Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: jVGv0Pv4jN5B2YKMmikE1W5DeHkIm40kLTKkf6XRk2U=
Subject key identifier: 75:96:DF:03:B1:FB:5C:2F:0C:C8:C3:98:06:C6:D9:15:D0:CA:2A:5F
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 019CE3DAAC6740579B738B19B32518FFFBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 1864
Signing time: Thu 12 Mar 2026 21:01:24 +0000
Manifest this update: Thu 12 Mar 2026 21:01:24 +0000
Manifest next update: Fri 13 Mar 2026 21:01:24 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: UcokHghf6scE4CcW9ELeBvlEWBGPpJKOif6xfJ4Qym4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:ac:67:40:57:9b:73:8b:19:b3:25:18:ff:fb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Mar 12 21:01:24 2026 GMT
Not After : Mar 13 21:01:24 2026 GMT
Subject: CN=7596df03b1fb5c2f0cc8c39806c6d915d0ca2a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:2a:6f:28:26:b9:18:69:a2:33:c2:9e:f5:
fd:f8:10:1f:ae:44:dc:ec:e8:db:f2:0a:a6:75:66:
8e:dc:ca:4c:6a:6b:88:23:56:e5:1f:1c:9f:ff:d9:
5e:a3:29:66:d1:f0:58:f4:ad:d7:72:c1:1e:23:78:
c1:3c:be:1d:be:83:56:52:7f:12:13:63:07:f9:d7:
fc:d6:42:bd:44:7f:91:ff:52:d5:06:1c:49:85:ff:
69:0a:3f:8a:f7:5a:0b:28:c4:44:fc:43:4a:a8:78:
43:f0:3a:16:18:20:c7:46:3e:e2:e8:ea:c6:dc:43:
d3:6e:db:76:47:c6:7d:6f:d6:f1:9d:44:cd:72:18:
d5:12:e5:47:f4:7b:bb:1b:5f:c0:de:76:31:ab:6d:
c8:f3:ca:f4:f8:e3:cc:34:74:eb:2e:50:82:7b:5f:
df:e4:c4:ad:ea:1c:eb:2b:b9:c6:b5:3a:3d:08:fc:
4c:0d:25:db:b5:c8:2b:14:6a:1d:98:f1:1c:8c:1d:
91:52:99:3a:1b:97:bd:82:1d:4c:94:cb:cc:32:64:
b5:99:27:a2:27:99:4a:3e:f3:15:e8:0e:6c:64:b5:
b7:6f:43:2e:3f:59:3b:fe:98:15:42:c8:0e:17:17:
e7:32:d4:bd:b2:6f:20:75:7b:74:1d:a4:8d:63:bb:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:96:DF:03:B1:FB:5C:2F:0C:C8:C3:98:06:C6:D9:15:D0:CA:2A:5F
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:91:3e:fa:af:aa:1d:85:f4:a7:81:90:76:7e:89:51:45:c4:
a8:51:53:77:3c:dd:4e:ba:da:cd:44:df:7b:17:0e:13:5c:03:
c5:f6:ec:d6:11:f6:56:4e:0d:4a:a3:91:e1:eb:d7:e5:b2:08:
2a:67:73:89:98:9a:65:86:82:55:e1:5a:92:29:3b:d5:0c:d2:
8b:eb:6c:44:37:bc:64:68:65:b7:89:ba:58:a8:65:ed:e3:ec:
64:e7:34:13:50:53:4d:09:ac:b0:c0:57:9b:d6:97:0f:87:a1:
47:fd:7d:74:7c:9f:f0:62:10:5d:cc:3d:79:f6:cb:32:c6:3b:
8b:d2:49:68:9f:dc:53:a8:be:3d:d2:dd:0d:26:7e:e3:22:6b:
a0:81:d9:4c:24:6c:60:ec:3a:ae:63:7e:de:ab:72:b2:d1:66:
d0:8f:63:6f:56:86:ce:f1:52:58:a3:d9:20:77:32:42:f5:2b:
24:eb:fb:07:fe:c9:55:a0:bb:92:dc:5d:37:51:18:88:8d:67:
e7:44:8c:d7:51:f8:b4:1b:20:ef:3e:86:67:c6:0c:25:f7:6c:
35:c4:de:24:94:15:89:43:d9:49:15:2a:dc:4c:29:31:7d:29:
15:cf:57:53:67:3c:3c:cb:1c:b3:89:87:33:88:ec:68:46:4d:
0c:0d:fa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:26:04 2026 by rpki-client