Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: SoGmbcVO6OBFXYrVxLMDWtAJjMnEdp0jw001iN0+euI=
Subject key identifier: 26:30:0F:0E:95:D1:A8:29:C8:33:52:9F:67:5E:87:AD:A8:35:E4:87
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 019CABD917FDC93DC9E260C73D521A41EEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 0F7B
Signing time: Mon 02 Mar 2026 00:00:57 +0000
Manifest this update: Mon 02 Mar 2026 00:00:57 +0000
Manifest next update: Tue 03 Mar 2026 00:00:57 +0000
Files and hashes: 1: itWusIN94AA9QuorHUE-V0qTTz4.roa (hash: jBKg0DWZPFPz9Fg2hbC6xtgEN7u3Z3HtMYTfp3owGw0=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: 9CMDGI6lv0Qs/zBXaFSo7Cnl6Wlz7t1gIm9IGYRgeFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:17:fd:c9:3d:c9:e2:60:c7:3d:52:1a:41:ee:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Mar 2 00:00:57 2026 GMT
Not After : Mar 3 00:00:57 2026 GMT
Subject: CN=26300f0e95d1a829c833529f675e87ada835e487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:45:a1:14:a2:80:03:dd:5b:11:80:d7:fd:
c2:61:af:2d:92:bf:35:4e:90:de:fc:61:bf:e0:ad:
e7:77:da:6c:02:76:c1:d7:8c:d3:67:b8:e8:5b:ea:
1e:f8:5c:e5:37:5e:d8:ed:b0:2f:a4:0f:cd:9f:e5:
2e:8b:53:f0:45:db:d4:50:24:2c:0c:f9:9c:82:78:
97:1f:d9:a7:fd:3d:ea:2c:47:74:38:14:f5:9f:93:
17:7d:af:cd:52:c4:6a:3d:4a:e7:e7:4e:d7:ab:79:
94:cd:8a:bc:d6:a9:84:24:76:8d:f5:0e:8a:25:5c:
c4:ba:54:20:2a:36:8e:5a:92:97:4f:82:3d:7c:fe:
81:1d:2e:62:81:d6:11:7e:f9:76:ec:66:b7:1d:b0:
f0:be:31:93:cd:c4:b1:98:77:71:d3:a7:36:3c:a6:
5a:49:1f:09:8b:e9:1c:12:ae:bd:65:ec:74:b9:7d:
dd:d4:1e:0d:fd:d0:d2:89:e6:b9:54:71:6e:99:9b:
1a:6e:73:5e:88:5a:b4:d0:e0:46:e6:67:ce:21:70:
e3:33:0f:3b:9d:5d:db:b8:d1:66:09:1e:90:8f:a7:
e3:6a:c6:48:22:c9:6e:70:aa:f0:73:e1:96:9b:fa:
be:15:80:eb:81:4a:f1:36:15:6b:9b:94:df:11:25:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:30:0F:0E:95:D1:A8:29:C8:33:52:9F:67:5E:87:AD:A8:35:E4:87
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:10:4a:88:90:78:a1:c9:ac:58:a4:a8:5b:50:28:1a:7c:5e:
9b:96:ee:a8:c0:16:66:12:ad:cb:42:9c:2c:be:b2:04:c4:ce:
23:5b:86:0f:1d:15:7f:96:18:29:38:4f:dd:62:51:e4:22:c4:
a7:7b:83:82:14:fb:f9:48:aa:f7:34:cf:90:61:df:c2:61:bb:
70:fa:3b:c3:39:0a:6f:76:14:97:3a:26:fe:bc:f9:80:76:d7:
9e:37:a5:11:4e:3b:c2:26:ed:f9:d1:cf:8c:d3:0b:09:da:39:
5f:00:79:4a:6b:d9:d0:ac:33:c2:4c:cb:6a:aa:d7:16:a3:bd:
a5:e7:31:2d:24:ae:ab:9a:31:09:f0:b4:9d:ff:25:e2:42:db:
e7:0a:d3:48:88:d9:43:89:5b:b7:16:2c:34:09:83:5b:34:c5:
c0:4d:43:42:51:34:e1:ee:b4:73:74:a6:9a:d9:b8:88:de:cf:
73:e3:1c:1c:17:1f:3e:2b:6b:1b:bf:cc:cb:3c:e5:7a:a5:76:
97:84:a1:4c:bc:57:5d:cc:9e:eb:f2:c3:18:9c:00:f0:c9:cc:
e6:c7:88:58:5e:13:d4:64:d1:74:02:ff:e6:f9:dd:f6:61:1a:
e7:47:e6:19:f3:a7:62:20:d8:c7:c3:19:0a:64:05:da:38:9f:
2e:ee:81:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Rf9yT3J4mDHPVIaQe6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWQ3ZWZkNmJhY2Y0MmYxNDVkZjRkNTI4YjBhODMyMGZm
YzM3YjkwHhcNMjYwMzAyMDAwMDU3WhcNMjYwMzAzMDAwMDU3WjAzMTEwLwYDVQQD
EygyNjMwMGYwZTk1ZDFhODI5YzgzMzUyOWY2NzVlODdhZGE4MzVlNDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkJFoRSigAPdWxGA1/3CYa8tkr81
TpDe/GG/4K3nd9psAnbB14zTZ7joW+oe+FzlN17Y7bAvpA/Nn+Uui1PwRdvUUCQs
DPmcgniXH9mn/T3qLEd0OBT1n5MXfa/NUsRqPUrn507Xq3mUzYq81qmEJHaN9Q6K
JVzEulQgKjaOWpKXT4I9fP6BHS5igdYRfvl27Ga3HbDwvjGTzcSxmHdx06c2PKZa
SR8Ji+kcEq69Zex0uX3d1B4N/dDSiea5VHFumZsabnNeiFq00OBG5mfOIXDjMw87
nV3buNFmCR6Qj6fjasZIIslucKrwc+GWm/q+FYDrgUrxNhVrm5TfESVLGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYwDw6V0agpyDNSn2deh62oNeSHMB8GA1UdIwQY
MBaAFMsdfv1rrPQvFF301SiwqDIP/De5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODct
OTlmNjgzMjA2Mzg4LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODctOTlmNjgzMjA2Mzg4
LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURBKiJB4
ocmsWKSoW1AoGnxem5buqMAWZhKty0KcLL6yBMTOI1uGDx0Vf5YYKThP3WJR5CLE
p3uDghT7+Uiq9zTPkGHfwmG7cPo7wzkKb3YUlzom/rz5gHbXnjelEU47wibt+dHP
jNMLCdo5XwB5SmvZ0KwzwkzLaqrXFqO9pecxLSSuq5oxCfC0nf8l4kLb5wrTSIjZ
Q4lbtxYsNAmDWzTFwE1DQlE04e60c3Smmtm4iN7Pc+McHBcfPitrG7/MyzzleqV2
l4ShTLxXXcye6/LDGJwA8MnM5seIWF4T1GTRdAL/5vnd9mEa50fmGfOnYiDYx8MZ
CmQF2jifLu6BtA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:19 2026 by rpki-client