Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: AloW/UCVVFkNNXczzMcDQ+CCEklatueYK+cclGytoGI=
Subject key identifier: E9:D3:C0:8F:2F:1D:2D:99:CD:96:79:91:39:B0:1C:99:72:3F:14:5C
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 019DCD86790118D9623CFD163DD5DDFEA85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 06:00:35 +0000
Manifest this update: Mon 27 Apr 2026 06:00:35 +0000
Manifest next update: Tue 28 Apr 2026 06:00:35 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: 1jWCg+cei35xOCdQE92tElH1pBg7qEDaCEz5TZBGvqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:79:01:18:d9:62:3c:fd:16:3d:d5:dd:fe:a8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Apr 27 06:00:35 2026 GMT
Not After : Apr 28 06:00:35 2026 GMT
Subject: CN=e9d3c08f2f1d2d99cd96799139b01c99723f145c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:9b:2e:34:45:2e:7b:36:15:fb:e4:1b:af:
02:f7:1c:b5:f7:cd:6c:df:88:f8:69:a5:54:0e:6e:
f8:a6:7e:fe:d8:1b:20:10:ef:7a:ec:17:a1:c0:9d:
2e:58:a4:63:83:af:2f:64:f7:92:17:69:a8:f4:b7:
03:63:d8:02:ac:84:5e:7e:6f:72:94:75:ae:a6:a9:
6b:c0:fc:79:1b:ae:4e:94:b2:4b:59:6b:93:92:78:
b9:6a:4b:c7:96:b4:ff:0c:ba:ff:7c:ad:47:24:c5:
13:31:74:f6:b7:ca:03:c8:3e:26:60:3b:c9:53:d0:
18:ec:d1:68:43:6d:1b:5d:21:46:21:02:09:5c:3a:
c3:97:30:85:4d:5b:b4:71:8f:d4:73:1f:c2:b4:10:
2d:1a:1e:70:9a:54:d0:03:b4:91:65:3f:20:1d:1a:
c9:ab:d8:2c:83:5b:bb:27:76:04:64:44:5f:15:5f:
d6:1d:6d:f9:fd:9b:d2:03:59:13:a5:4f:a6:79:43:
e6:42:a2:14:54:88:71:cf:83:bb:1b:34:ea:3d:a0:
38:ea:2e:3d:91:93:4b:dd:23:2d:58:ce:f0:5a:12:
3a:39:55:37:59:47:1e:9a:6d:e5:ec:f7:1b:3f:f1:
09:bd:e6:bd:c9:0a:b1:a0:03:d4:0e:d2:b6:1e:9b:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D3:C0:8F:2F:1D:2D:99:CD:96:79:91:39:B0:1C:99:72:3F:14:5C
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:60:36:cd:ac:2b:8b:ad:99:c1:8a:21:95:7e:12:3f:e5:0a:
d8:43:61:cf:8c:d4:f2:bf:62:29:97:e3:fb:7c:89:c2:5d:a8:
7f:a2:ae:05:ff:2f:38:51:9f:c3:b3:4b:35:b6:ba:c3:e0:27:
7d:ef:b6:85:f6:89:8d:63:1a:d0:c5:cf:00:f9:cb:cd:18:7e:
29:e6:a2:24:08:4d:05:1c:2a:19:e5:7a:cc:d3:0d:c4:eb:67:
3a:d7:9b:56:ac:3b:6e:5e:ca:69:a4:85:d4:9e:99:ef:8c:bb:
58:87:3b:02:87:33:e0:de:10:7e:25:04:67:e1:f3:ae:1e:52:
1f:77:4f:2d:f6:fa:52:08:a7:49:36:3b:b4:be:1f:3f:f1:e4:
e2:33:53:2f:df:41:96:d3:78:f3:02:28:c1:5d:d1:bb:72:77:
f8:7a:f5:ff:7d:4b:b4:f6:9c:b9:c0:48:2a:ca:bf:8a:00:b7:
f3:06:67:bd:35:83:80:0c:cf:9d:bd:b8:27:b2:fa:b6:d3:82:
bf:33:73:39:82:23:6e:77:7b:f9:96:86:26:d3:1b:75:32:b1:
9d:0e:48:61:a5:8d:e2:b9:85:57:37:ef:48:7b:25:f5:2b:ea:
01:6f:ff:81:44:27:27:97:2a:4a:b4:36:21:c7:aa:6d:79:44:
ee:0a:fd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:57:19 2026 by rpki-client