Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier: n34UnftYNsZvrJN1aqm3v9GXn11zda9tC7n92L2r0sw=
Subject key identifier: E0:1E:64:A1:A2:D2:FE:90:34:5F:AD:F3:4D:7D:7D:0D:80:3D:73:D3
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial: 019F935BC23CCCB2BCF4977C028C31921292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 09:01:31 +0000
Manifest this update: Fri 24 Jul 2026 09:01:31 +0000
Manifest next update: Sat 25 Jul 2026 09:01:31 +0000
Files and hashes: 1: MubSAvvOIfUrTY4iMx5XpqvxFEw.roa (hash: Zqp0XYX8hYOQjN3TiA0znnPtjcmuSvb9v0xRPcp35Hw=)
2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: cphYicSFepqmQ+gMLRl44RUoWqlQmTdZehJow9p4QEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:c2:3c:cc:b2:bc:f4:97:7c:02:8c:31:92:12:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Validity
Not Before: Jul 24 09:01:31 2026 GMT
Not After : Jul 25 09:01:31 2026 GMT
Subject: CN=e01e64a1a2d2fe90345fadf34d7d7d0d803d73d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:9d:78:5c:bb:45:ff:f8:83:ec:c9:a2:c2:
5c:fc:c4:17:da:19:68:43:76:1d:2b:14:ea:5d:00:
1b:c0:0d:5c:3b:53:6b:77:8b:35:b5:df:fa:9f:45:
1b:7c:a7:b8:f0:09:f0:8a:fb:d2:b2:47:75:ad:a0:
49:a2:5e:fd:74:49:21:95:3d:24:8a:ec:d8:8f:0b:
98:b2:a1:6b:9d:2b:8d:84:06:dc:7b:18:fb:01:0a:
95:04:05:6c:ce:22:ca:0e:7d:3e:60:77:bd:3e:4e:
2b:40:7d:de:f4:49:c2:f5:6e:2c:38:60:55:3d:66:
d7:41:6a:09:4c:a2:2a:71:7e:bd:94:9c:4e:90:c3:
a0:9a:3f:da:a3:7b:01:01:d4:ce:fe:af:6a:ae:26:
4c:a5:47:e8:a2:39:f2:50:08:1a:84:62:15:aa:d9:
57:9f:e6:ea:db:2b:42:2e:21:60:db:7c:df:ab:ee:
5a:2f:57:cb:b1:97:1d:11:95:c4:74:c9:21:83:64:
b2:76:ec:47:c9:fc:48:c4:98:5a:ad:5c:53:36:c1:
51:67:7b:ea:e2:24:95:26:d8:9b:bd:95:1f:f4:14:
cf:87:2b:4b:2b:a9:4b:85:f2:ec:12:73:0c:67:a2:
53:51:34:dc:e9:00:f2:6b:1d:3f:78:b1:67:b6:8b:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1E:64:A1:A2:D2:FE:90:34:5F:AD:F3:4D:7D:7D:0D:80:3D:73:D3
X509v3 Authority Key Identifier:
keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:af:ce:1d:9e:89:42:d8:ae:87:52:ee:60:89:6c:71:b0:bc:
26:20:64:1d:0a:21:5d:9c:d3:3c:cb:2f:4d:c5:4a:05:5e:10:
04:19:b8:93:d2:bf:b7:4d:4f:b6:94:ee:13:41:4e:9c:75:71:
a3:d0:19:14:44:8c:bc:25:65:f4:01:ca:66:f0:4e:26:43:4e:
44:25:ea:26:4e:0d:f2:90:ae:09:a5:87:98:08:76:e2:51:25:
77:a8:38:f9:55:f2:e3:34:8f:f2:f5:df:31:85:d5:30:cd:12:
48:25:f3:16:b7:03:3b:1e:34:c0:33:b0:d7:cf:67:ae:fd:64:
b0:c3:ad:5b:df:99:15:9c:15:04:82:f8:34:ec:c8:1f:3e:ec:
d3:da:5d:1f:84:25:5b:fa:14:2e:20:3c:2e:d3:f5:42:e2:a1:
46:05:b6:c5:06:3a:ec:56:74:b1:93:2d:20:fd:9d:53:57:66:
7c:ce:bb:7a:e3:0f:2a:5b:c7:4b:a6:3d:07:81:b3:6f:46:cd:
73:81:19:f1:cb:45:4b:b5:10:12:3b:23:c1:4b:07:fd:48:e2:
2d:dd:3e:f6:48:5a:2d:c7:e8:07:bf:9f:58:24:14:23:82:f6:
de:69:7d:79:c0:83:b4:4d:8c:b0:12:3d:91:2f:c7:f4:79:7a:
5a:7d:e5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:13:35 2026 by rpki-client