Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: Plz8E5qrHAlmVu6ae0WsBCtjo8ubdeEGPcyvPMnXiZ8=
Subject key identifier: B8:54:0B:9C:C7:F7:20:FF:E9:7B:DF:99:C2:CE:0D:79:22:59:22:BC
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 019D9B5142728E9380B17806A0504205AF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 0FF7
Signing time: Fri 17 Apr 2026 12:01:26 +0000
Manifest this update: Fri 17 Apr 2026 12:01:26 +0000
Manifest next update: Sat 18 Apr 2026 12:01:26 +0000
Files and hashes: 1: itWusIN94AA9QuorHUE-V0qTTz4.roa (hash: jBKg0DWZPFPz9Fg2hbC6xtgEN7u3Z3HtMYTfp3owGw0=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: 5ca7jIhK5mFGirMK0btXrX5bHdgLXEB5LlrBonIuzuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:42:72:8e:93:80:b1:78:06:a0:50:42:05:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Apr 17 12:01:26 2026 GMT
Not After : Apr 18 12:01:26 2026 GMT
Subject: CN=b8540b9cc7f720ffe97bdf99c2ce0d79225922bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:9d:42:d2:16:16:bc:91:8e:b9:58:b4:f0:
97:87:6f:f2:71:cf:92:b1:f5:18:31:eb:bb:88:14:
1e:3c:3d:20:fb:c9:73:c2:09:0b:b1:18:22:b6:b4:
06:5b:12:dd:ae:bd:42:5c:7b:bd:d5:0f:65:96:83:
04:09:e7:88:e1:12:9c:92:ca:5c:f0:d9:ec:77:68:
19:cb:75:fc:5e:bb:cd:07:bb:88:26:44:b4:a0:a2:
70:38:af:7c:55:9c:42:61:88:af:a4:b8:b6:56:d6:
2f:e1:25:3e:b4:a8:06:ad:e8:d1:04:dc:4a:51:22:
bd:a7:d5:6a:c9:8e:5a:f9:83:57:e0:04:49:2b:d5:
6e:50:2f:ff:69:70:5e:61:39:b3:c0:bd:98:ff:6e:
9d:04:6d:50:57:21:27:88:3c:6d:a7:05:79:a6:33:
6f:38:05:44:bd:0d:a8:0e:b5:70:ad:3d:02:2f:09:
20:8d:0c:4e:b2:2a:0b:13:3b:76:af:34:d7:fa:95:
6e:4f:f0:33:07:c6:c8:83:b6:17:8f:8e:02:71:21:
23:0b:5c:5e:85:18:8c:96:46:dc:96:7e:61:1d:8d:
8d:af:f4:58:c9:81:8c:55:96:b2:da:51:25:1d:92:
8d:48:f3:dc:d7:93:e3:9b:3a:21:be:f4:f1:df:2c:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:54:0B:9C:C7:F7:20:FF:E9:7B:DF:99:C2:CE:0D:79:22:59:22:BC
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:03:27:fc:41:60:b3:ab:07:05:93:a5:dc:8d:f8:f3:1f:27:
e0:f3:e4:93:ed:41:77:c8:6e:ec:0e:e0:46:c7:8f:ce:36:6c:
a9:b5:66:1b:03:0e:14:05:27:e8:44:97:3d:6b:0a:1a:be:1b:
f8:09:80:a2:b3:a5:5b:6c:b1:1a:3e:54:ef:22:b7:6d:95:16:
fc:4d:67:92:77:46:97:df:b9:e9:a8:d7:cc:63:c5:3c:bc:94:
51:dc:08:1a:11:26:1a:89:19:36:e9:5d:86:ec:84:19:1b:dc:
71:27:fc:ac:1a:30:0f:d4:ba:3a:d8:2a:28:d5:0c:1f:10:51:
47:e3:8a:16:52:36:91:20:a0:be:f6:59:98:14:22:af:6e:b2:
65:ae:08:93:23:d0:d6:95:81:48:9b:71:5d:98:3a:be:9b:3e:
ee:a0:d9:41:f9:9f:3d:6f:f0:bb:93:17:ff:d1:41:d1:22:07:
26:31:5e:a4:f7:50:d6:25:3a:5a:de:3f:16:97:23:9f:91:f3:
e3:18:78:66:ba:5e:cb:96:2d:08:40:98:dc:b1:b1:51:9f:3d:
a0:b4:71:a0:12:40:3d:e3:aa:5c:78:3c:0f:fa:a0:f2:a7:9c:
a4:a6:c7:fc:cf:5c:45:5e:1b:11:39:51:5f:bb:c4:f2:36:85:
7c:20:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:06 2026 by rpki-client