Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: SAIBeZdkJr/wv9gxXBpWyJh4zNVT4XZ4u4BG0JNiE6k=
Subject key identifier: 18:03:03:A7:C2:5C:E4:15:07:56:11:39:5D:D0:8E:6D:10:F9:EB:9E
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 019FAA881D7FBA7969E70107852E6E077713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 21:01:14 +0000
Manifest this update: Tue 28 Jul 2026 21:01:14 +0000
Manifest next update: Wed 29 Jul 2026 21:01:14 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: 8PhketIz+lKdIhvieHEOcLxYBhqoPw1gsvfweUxaZR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:1d:7f:ba:79:69:e7:01:07:85:2e:6e:07:77:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Jul 28 21:01:14 2026 GMT
Not After : Jul 29 21:01:14 2026 GMT
Subject: CN=180303a7c25ce415075611395dd08e6d10f9eb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:65:e1:5a:f3:1f:01:e4:7e:fc:f5:a6:dd:
ac:b4:71:e3:f2:a8:0e:2d:6d:01:d0:68:35:39:3b:
2c:ed:03:54:cc:b2:1b:2c:17:d7:a8:aa:fa:b1:5b:
a0:ab:b7:e0:c0:2d:79:ab:db:98:e5:8a:6c:d7:ee:
db:56:58:cd:cc:60:d1:ee:16:52:2a:5f:40:aa:02:
30:65:0b:15:4d:82:9b:09:33:84:a5:1b:25:c7:ce:
25:df:c5:bb:66:6d:4a:e6:52:9a:87:42:62:b4:22:
65:a7:69:0f:11:75:79:8b:1a:4f:8b:68:60:78:25:
9c:00:5b:95:f9:97:20:f5:96:fc:7c:5e:87:aa:15:
7d:47:43:e0:44:5e:fb:39:e7:2e:d7:55:28:d4:9a:
f5:3e:ff:99:b3:52:bd:ba:36:d5:bd:5d:07:2e:46:
09:18:42:b7:a7:c6:35:d3:55:ae:cb:02:78:03:95:
89:e9:b8:93:1a:86:e5:5b:b6:7b:c3:63:86:59:dc:
31:b0:21:09:f3:99:62:27:af:64:a7:a1:24:2f:d3:
7b:63:a4:bd:d2:1c:f0:53:33:d8:50:8d:90:eb:30:
df:a4:97:4a:4d:3e:13:3a:6c:98:60:bc:ca:4b:39:
0e:e7:94:15:78:9e:02:8b:9a:13:05:d7:aa:e8:23:
b6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:03:03:A7:C2:5C:E4:15:07:56:11:39:5D:D0:8E:6D:10:F9:EB:9E
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:52:af:b2:a8:ef:64:5f:5c:00:72:2e:81:46:1f:80:a2:69:
fc:26:ac:6e:f0:69:b2:14:fa:5f:e6:24:57:e5:ba:01:25:b2:
00:aa:57:c4:6a:11:f9:17:ee:78:b7:6d:cb:17:06:05:6d:80:
83:ca:17:90:9b:ea:06:6e:00:71:8a:3a:17:29:08:1e:24:12:
f0:7b:17:fb:1d:70:0b:34:c8:d4:39:25:b8:cc:81:bd:84:a5:
07:a3:a6:d2:87:b1:e7:7c:6e:18:39:56:37:88:6b:83:f4:46:
83:e8:43:e4:e7:36:3b:f8:fb:13:8b:85:a0:6c:95:87:e0:30:
9d:61:91:d6:a9:4d:52:90:d5:0e:d1:50:84:4f:39:01:96:fc:
49:da:95:ba:10:b4:5d:71:40:fc:06:e4:f9:a8:0c:53:32:67:
0e:c6:fa:c0:a4:db:b0:1a:9c:32:31:ac:e8:af:34:f9:06:8b:
68:1f:82:99:aa:18:2d:aa:cf:19:4c:e7:86:60:e2:89:78:bc:
85:ad:de:0f:ec:44:e3:98:31:02:5c:54:d4:3d:63:fc:0e:6d:
d8:08:d6:4c:ab:30:38:cc:e4:26:a7:0f:f9:cb:11:ce:d0:6d:
20:19:da:a3:e7:20:d0:5c:0d:8f:31:3d:ea:70:f5:7a:84:d2:
9f:64:03:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:44:58 2026 by rpki-client