Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: PD+DiheW8w9wdZloKwenJnYSnQ3ymPg2y9ziHzj1qPY=
Subject key identifier: BE:B6:8E:20:D9:2E:FD:6B:91:51:E0:FB:91:24:B7:0E:B8:20:42:84
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 019FAC770124C21FF673152F832EA8248C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 1109
Signing time: Wed 29 Jul 2026 06:01:47 +0000
Manifest this update: Wed 29 Jul 2026 06:01:47 +0000
Manifest next update: Thu 30 Jul 2026 06:01:47 +0000
Files and hashes: 1: itWusIN94AA9QuorHUE-V0qTTz4.roa (hash: jBKg0DWZPFPz9Fg2hbC6xtgEN7u3Z3HtMYTfp3owGw0=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: WVslcV0wq6lCXNFahkGfJKlXzrOOTl6f31uhdzoTZt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:01:24:c2:1f:f6:73:15:2f:83:2e:a8:24:8c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Jul 29 06:01:47 2026 GMT
Not After : Jul 30 06:01:47 2026 GMT
Subject: CN=beb68e20d92efd6b9151e0fb9124b70eb8204284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:41:d8:97:87:5e:4e:d7:3d:e7:b4:84:d3:
41:f6:4c:71:e9:67:d6:80:9c:73:29:ba:94:3d:f7:
22:f8:d2:2e:ad:b9:47:d9:ba:35:83:89:c9:0b:b4:
46:1c:2a:b3:00:ad:4e:59:88:1b:18:7b:7e:01:98:
c9:aa:fe:5d:95:08:32:bb:e9:00:9e:5a:0e:91:37:
30:35:d2:03:62:79:cb:ba:38:cb:8e:26:76:a9:3f:
8d:69:b5:68:44:d9:7d:1e:6a:34:65:cb:8d:8d:8a:
70:a9:c0:67:89:eb:22:e6:11:f9:c2:71:a3:a1:6c:
48:ca:56:61:ea:b4:a3:68:c2:88:1e:dd:54:22:c3:
9b:6b:da:eb:cc:b5:8a:87:43:56:b7:b9:04:3a:78:
ab:bd:c2:b9:6f:17:54:ca:e6:22:1d:ff:b6:f6:2c:
47:af:54:cb:9f:30:cb:69:06:63:25:7c:21:73:09:
a2:a8:d1:e7:cd:0d:0d:d9:f8:71:da:ff:06:e5:e1:
9a:74:06:96:af:a8:57:1f:76:7a:d1:9d:ea:06:4d:
24:87:59:80:93:a2:31:73:f9:d6:bd:da:d8:08:4c:
e8:31:55:ea:b2:55:8f:65:cc:62:02:df:14:86:ef:
34:d1:d7:13:25:0d:51:9e:e3:fc:97:80:79:63:78:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B6:8E:20:D9:2E:FD:6B:91:51:E0:FB:91:24:B7:0E:B8:20:42:84
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:28:e6:c1:1b:e3:4c:10:18:47:5f:ea:af:b8:33:c7:ca:9b:
df:37:cd:88:37:43:eb:46:e2:a3:56:77:23:94:00:03:9e:0e:
c2:e2:5b:b1:05:12:f6:18:2e:76:12:d5:42:05:71:24:77:42:
06:38:f2:b4:bd:67:fd:4c:6c:b9:0c:e1:bf:7b:47:e2:52:d7:
83:55:b7:b9:45:83:d7:32:59:a6:97:83:51:1c:ba:81:d8:82:
bb:21:33:7c:ca:57:2f:5a:de:d5:69:fc:09:e7:1f:99:c1:a5:
bf:fd:dd:e4:98:73:c8:aa:49:2f:30:51:21:3a:fd:48:60:0b:
b1:70:30:ff:8a:8f:a5:8c:cf:6e:49:50:d0:4c:f6:cb:10:d0:
95:ac:fd:18:b1:b3:8f:8d:27:3f:d9:91:0b:7b:ef:c2:f5:2d:
97:b8:ec:57:c2:03:80:2a:74:df:5e:f9:ef:96:ae:97:d3:74:
af:27:28:2b:61:10:56:d7:f3:0a:43:fb:c3:56:d6:75:b3:47:
65:dc:f5:7e:36:ee:fe:dd:d8:fe:f3:4f:97:1c:70:2d:1f:0f:
67:e0:b9:d1:78:8d:53:a4:50:09:2e:e5:da:49:17:98:cc:ec:
67:e4:b5:a7:c6:21:bc:b0:47:5f:3c:4e:e4:bc:5a:69:04:45:
c5:63:11:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:49:15 2026 by rpki-client