Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: SJXRyBGOa2kikYwvfHZthwCBIYD3UbqWIOb1oK/L0Bw=
Subject key identifier: 97:B4:C5:3D:AA:8E:CB:46:89:86:DB:39:1F:AF:B3:90:0B:92:46:DF
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 01A13A49BDEA492C1E2DD8A564CB5B23CCBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 1AA3
Signing time: Wed 14 Oct 2026 12:01:13 +0000
Manifest this update: Wed 14 Oct 2026 12:01:13 +0000
Manifest next update: Thu 15 Oct 2026 12:01:13 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: 0VtJ1SAYnjXBne+qfinnr2I7tqdjUCe6qI+sh9e2dQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:49:bd:ea:49:2c:1e:2d:d8:a5:64:cb:5b:23:cc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Oct 14 12:01:13 2026 GMT
Not After : Oct 15 12:01:13 2026 GMT
Subject: CN=97b4c53daa8ecb468986db391fafb3900b9246df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:bb:2a:01:97:82:12:09:ac:68:5d:30:4e:
61:25:df:bc:30:95:df:1c:61:ba:11:5f:eb:8f:84:
84:c7:36:c3:4e:b4:7a:73:60:e2:55:a2:4e:15:9f:
1c:75:86:98:69:03:1e:4b:5b:44:74:4f:70:6b:ed:
7d:8d:fb:ed:d7:84:2e:eb:ba:3e:89:c3:67:77:16:
b7:f0:67:b0:a9:ef:64:aa:71:fc:03:45:25:5f:21:
fe:b1:8d:89:a6:9b:c3:94:72:f0:51:2e:0e:55:cb:
30:f2:c8:11:62:e6:55:a9:08:86:9c:3d:69:01:d0:
21:b8:44:b2:c5:22:77:bb:1c:eb:29:8e:d4:59:a0:
05:02:f1:68:87:ae:f7:21:94:a4:73:5e:68:26:c7:
a2:8e:aa:f0:5b:5a:98:e8:86:ad:3b:0d:c9:60:13:
d4:fa:07:09:16:78:b6:0c:64:2d:71:47:5d:e8:f3:
0f:50:8e:4e:72:44:5e:f9:bd:9b:18:10:ed:8b:b1:
4d:7f:c9:80:d6:6e:f0:40:67:9c:9c:4b:9c:87:4b:
c9:55:79:c1:35:10:35:b3:9e:b2:fc:d2:a5:0f:5c:
28:d2:0c:3e:c6:4e:3b:e2:e7:c6:64:32:b5:5f:ca:
01:11:2c:dc:2e:ef:61:16:96:f3:41:64:e2:3b:32:
eb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B4:C5:3D:AA:8E:CB:46:89:86:DB:39:1F:AF:B3:90:0B:92:46:DF
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:11:f1:62:7b:de:78:e1:6d:e7:92:34:14:13:09:ac:ff:b1:
cf:cc:55:31:55:c8:74:5d:58:08:39:e8:a9:25:cd:0e:8f:a8:
76:7f:e4:bb:65:bf:31:68:de:06:c9:e5:42:1a:03:07:5e:52:
87:16:a2:40:4b:b9:82:e4:2c:dd:7e:dc:01:0b:2e:1e:94:30:
9e:d1:b4:14:13:98:bc:e2:78:79:b2:3d:a1:a2:36:95:12:3a:
3d:2b:a7:12:8d:69:e2:04:d5:f7:dd:3e:ac:31:44:cb:24:c9:
f2:96:be:f9:5d:c1:4c:b8:17:e9:20:f4:61:e6:44:c6:b7:6e:
86:b8:0b:d3:b8:c1:c4:58:25:2e:e7:cc:7c:1a:be:b8:ca:80:
97:d1:99:0d:57:be:96:a8:5a:e1:25:5d:b6:4c:96:6f:7f:7e:
e0:2b:d2:1f:75:72:73:25:8f:43:23:ce:06:26:94:9c:84:e2:
9b:11:dc:3a:c2:8a:66:77:5b:c6:a8:f6:a1:2f:bb:3e:84:51:
65:c7:74:c0:32:a1:d7:ab:95:ef:85:3d:b2:2e:e2:f9:a8:ca:
16:85:d7:c3:74:3f:72:48:bf:c2:3e:38:bb:5e:44:72:ae:08:
56:cc:77:7e:a6:24:a0:fb:97:e2:34:d6:12:9c:23:cd:fb:d7:
1b:be:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:01:43 2026 by rpki-client