Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: cr3ZsdRZ6XXDhkp565plN9k3KZ8NQYpE6kUX+QAyyOo=
Subject key identifier: E2:C5:8A:5A:32:13:C4:69:AD:99:90:BD:B8:0E:2A:00:1E:81:6C:5C
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 01A15176751C29FCE6A313A94A7C7CB6726A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 1AAF
Signing time: Mon 19 Oct 2026 00:01:20 +0000
Manifest this update: Mon 19 Oct 2026 00:01:20 +0000
Manifest next update: Tue 20 Oct 2026 00:01:20 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: F9vV+L/mgCC/sG9QUNZGhAul0S31D4AnavyQthr6GSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:75:1c:29:fc:e6:a3:13:a9:4a:7c:7c:b6:72:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Oct 19 00:01:20 2026 GMT
Not After : Oct 20 00:01:20 2026 GMT
Subject: CN=e2c58a5a3213c469ad9990bdb80e2a001e816c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:ed:1d:85:ea:b5:24:0c:0c:d0:71:dd:03:
36:6d:02:4c:ef:6d:8e:d9:98:b2:4e:d6:9c:48:19:
e7:10:45:c1:bb:b5:f7:3c:1f:f8:79:65:c7:c5:d0:
67:e4:be:1e:d1:3d:f1:65:d0:c7:8e:f0:8d:c3:c9:
f7:d6:d6:56:5c:3d:f5:bd:76:a7:f8:ff:b9:28:f3:
b2:a4:dd:fb:c0:31:28:68:8f:f2:ec:55:93:f7:25:
8b:a1:a0:c1:33:b2:6c:56:42:67:fc:f4:74:fa:e5:
61:4b:c9:e6:bb:0b:86:78:cf:ad:74:e3:12:ca:e1:
d0:d1:4a:f1:00:8f:54:cb:06:e5:9c:36:04:48:89:
37:0d:bb:07:31:be:4b:3b:7a:a0:8d:b0:05:61:52:
d3:cc:00:f1:24:75:83:50:f5:29:3e:5f:3a:2f:27:
18:dd:f5:53:25:1a:d5:c8:c7:cb:2f:f7:6e:37:18:
66:87:98:88:3d:1b:60:21:2f:13:ab:10:f2:49:c3:
70:b4:85:a0:91:c8:7d:be:ff:9e:20:26:db:31:b0:
4b:a9:a4:e7:30:a9:5d:e8:d2:74:ef:06:e6:52:a7:
50:7d:32:b1:b0:f0:e1:81:20:4e:9c:df:90:c2:67:
f6:fc:15:a5:35:bf:e7:16:5f:b3:f3:3c:63:12:ae:
39:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C5:8A:5A:32:13:C4:69:AD:99:90:BD:B8:0E:2A:00:1E:81:6C:5C
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4b:60:00:a9:98:77:54:5d:7e:fc:8d:2d:dc:10:10:85:08:
d9:c3:52:36:75:ec:d0:21:92:d6:5c:53:5a:a1:d5:aa:ab:cb:
4f:06:cd:c0:a0:c1:bb:f3:b8:0e:3e:cd:f2:b2:4e:03:a7:4e:
40:12:0a:9a:a5:9a:f3:51:a1:76:f3:f5:13:af:b4:ba:99:b0:
dd:44:14:74:90:f6:9a:99:08:91:74:3b:f9:25:b7:d1:af:01:
22:eb:30:be:ef:e2:73:20:c4:7d:1e:61:f1:f1:99:0c:08:db:
fc:2f:a4:79:23:93:83:9f:63:b0:37:47:e4:8a:b0:b5:59:b4:
21:e5:ef:1b:f5:3d:fe:c1:92:b7:f6:60:c9:17:87:17:d7:ec:
6b:5a:1e:7a:64:2e:c7:ab:b1:86:1b:57:bf:26:31:cf:c6:56:
85:20:83:5b:13:ec:c3:5e:d2:1c:1a:fe:ba:c7:de:e9:2e:d8:
0f:3e:a4:4e:d0:1b:07:82:db:3f:40:73:a6:73:3f:d4:ae:c0:
ab:61:b8:7e:f7:de:ad:3d:1c:0f:4d:08:b8:78:ba:c7:e6:37:
d1:ca:f7:71:a8:7f:4e:c1:77:82:95:00:bf:1b:26:65:19:32:
35:9f:be:2e:17:ff:7f:2b:4b:5e:95:fb:6a:29:16:fc:ec:09:
5e:da:eb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:03:21 2026 by rpki-client