Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: /7gQC9Xq1knKrbLLq+U6VRhwGFHCcERJ3+mHfbAj0lc=
Subject key identifier: 01:B0:94:7D:2B:5F:4F:49:81:DC:52:39:63:1D:A3:AB:51:4A:4F:BD
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 019CADC78D5959FEF034B4C4F59358FE62F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 09:01:01 +0000
Manifest this update: Mon 02 Mar 2026 09:01:01 +0000
Manifest next update: Tue 03 Mar 2026 09:01:01 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: R4qfuQ45en3c7nMfo0ZpNE7l3W+1Je0cDBAU7B9UOF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:8d:59:59:fe:f0:34:b4:c4:f5:93:58:fe:62:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Mar 2 09:01:01 2026 GMT
Not After : Mar 3 09:01:01 2026 GMT
Subject: CN=01b0947d2b5f4f4981dc5239631da3ab514a4fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:30:ba:b4:39:6d:73:9d:30:9e:8a:73:3c:
a6:aa:f5:78:e9:96:87:5b:72:e9:45:e4:7a:12:8d:
6e:cc:0d:29:6d:89:a7:d8:0f:06:47:87:83:ff:9e:
c8:ff:2c:eb:c6:57:09:86:fc:73:b7:13:86:79:f1:
42:9f:06:17:ea:a3:88:b7:54:44:13:89:fa:7a:88:
25:a9:5c:f7:3c:a4:a9:8b:74:ae:29:14:3d:16:4d:
17:34:58:65:06:fa:05:ff:8c:7c:25:b8:77:03:f5:
ab:e8:f0:2a:8f:b9:65:b0:15:26:14:ae:5c:33:0f:
b8:84:1c:89:14:5e:86:ff:bb:f1:d3:3e:ca:5e:87:
77:87:3c:e7:b3:3a:83:65:bb:50:fd:02:1d:30:6e:
a9:f5:99:60:98:df:67:be:63:ff:8b:6e:aa:ac:03:
b6:b1:c7:3c:65:99:71:2e:39:4f:5d:24:55:38:2e:
89:82:48:8a:5d:e5:99:7f:21:98:71:b5:2c:a2:30:
96:53:ab:6b:a5:33:5d:d8:3d:05:b2:79:a2:93:1e:
26:9b:57:e4:2e:11:b8:7e:83:fa:ec:e1:c3:d0:9e:
04:19:4c:cd:97:ae:2f:e9:5a:19:4a:23:79:fb:95:
b8:f9:ad:10:6f:e3:49:cc:63:36:37:f1:61:18:34:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:94:7D:2B:5F:4F:49:81:DC:52:39:63:1D:A3:AB:51:4A:4F:BD
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e2:9c:30:71:28:09:97:6f:d2:34:5f:8c:fa:1d:ed:b1:2a:
3a:13:db:15:66:38:d0:d4:a0:55:86:17:56:00:24:6c:b8:f3:
79:d5:e4:96:1a:8a:64:62:9a:81:9d:09:c8:12:ec:13:fc:92:
2c:72:56:92:ef:4d:9c:dc:4c:5c:b5:fb:a1:b8:55:75:5e:f4:
d4:08:79:60:3a:a5:10:07:a8:e1:52:c1:06:87:08:94:d0:b0:
7f:b0:00:6b:1f:76:b1:64:b8:03:14:81:41:4f:57:e9:33:c6:
82:db:7c:75:f4:c2:20:7e:5a:43:53:22:a0:61:27:78:44:db:
df:01:31:02:e1:71:89:d5:29:20:87:33:55:4c:ad:f2:45:21:
23:8b:14:b7:eb:b7:04:ea:8a:e1:d5:2c:d7:7f:29:38:9b:7d:
63:62:e0:f3:2d:70:fb:83:ce:00:49:4b:67:c0:0c:d6:b6:7a:
e8:c6:c9:33:24:7e:a6:23:7c:33:37:e6:ee:fa:ea:97:16:21:
76:e2:30:34:32:00:6f:5d:56:50:75:aa:ff:13:2f:d4:0d:f5:
de:93:6d:61:7e:d5:d9:8b:b1:cc:09:c5:e4:9c:e2:b0:8d:7d:
98:2a:b4:39:d0:5a:fc:dc:f2:f4:5b:29:a9:72:6c:f4:59:56:
00:0f:10:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:46 2026 by rpki-client