Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: eQRgTFOeOmmhMLgDnoI0yGwOtJPBaFwvvdLLBllu9aY=
Subject key identifier: 9A:23:BD:5C:A8:D7:DF:BC:AC:77:31:52:AB:0D:8B:CB:C1:27:62:68
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 01A181BE04C5C5EBC737C579F6D9752EB988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 09:01:16 +0000
Manifest this update: Wed 28 Oct 2026 09:01:16 +0000
Manifest next update: Thu 29 Oct 2026 09:01:16 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: 9XiqqB8y0Zg04KfqaHucbyBl4XIEuAhgQDpAYsRrYlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:04:c5:c5:eb:c7:37:c5:79:f6:d9:75:2e:b9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Oct 28 09:01:16 2026 GMT
Not After : Oct 29 09:01:16 2026 GMT
Subject: CN=9a23bd5ca8d7dfbcac773152ab0d8bcbc1276268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:98:10:93:69:b5:9a:de:ff:49:7c:71:ba:
ad:21:78:a7:bd:d0:ec:e2:f9:62:5b:c0:5f:1b:79:
8f:ab:7b:f9:0a:19:43:a3:5e:e9:82:b2:86:40:c7:
9e:cb:6d:7a:43:af:05:03:4c:7a:7f:6b:73:45:7b:
31:8f:14:2f:48:3b:62:d1:69:50:fe:a9:e4:ee:47:
2d:59:83:67:5a:69:7b:f8:ca:1e:f7:47:de:52:94:
a0:75:e1:2b:44:72:ce:43:a6:97:7c:61:75:d0:09:
80:5c:44:ff:12:9d:74:15:b4:d4:16:96:75:b8:d0:
fb:db:08:a6:0a:3e:e4:1a:4a:51:81:09:6c:e1:92:
25:fe:a2:22:9b:4b:cd:68:ec:ad:2a:d0:33:f7:27:
4f:df:2f:04:be:d0:80:ad:fd:85:04:7d:ff:da:50:
af:6d:3c:b9:e5:07:6d:5b:b1:65:0a:5b:07:82:fc:
35:44:58:d8:1c:da:47:b8:02:30:59:36:88:8a:d2:
8e:08:22:35:22:3e:e6:ed:4f:7a:3e:eb:52:9c:a7:
97:8c:e8:a6:f2:4f:33:9c:f9:ae:78:07:c5:4b:01:
5a:a6:74:27:73:dc:1f:83:e6:69:47:8d:8a:98:19:
e0:d3:28:b4:ec:6e:1b:52:88:c1:7e:61:e7:d6:a4:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:23:BD:5C:A8:D7:DF:BC:AC:77:31:52:AB:0D:8B:CB:C1:27:62:68
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f7:66:dc:9a:23:c4:11:dc:0e:cc:0e:60:21:13:e0:0d:14:
88:92:c6:2c:84:81:71:a8:93:eb:2e:e4:38:f5:a0:36:0f:b2:
2c:01:26:36:06:fd:50:2f:4c:be:19:86:c7:e7:47:12:47:d6:
ec:03:f1:cc:0b:7b:a9:b3:cf:b6:56:43:67:49:7d:4c:20:13:
ac:e7:98:13:e0:f2:7d:c5:24:74:81:d9:b0:b0:16:fb:21:48:
bb:41:f0:7c:94:05:a0:e1:cc:47:7e:42:45:45:8a:b2:d5:7c:
a7:38:7e:58:82:d9:21:3e:c5:f9:20:f1:ad:52:a3:2f:80:b1:
23:8b:82:f7:80:90:1f:38:9b:61:31:0c:a2:95:37:3b:f2:ce:
79:ed:ea:e5:03:9c:bb:56:df:93:84:04:17:28:f7:32:af:61:
e3:39:9e:83:b0:c6:b9:b3:99:69:e8:28:5a:6e:aa:72:3b:68:
a6:d5:e9:79:67:7c:57:de:ee:30:46:b7:1e:2f:81:a5:d8:a0:
8a:a1:68:f9:ee:41:83:94:ac:e3:39:9f:05:48:7c:a2:33:1e:
bb:79:c0:79:9b:4e:b6:b8:1d:f0:49:55:e7:4e:e8:52:09:eb:
c0:9f:b6:66:b7:c7:e4:d9:e7:2c:dc:df:e9:3c:59:02:8c:d1:
ab:b8:c9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:34:33 2026 by rpki-client