Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: ioHkQ2mTwVzA5yrC2GcmTYWh1pfO+3PyxwVi716D5AU=
Subject key identifier: 90:F1:AC:13:4B:AA:5B:42:E0:2C:95:3D:AB:BC:74:6E:41:7A:44:67
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 019D9B5054304156BF56D921E464E3638D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 12:00:25 +0000
Manifest this update: Fri 17 Apr 2026 12:00:25 +0000
Manifest next update: Sat 18 Apr 2026 12:00:25 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: a+NO2rPkeQcNBuDHbw3G7VsUnEiz4ipuOeUTw//MRIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:54:30:41:56:bf:56:d9:21:e4:64:e3:63:8d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Apr 17 12:00:25 2026 GMT
Not After : Apr 18 12:00:25 2026 GMT
Subject: CN=90f1ac134baa5b42e02c953dabbc746e417a4467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:d8:c4:49:a5:4d:a5:3d:2b:1d:79:1d:dd:
35:22:e9:3a:ad:0d:f1:11:df:81:d5:0a:88:59:7d:
b6:0d:70:4c:40:a9:c5:73:68:a6:12:84:cf:11:f6:
93:da:9b:6c:d8:b1:28:0d:24:14:4f:a0:e8:7f:c0:
aa:02:6d:36:24:1f:8c:c8:cd:a1:13:3a:2f:2c:17:
0f:c4:2c:f9:d7:15:3a:c1:a8:3f:be:99:d3:fb:13:
2d:89:3f:63:f0:47:ca:75:f2:d9:a2:79:12:cc:16:
0b:c6:dd:1c:0c:54:b9:49:2e:6b:74:16:a4:27:33:
84:33:4e:9b:f7:4d:d8:3a:ec:e2:c1:e8:c1:fb:17:
16:69:57:f0:59:f0:48:02:f7:1b:0e:0b:3d:e6:ff:
c6:a7:8a:e7:e1:15:5f:c5:d0:27:6b:ac:83:66:ab:
69:b0:d8:9f:ad:9a:e9:93:49:64:1f:f3:bb:c9:d6:
b7:fb:99:6c:11:e8:4f:fb:f9:f7:67:f9:dc:5c:b8:
d9:7e:0e:58:2e:97:54:6b:74:ae:12:f2:53:db:04:
99:5b:64:85:7a:69:19:53:5f:7e:d9:99:9f:38:00:
a3:75:e1:f3:c9:9c:b4:c3:07:e8:6b:06:73:e4:d6:
d2:8c:5c:50:3e:ed:6e:a9:e9:b6:0e:71:c5:9f:7b:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F1:AC:13:4B:AA:5B:42:E0:2C:95:3D:AB:BC:74:6E:41:7A:44:67
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a0:4a:89:e5:24:88:3a:85:be:2c:dc:66:e0:64:71:08:5f:
39:7d:2e:33:a4:60:88:46:02:50:0e:ca:b9:34:51:71:a9:89:
40:da:36:ad:e0:2a:0a:1e:69:b7:69:55:56:56:29:cc:f3:42:
c0:66:30:3d:13:43:c9:c9:44:6e:e3:76:be:a9:79:51:cc:a8:
79:7a:07:47:2e:a8:5a:c6:b9:f8:37:55:4f:a4:34:76:fa:15:
07:6a:d1:89:d3:3b:2f:27:1e:7d:e1:65:d7:30:67:f7:2e:52:
e6:98:73:d5:df:4f:2e:f8:05:76:a1:73:70:f4:05:b4:94:95:
fb:19:68:87:7b:d0:6e:ae:bf:87:d0:14:dd:5a:2d:b8:61:e8:
42:ce:d3:2b:54:21:93:f2:d4:d7:cf:43:2d:d0:46:70:7d:db:
0c:c0:68:bd:d9:d2:08:96:27:67:b0:50:fd:39:ea:d2:f6:ce:
da:57:1e:aa:8c:9d:f1:15:10:eb:d3:6e:f5:8b:06:5b:4e:ba:
33:08:71:fa:c3:1b:76:6f:6c:27:d0:14:31:95:a9:36:25:bc:
db:13:02:51:58:d3:d2:e2:9e:e8:75:0b:16:4f:83:5c:64:06:
68:75:ab:f7:c5:58:95:5f:b3:ed:0a:c2:73:00:c1:80:ba:39:
5e:39:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:28 2026 by rpki-client