Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: M/gMrwmjbEoSN49Y5RQmiah7tqq8RlaN4RpmV3Jvcnc=
Subject key identifier: 1C:29:1B:FC:1F:DB:20:54:54:3E:CE:0E:E0:7A:69:F6:9A:B9:7A:1C
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 019D3AC1261A02F65F159B1ED86BBDF08E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 0FC5
Signing time: Sun 29 Mar 2026 18:00:29 +0000
Manifest this update: Sun 29 Mar 2026 18:00:29 +0000
Manifest next update: Mon 30 Mar 2026 18:00:29 +0000
Files and hashes: 1: itWusIN94AA9QuorHUE-V0qTTz4.roa (hash: jBKg0DWZPFPz9Fg2hbC6xtgEN7u3Z3HtMYTfp3owGw0=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: Ju7jwWFzR5fuMewKQ6moR0daPaQ9QhQrJhc7v8PDOn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:26:1a:02:f6:5f:15:9b:1e:d8:6b:bd:f0:8e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Mar 29 18:00:29 2026 GMT
Not After : Mar 30 18:00:29 2026 GMT
Subject: CN=1c291bfc1fdb2054543ece0ee07a69f69ab97a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:51:f5:17:c6:98:38:f2:3c:d8:51:4d:35:
dd:88:eb:a4:0f:4d:74:4f:db:07:3d:5d:2f:86:55:
1c:d8:c5:8c:1c:29:d2:b0:a6:b9:8b:d6:71:91:ab:
39:6e:75:68:4c:fe:2c:c3:e7:c9:3f:6d:2c:b3:5d:
3f:87:0f:f3:d7:aa:08:34:b1:b0:3b:18:1b:99:83:
6f:88:9c:df:b3:6d:4f:61:b3:ae:73:df:86:fe:ca:
9f:58:6b:74:24:dd:db:e9:c3:8d:1e:e3:23:2b:b0:
83:4e:37:43:32:5c:f2:8f:37:2f:64:e8:21:a6:83:
6c:8a:26:67:b1:51:ba:6b:64:18:ee:56:17:a4:d7:
81:6a:29:5f:cb:6a:d1:f1:59:c3:51:63:b5:fc:81:
9e:05:82:a8:1e:bd:95:3b:03:6b:df:2a:43:37:52:
f4:df:eb:10:8e:ca:1d:98:75:e9:00:56:d1:0f:4a:
70:d8:90:be:89:a2:83:fd:6b:77:27:84:50:c9:d1:
88:9d:14:cc:ac:1a:f4:64:b5:42:ed:a6:75:05:32:
ec:12:8f:75:b3:d8:01:c5:fd:48:48:14:0c:48:02:
bd:dd:0b:9f:51:f7:b7:c5:61:87:6d:d6:da:a4:82:
c7:0f:dd:31:ec:fd:c2:53:3f:73:2e:ac:0c:59:b7:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:29:1B:FC:1F:DB:20:54:54:3E:CE:0E:E0:7A:69:F6:9A:B9:7A:1C
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:18:65:09:71:2c:3b:64:48:bd:2c:74:b3:51:76:95:4a:20:
45:96:d7:eb:4f:12:27:94:99:30:1e:e5:7d:b0:8e:6f:5c:fe:
66:44:19:88:a7:2d:95:ea:43:e0:e6:54:8b:32:66:8f:5d:d6:
8e:12:0e:34:24:de:a6:90:d5:95:d3:48:2b:d8:9d:10:17:66:
f4:bd:db:66:53:ca:34:c2:71:93:01:a0:56:b2:e5:d6:35:8a:
a7:79:e3:cd:1d:ff:dd:3e:11:8e:62:5c:14:e1:f1:97:be:d8:
87:8b:d7:62:f0:e8:fb:3e:41:02:12:0d:14:8e:7c:e4:36:1b:
f1:75:78:7c:f1:b7:6c:a7:bb:0b:34:2a:ef:f9:6d:c5:d8:4e:
d8:4b:3f:0f:a7:2c:bf:51:ce:a4:88:5a:87:c7:cf:06:50:02:
4d:94:aa:10:ab:17:69:4b:95:4a:f2:d3:42:45:f5:ce:c9:3d:
ff:68:b9:a1:41:ae:1f:fc:aa:f9:63:6b:99:6e:dc:6d:bc:89:
4f:bf:d7:24:9b:32:7c:3c:b5:ca:f5:22:04:fa:36:c8:87:f4:
0b:21:c0:83:d2:29:1e:ba:31:e7:f1:58:a8:67:26:59:f0:25:
5f:64:a8:44:fd:68:a1:5e:92:00:c4:ae:ad:fa:e4:3c:c7:7c:
7e:6f:f2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:11:16 2026 by rpki-client