Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: 5e0HDcCfa4P4DNC+A8c6zN2R80xCROQTchm9lDes1LQ=
Subject key identifier: F5:E4:5B:E3:40:78:A7:73:DF:E8:E7:E2:B5:CC:11:62:AC:8F:9C:96
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 019D2771E07A71900B1472BF2A665E87A8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 0FBB
Signing time: Thu 26 Mar 2026 00:01:07 +0000
Manifest this update: Thu 26 Mar 2026 00:01:07 +0000
Manifest next update: Fri 27 Mar 2026 00:01:07 +0000
Files and hashes: 1: itWusIN94AA9QuorHUE-V0qTTz4.roa (hash: jBKg0DWZPFPz9Fg2hbC6xtgEN7u3Z3HtMYTfp3owGw0=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: FVv9C7QG3yBN2BnU0V1e/EQcEruPWsjiXiTZ7p1xYY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e0:7a:71:90:0b:14:72:bf:2a:66:5e:87:a8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Mar 26 00:01:07 2026 GMT
Not After : Mar 27 00:01:07 2026 GMT
Subject: CN=f5e45be34078a773dfe8e7e2b5cc1162ac8f9c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:b7:1d:70:9d:c8:98:86:6d:6b:d1:08:fc:
9e:58:3f:89:76:89:60:8b:e9:7d:d4:16:db:7d:a7:
ef:55:a9:5c:e3:bf:64:3d:06:49:d2:6c:e8:c2:de:
49:d1:66:ad:ef:93:82:4b:7c:ed:3f:fc:f5:d7:98:
f4:6f:a8:99:d9:5b:75:ba:4c:15:f7:75:59:13:2d:
b0:d4:30:5c:b8:49:b5:fd:9a:f2:b0:69:6a:0b:fc:
8c:df:b6:29:58:8a:35:a8:f4:f9:81:3e:f1:51:05:
5e:a9:b9:78:c3:72:20:c6:fd:77:d3:02:bb:7c:62:
88:85:85:b3:b1:72:7d:2c:87:af:a9:d4:54:ed:a4:
a6:21:d1:3e:8b:39:7a:55:f7:65:f4:1c:c7:c8:b3:
d3:6a:c2:f8:02:de:ac:a9:b1:6c:0a:a1:24:04:40:
e9:6f:5b:6a:69:f8:29:01:e5:41:03:5f:ec:f3:ed:
9f:88:cd:19:85:af:e1:d0:b3:b3:0e:c8:68:2f:3d:
61:b6:fe:7d:c5:1c:d9:d9:9d:5f:15:05:ef:3d:ec:
9d:a8:e8:dd:92:91:db:c9:41:eb:eb:c5:32:b2:79:
28:14:3a:b2:cf:24:62:e5:a8:a0:5f:b4:b8:11:5c:
11:57:00:21:e6:0f:be:cc:b0:be:df:9e:80:db:5c:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E4:5B:E3:40:78:A7:73:DF:E8:E7:E2:B5:CC:11:62:AC:8F:9C:96
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e4:b6:1d:48:73:48:a7:7f:86:56:5a:b5:ad:a5:bd:3f:0b:
04:d1:e3:54:4d:4f:db:eb:18:a6:17:7e:99:da:f2:74:fc:d3:
56:95:0c:21:1f:8d:81:2a:b4:b3:3c:b1:7b:1d:60:bf:14:f7:
d2:39:a5:5d:ed:86:52:43:a3:d7:ea:3b:26:ec:d7:92:58:aa:
09:bf:35:c0:72:d3:85:38:6f:82:c4:1b:96:94:48:68:f8:35:
e4:78:8f:bc:60:e0:b1:52:c4:ff:59:99:29:a1:94:d2:66:c0:
ed:6e:10:9f:10:3f:4a:39:f6:79:37:14:05:2d:c2:82:b0:80:
e0:91:aa:f1:60:0f:2b:d8:80:0e:d5:93:63:41:06:30:d9:92:
49:2c:73:73:37:a2:52:0c:04:ae:f6:53:25:fd:61:20:c1:6f:
85:54:61:96:21:4a:00:34:dc:86:ec:42:49:01:66:8e:34:f8:
c4:ab:b8:f1:f9:87:7a:f3:74:3f:51:d1:35:25:af:49:30:77:
8d:41:a2:98:e5:07:2e:65:ec:26:06:fe:62:1d:e2:6c:e6:dd:
90:69:66:fa:88:ad:fc:64:12:f2:35:63:57:3d:64:4d:e6:fe:
27:31:a6:fa:c7:3b:b7:3d:68:91:41:a9:c4:8a:ff:eb:9c:2e:
8b:37:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:38 2026 by rpki-client