Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: 6meXvJdplp8+QG4o6QPpdahrUP+5lGt2zc580oaaetI=
Subject key identifier: 59:CD:7E:EA:BE:7F:C5:83:CB:42:5A:8D:E7:70:AB:24:4B:52:1D:44
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 019D2B4EE93AF9917A524F5F63066CFCEAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 18:01:24 +0000
Manifest this update: Thu 26 Mar 2026 18:01:24 +0000
Manifest next update: Fri 27 Mar 2026 18:01:24 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: NMp+DdDZ2WSwcpyqmB+lzVMdeib/VbibiMwHD/WApiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:e9:3a:f9:91:7a:52:4f:5f:63:06:6c:fc:ea:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Mar 26 18:01:24 2026 GMT
Not After : Mar 27 18:01:24 2026 GMT
Subject: CN=59cd7eeabe7fc583cb425a8de770ab244b521d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:e7:a3:01:c2:dc:d7:64:df:b5:e2:b0:8b:
71:1f:90:7a:bc:c4:6c:78:18:01:10:4d:8b:a9:91:
f0:c3:0f:3b:f1:15:b6:88:96:95:e1:72:9a:e1:0f:
00:8a:2e:66:43:5d:1a:1c:75:80:39:44:33:df:a2:
2d:3f:f1:f8:09:09:70:e1:e4:a6:87:cf:1e:04:67:
97:2b:f3:f4:e1:74:71:2f:03:a7:0d:8f:cd:fc:89:
e0:a2:36:17:68:ee:04:3a:b9:f1:49:43:45:48:95:
0f:26:35:f9:36:b1:5f:93:dd:94:67:d0:6a:42:22:
a0:44:0a:b6:91:ab:94:ae:18:92:23:aa:12:19:7c:
5f:70:08:4c:53:dc:8d:ba:a5:12:43:88:02:16:02:
cd:36:f6:f2:f3:4d:81:f2:f9:a8:fd:31:77:f9:45:
64:a3:e7:a9:45:e2:aa:61:be:7d:90:72:75:56:2d:
1a:9f:2a:51:54:3b:dc:6b:a1:d8:a7:cc:c4:7e:e7:
8c:4d:9d:6d:9e:29:c1:be:27:dd:aa:bf:e0:2e:a9:
9f:01:d2:74:b5:5e:c2:03:78:30:50:7a:d5:32:db:
9e:34:83:ba:c6:98:0e:b1:e0:61:0f:2b:6c:91:fc:
cd:7f:81:fe:5e:04:83:ff:b6:2a:e4:4b:b3:5e:57:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CD:7E:EA:BE:7F:C5:83:CB:42:5A:8D:E7:70:AB:24:4B:52:1D:44
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:eb:58:13:6f:13:b7:f9:a3:a1:b2:39:a5:79:79:0d:5b:01:
c4:b8:56:d3:93:a8:5b:08:58:b5:35:d5:f8:d2:59:27:7e:e8:
3e:eb:03:b1:1c:a3:30:bc:5a:15:b8:52:49:06:18:66:a8:0a:
8a:e8:cb:83:1d:d4:48:e5:dc:06:28:9c:ea:e0:5d:89:74:3a:
02:78:1e:6d:cd:3c:dd:43:9e:10:bd:0b:18:fe:37:03:3e:07:
7f:5f:44:25:80:e1:47:9d:bc:a0:29:9e:06:a7:b9:c2:22:92:
7b:3d:58:53:90:7f:47:76:c7:f4:07:49:5d:bb:a5:9e:0b:51:
33:74:45:08:d9:66:b1:5b:ac:8e:c3:31:cf:d7:4c:8b:ed:80:
c0:17:c8:95:e5:e2:69:8c:62:91:21:4b:3d:22:ab:ad:20:91:
33:97:87:d8:50:9f:65:b3:6e:93:df:ec:1e:e0:c0:dd:af:58:
d3:32:a1:1f:62:44:dc:70:f8:e5:63:5b:bc:57:2e:87:a6:be:
3a:32:e2:dc:b2:bc:66:25:c3:24:2a:49:52:a4:b4:88:81:3a:
fd:39:b8:ff:a0:a1:9d:00:74:4d:fd:53:29:4e:db:51:22:2a:
02:6e:18:a6:c8:e6:7a:43:43:e1:2c:dd:73:39:6e:af:67:c9:
2b:df:5d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:15 2026 by rpki-client