8d:29:a1:28:88:c0:
c2:58:6b:67:5e:e4:6d:68:46:43:29:a4:ab:cb:93:9e:64:92:
23:bd:fb:ad:a4:f6:7c:21:0f:ce:4d:a3:64:07:1c:0f:ca:39:
c5:52:d9:1e:e8:19:21:7f:ce:c5:92:70:24:a4:0c:0f:a5:f6:
d3:09:95:19:b2:0e:80:ad:fe:e5:6b:69:65:95:24:7a:1e:8e:
d5:62:b0:a7:9f:c5:fc:16:6e:91:5e:5a:74:a6:b6:39:21:de:
28:9b:12:e0:85:0a:c3:40:71:d0:a2:7d:3a:37:9d:0f:45:a6:
8c:be:00:d1:f1:2c:85:a9:a8:0a:29:97:5c:c7:58:e9:e4:8f:
d1:02:0b:3f:9e:22:23:28:9a:a0:d2:0f:97:45:32:ee:67:50:
81:0d:5b:81:93:98:35:a0:3b:4f:10:23:7a:bc:6c:24:f0:2a:
32:8c:c9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 22:59:10 2026 by rpki-client