Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: 69I2bOUVhXPXLorkhVauEhAiSjI4uwOPoyB9GPpMR6I=
Subject key identifier: 4B:4D:D2:AB:E6:87:EA:9E:67:AC:77:FE:CD:60:52:9B:0C:4F:CE:8D
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 019EB7333F67832957BD1D88D4EECE22979C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 15:00:49 +0000
Manifest this update: Thu 11 Jun 2026 15:00:49 +0000
Manifest next update: Fri 12 Jun 2026 15:00:49 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: ewKkDdJWRtEJIRc9MijFZNapH0nsVlnrkV0cSDjjSC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:3f:67:83:29:57:bd:1d:88:d4:ee:ce:22:97:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Jun 11 15:00:49 2026 GMT
Not After : Jun 12 15:00:49 2026 GMT
Subject: CN=4b4dd2abe687ea9e67ac77fecd60529b0c4fce8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:1b:70:9a:31:e3:7d:87:2b:68:c4:61:83:
52:b4:12:e9:e3:c0:57:14:e2:eb:7f:60:c4:8c:33:
d5:34:45:c3:cb:d4:d4:74:67:83:cb:08:56:50:2c:
8f:bd:05:e4:be:a3:97:a1:e0:f4:73:82:ea:de:97:
5d:c4:95:2c:6d:e8:b7:29:a8:cf:4a:69:ea:c1:a3:
95:56:d0:f3:37:ff:f5:5c:9f:89:21:f0:71:f9:e7:
d6:80:9e:db:ff:88:8e:5a:ce:a0:ad:17:4d:cb:13:
b5:06:26:e4:8a:84:04:15:c4:b2:27:6a:32:fe:a5:
0e:14:76:bc:0c:4c:eb:de:1c:89:42:8c:77:4f:9c:
f2:fb:6f:b1:af:c0:1c:10:e0:f0:0a:a0:5f:df:70:
ac:87:65:b5:fb:67:be:7f:06:64:a8:ee:0a:30:0e:
00:2b:c1:68:67:30:88:ef:c7:79:d2:05:59:bf:7a:
80:a6:d3:06:09:d1:bb:4c:55:82:b3:bf:53:b8:64:
68:0e:86:21:4e:0f:1f:34:fa:cf:6f:aa:b7:3d:b4:
d7:ac:a9:f5:47:1a:0b:c2:9d:65:b4:ec:c8:29:8f:
0f:e8:a8:d6:20:76:be:c3:17:e8:af:ea:c9:c4:ec:
23:c0:6b:f1:48:b3:12:9e:67:db:c1:ce:8f:24:16:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:D2:AB:E6:87:EA:9E:67:AC:77:FE:CD:60:52:9B:0C:4F:CE:8D
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:07:46:a8:04:23:53:41:0d:e3:d4:40:1d:8f:0d:7f:ab:54:
20:aa:6d:a7:b4:70:2d:6c:e2:4c:f5:a0:e8:e9:6c:1d:70:c9:
ea:a1:50:7d:55:8e:a2:bf:b3:9c:0d:99:05:02:6e:c5:36:94:
7e:6d:04:3c:39:5d:52:21:01:b9:95:7d:85:ee:c6:76:61:b0:
53:29:41:cd:c7:a0:8c:07:bb:90:ab:a9:36:86:23:92:2c:5d:
dc:ab:7d:c6:b1:dc:18:c7:5c:18:92:7e:0e:f6:cc:3c:b6:a1:
02:d1:44:dc:26:62:6b:b2:ee:d4:b7:d0:d4:58:85:d2:74:84:
b2:43:cf:23:32:6c:84:65:1b:c0:36:37:a1:99:6c:fc:3b:13:
bf:5f:ee:08:8e:8f:36:39:7f:f0:5b:aa:ea:08:dd:94:bf:9a:
b7:08:90:c4:de:78:13:fc:18:c0:c0:47:03:c9:4e:72:82:e1:
4f:c9:9e:31:0b:ef:3e:c3:cb:7d:12:29:dc:ea:e2:3b:29:df:
eb:b8:95:6f:51:24:9a:0a:68:5b:a4:49:f4:30:38:57:7a:23:
db:fa:8d:70:03:fa:90:33:70:a1:be:9a:38:e8:6e:a8:7a:0b:
1b:b5:71:45:3f:27:54:65:78:49:31:ff:e1:15:dd:a3:da:60:
a2:24:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:41:10 2026 by rpki-client