Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: fcy1WSf+lijE7qo9lT5Po0C5cM+jQ8IqF0ND5N1EzS8=
Subject key identifier: 2E:C6:D2:F8:87:48:2A:D7:CD:1A:24:B7:D4:4C:4C:CD:3C:A5:73:ED
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 01A1420314387C5D98F84290EA14A0A8D00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 1AA7
Signing time: Fri 16 Oct 2026 00:01:00 +0000
Manifest this update: Fri 16 Oct 2026 00:01:00 +0000
Manifest next update: Sat 17 Oct 2026 00:01:00 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: yv8kMDgrvLIWqLuetY4Hm/RPY4WL/fwhZrrQvduu9vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:03:14:38:7c:5d:98:f8:42:90:ea:14:a0:a8:d0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Oct 16 00:01:00 2026 GMT
Not After : Oct 17 00:01:00 2026 GMT
Subject: CN=2ec6d2f887482ad7cd1a24b7d44c4ccd3ca573ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:43:e3:75:5f:be:17:bc:5d:76:bb:08:9e:
35:ce:00:fc:b1:67:bc:ab:c0:ad:93:4b:96:be:a4:
e7:f0:1d:44:21:d5:64:3e:25:e9:4a:07:80:8b:78:
ad:0b:87:50:60:c7:8b:89:b1:13:36:15:36:68:63:
75:48:ce:60:c6:89:3b:86:ec:78:32:aa:4e:81:c4:
08:46:58:f7:ef:3a:4f:60:db:57:04:b6:ea:73:ae:
18:86:01:d9:40:02:c7:d9:a2:8e:fc:ad:d9:46:e4:
d9:b1:60:36:cf:bf:f9:66:c9:79:2b:d9:c8:6c:e3:
36:a9:ec:93:93:f2:48:8e:fd:83:07:95:10:86:c0:
b4:85:88:ab:0a:1d:1b:34:ae:0d:84:ce:1d:3b:5f:
1e:41:4b:cc:e8:d0:c7:7e:ca:e3:00:cd:c4:06:da:
45:24:0b:2c:1f:fe:5b:f5:8d:92:f1:5c:a9:68:63:
9c:d7:58:1e:03:37:8f:70:ac:9f:39:e2:5d:0d:62:
1d:41:bc:ce:e9:6b:ac:7d:d9:0f:a3:61:18:42:8c:
e2:eb:7e:d4:15:48:2f:83:60:35:7c:35:01:54:58:
2d:46:a0:0d:b7:66:28:10:1e:f1:24:cd:3f:c0:69:
0d:bc:7e:01:05:51:fb:82:7b:d0:6d:74:49:58:3a:
49:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C6:D2:F8:87:48:2A:D7:CD:1A:24:B7:D4:4C:4C:CD:3C:A5:73:ED
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e9:a0:02:07:20:c1:b2:e8:94:d6:9f:e4:42:50:f8:16:84:
4f:e6:b0:83:32:01:39:b8:e5:54:d1:51:97:3c:8d:77:c5:b2:
fa:5f:3b:88:97:45:3d:5d:49:10:78:50:8d:fc:85:7f:94:cf:
8f:25:b3:eb:a9:ab:63:7e:67:62:ca:be:67:f4:07:f2:86:85:
55:b2:1b:5e:c7:a1:de:3c:d4:8c:fc:d9:ee:a2:4e:e0:6a:20:
8e:e1:3b:91:87:48:09:60:3a:93:60:7f:83:84:cd:56:b4:8a:
9d:06:6b:a9:18:db:c5:c3:cb:82:b4:90:d1:ba:bc:bc:7e:ed:
65:96:23:f6:24:5b:f6:ea:65:4d:99:40:3a:6b:aa:bf:81:66:
54:87:4f:85:1a:0a:65:90:07:fc:02:24:d0:60:05:a8:77:7d:
1c:62:01:39:8d:75:23:84:7d:4c:88:64:96:52:79:75:11:2c:
ab:4d:08:f4:f2:f9:c0:c5:27:06:4f:ec:46:95:69:fb:cb:7b:
21:12:59:fe:d9:34:35:e0:e8:bd:88:7d:20:8a:ef:7d:18:cb:
39:47:91:ac:26:fa:af:6b:b9:e9:10:8d:e4:cf:a0:39:64:b8:
dc:e9:2f:7a:cf:ec:34:05:21:41:3c:4e:07:59:c3:c3:62:26:
61:1c:5e:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFCAxQ4fF2Y+EKQ6hSgqNAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMTczZThhODI3ZTYzNmM0ZjI1MWVmMzYzYmQ5NGVhOTBh
MDRjYmYwHhcNMjYxMDE2MDAwMTAwWhcNMjYxMDE3MDAwMTAwWjAzMTEwLwYDVQQD
EygyZWM2ZDJmODg3NDgyYWQ3Y2QxYTI0YjdkNDRjNGNjZDNjYTU3M2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmVD43Vfvhe8XXa7CJ41zgD8sWe8
q8Ctk0uWvqTn8B1EIdVkPiXpSgeAi3itC4dQYMeLibETNhU2aGN1SM5gxok7hux4
MqpOgcQIRlj37zpPYNtXBLbqc64YhgHZQALH2aKO/K3ZRuTZsWA2z7/5Zsl5K9nI
bOM2qeyTk/JIjv2DB5UQhsC0hYirCh0bNK4NhM4dO18eQUvM6NDHfsrjAM3EBtpF
JAssH/5b9Y2S8VypaGOc11geAzePcKyfOeJdDWIdQbzO6WusfdkPo2EYQozi637U
FUgvg2A1fDUBVFgtRqANt2YoEB7xJM0/wGkNvH4BBVH7gnvQbXRJWDpJZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7G0viHSCrXzRokt9RMTM08pXPtMB8GA1UdIwQY
MBaAFMsXPoqCfmNsTyUe82O9lOqQoEy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgt
NWM3ODYzOTI2NGFhLzEveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgtNWM3ODYzOTI2NGFh
LzEveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABumgAgcg
wbLolNaf5EJQ+BaET+awgzIBObjlVNFRlzyNd8Wy+l87iJdFPV1JEHhQjfyFf5TP
jyWz66mrY35nYsq+Z/QH8oaFVbIbXseh3jzUjPzZ7qJO4GogjuE7kYdICWA6k2B/
g4TNVrSKnQZrqRjbxcPLgrSQ0bq8vH7tZZYj9iRb9uplTZlAOmuqv4FmVIdPhRoK
ZZAH/AIk0GAFqHd9HGIBOY11I4R9TIhkllJ5dREsq00I9PL5wMUnBk/sRpVp+8t7
IRJZ/tk0NeDovYh9IIrvfRjLOUeRrCb6r2u56RCN5M+gOWS43Okves/sNAUhQTxO
B1nDw2ImYRxedA==
-----END CERTIFICATE-----
Generated at Fri Oct 16 10:56:21 2026 by rpki-client