Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: oNOT3JKdL4WHmSDx9Xca8seCiIx0fZjC0UOvwOCqjJ8=
Subject key identifier: 4D:76:8F:E2:1A:BC:2A:0E:EB:A0:CB:43:5B:BD:CD:9D:31:D7:6B:2E
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 019CAFB629226904F97573F92B1AE4F924B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 18:01:16 +0000
Manifest this update: Mon 02 Mar 2026 18:01:16 +0000
Manifest next update: Tue 03 Mar 2026 18:01:16 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: Xt/bPqVZr/2l7kiHXhjCNVow4BnTyJ5IeXtJNnCG6k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:29:22:69:04:f9:75:73:f9:2b:1a:e4:f9:24:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Mar 2 18:01:16 2026 GMT
Not After : Mar 3 18:01:16 2026 GMT
Subject: CN=4d768fe21abc2a0eeba0cb435bbdcd9d31d76b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:12:87:fa:1e:c3:5b:c6:a5:2f:84:4a:b3:
71:c8:94:8a:28:ed:f3:9c:ec:8b:94:12:0f:2d:db:
ab:fa:92:31:6c:ef:52:d5:26:7c:7c:4a:83:5d:78:
b9:f9:84:84:0c:73:7a:38:38:bb:7e:ca:8b:b5:72:
a2:5d:90:f3:7b:05:3f:bf:ea:a5:d7:ed:25:66:16:
19:82:40:8b:5d:8b:89:57:74:ee:2c:a6:e0:6f:88:
71:ae:01:8a:bd:da:a0:43:5f:69:01:91:3a:f9:08:
ab:37:ff:f8:06:e0:f5:57:2f:8b:93:e6:74:ee:dc:
ec:f0:af:6e:2a:d9:ff:94:7a:97:88:f1:94:1c:0d:
ad:27:48:6d:cd:68:e1:5d:83:c5:96:a8:da:4d:cf:
32:7c:8c:38:d6:44:78:72:74:cc:8e:c9:07:9a:6f:
cb:d4:a7:7c:1b:ef:1d:d7:0f:6e:dd:96:e1:e4:69:
e5:24:03:bf:ef:d9:da:a5:e1:6a:24:a8:18:e3:73:
27:07:aa:14:34:79:c4:d2:bc:db:f2:65:21:fd:83:
90:37:0f:c4:f0:aa:9c:28:da:c2:66:41:47:9b:de:
4b:9d:d1:1e:2d:75:5f:1e:26:42:8d:d7:9f:08:e8:
20:d7:0a:e0:94:2e:4d:fa:cd:54:eb:c9:fa:22:85:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:76:8F:E2:1A:BC:2A:0E:EB:A0:CB:43:5B:BD:CD:9D:31:D7:6B:2E
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:00:48:14:03:24:7d:63:ea:b7:02:c3:96:69:9f:f8:38:1f:
25:6b:b8:e3:fd:b3:3b:b8:3d:45:e2:19:17:ad:db:2e:20:85:
da:f4:8c:d3:43:21:4c:ea:78:62:b6:4a:a1:bb:41:2b:24:cd:
80:f2:b7:37:49:d3:9c:8b:c9:37:7f:61:66:f2:f0:56:66:97:
80:3c:39:08:8d:cc:d8:3a:05:bf:6f:8b:58:78:bd:7d:e0:8e:
6a:17:dd:4e:1b:76:8d:95:c3:17:df:d6:26:21:29:f7:7f:c7:
cc:e9:f0:a8:d6:b1:25:e7:56:9e:5e:bf:50:00:41:f4:e5:63:
b6:05:7c:66:b9:1a:ec:48:e6:e2:75:4f:06:83:d2:ac:57:ff:
1b:b2:01:c6:2a:0e:2f:07:a1:69:c4:b0:66:1e:69:9d:6f:ba:
66:2e:d0:26:07:02:90:90:1d:54:1a:5c:ab:c0:06:05:bc:b9:
e1:c5:62:b8:db:6b:f5:4b:12:6a:ff:9f:d7:e9:28:8b:12:08:
c2:75:b1:d9:69:af:02:f8:de:8c:62:cf:0f:b5:0a:06:e3:26:
1c:e4:9c:72:7f:ad:18:3d:7f:c8:f7:85:53:21:27:2f:d1:b1:
a0:95:67:02:6b:9c:9e:51:2c:89:bd:2a:20:69:3e:d4:ce:72:
fd:ae:fd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:48:29 2026 by rpki-client