Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: QUk6eEVmcPKFbD1nH7NqIGzwk2YqKmsRFe5X22jsEsc=
Subject key identifier: B1:7E:5C:21:ED:D6:78:EA:BD:0D:91:AB:9A:8A:3D:0E:43:71:B8:50
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 019F97383761B0522BA2CFB97BF186D61FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 10FE
Signing time: Sat 25 Jul 2026 03:01:11 +0000
Manifest this update: Sat 25 Jul 2026 03:01:11 +0000
Manifest next update: Sun 26 Jul 2026 03:01:11 +0000
Files and hashes: 1: itWusIN94AA9QuorHUE-V0qTTz4.roa (hash: jBKg0DWZPFPz9Fg2hbC6xtgEN7u3Z3HtMYTfp3owGw0=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: AFtDAwhotOsqypC6fzlWl9xEm4EkvpuIGkm0Tk9toho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:38:37:61:b0:52:2b:a2:cf:b9:7b:f1:86:d6:1f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Jul 25 03:01:11 2026 GMT
Not After : Jul 26 03:01:11 2026 GMT
Subject: CN=b17e5c21edd678eabd0d91ab9a8a3d0e4371b850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:56:00:f7:b7:92:60:78:15:99:30:a7:ab:
34:d8:82:c4:ea:e7:1d:0b:1d:33:b1:58:88:97:da:
2b:f3:11:d4:0f:ec:07:59:00:26:88:dd:fb:2d:11:
9c:74:92:13:86:ab:f4:c8:e4:77:11:37:98:5d:d7:
0e:06:75:db:2b:b4:d3:13:a2:8a:62:b0:8a:82:fe:
12:1a:07:7e:77:b0:e9:26:11:e2:49:37:ab:f7:62:
90:cc:16:ab:f5:8c:4d:bd:60:94:f2:77:8b:ee:39:
4c:db:9d:b5:0d:43:d6:87:19:d2:3b:5f:38:5b:bd:
6a:2e:59:b4:42:41:22:60:a9:51:e5:21:35:65:f3:
d9:6f:27:7a:c2:72:49:e5:f7:f1:46:bf:ad:3a:60:
1b:ae:bf:4a:89:46:9a:ff:ce:96:de:f5:9c:12:e8:
4b:25:50:fc:c9:f7:3d:9c:8d:1f:e5:3a:6e:48:86:
7f:d3:9f:4f:61:f7:33:be:c9:1d:cd:1d:17:5f:85:
4f:62:84:8f:3b:1d:c8:51:82:86:9e:60:c0:d9:84:
47:10:bf:c8:19:02:91:1b:c9:11:5b:a8:71:c9:9d:
b3:07:e8:0f:c2:26:7b:78:5d:e3:50:c1:a7:03:c6:
77:10:a8:ea:16:1c:8e:70:18:a9:19:90:72:6c:9e:
0e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7E:5C:21:ED:D6:78:EA:BD:0D:91:AB:9A:8A:3D:0E:43:71:B8:50
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4a:7a:f4:21:1f:28:98:fd:6c:dd:2b:4e:16:d8:25:15:23:
7f:46:93:87:05:3b:49:f5:89:a6:93:e0:25:f2:6e:47:7f:9a:
98:0f:8c:bb:76:8e:4a:7b:e5:60:55:73:59:aa:6d:50:44:75:
8c:1d:11:7c:1a:09:78:d7:50:1a:38:fd:23:51:04:be:3d:29:
be:a9:38:78:7b:f2:f7:68:d8:3f:9b:20:e9:4f:a9:74:8c:4f:
01:0a:91:51:18:b3:8e:31:8f:53:d1:5d:9f:0d:a4:06:df:5c:
ac:59:cd:d5:d5:c0:57:26:8a:f9:cb:0a:85:05:dc:e4:c2:7e:
96:ca:e2:43:84:52:c4:bb:12:be:9d:8f:70:6d:25:65:63:a6:
d6:24:df:14:1b:b4:e2:4b:d1:f5:36:ec:20:7c:9d:be:fd:62:
33:48:47:0c:32:b2:65:77:21:af:47:9b:f8:1e:a6:29:e2:56:
4f:86:0b:c9:1b:b2:63:99:3b:f0:9f:46:f9:40:91:22:ab:c1:
aa:dc:d8:c9:73:9a:3f:17:14:f4:45:e5:5f:47:6a:a3:43:05:
09:e9:8e:3d:10:64:23:17:4b:d7:53:96:34:7b:03:5b:7a:99:
e8:16:fd:65:17:4f:fd:bf:7b:93:ff:d7:61:ce:44:6f:48:d6:
fd:93:98:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+XODdhsFIros+5e/GG1h+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWQ3ZWZkNmJhY2Y0MmYxNDVkZjRkNTI4YjBhODMyMGZm
YzM3YjkwHhcNMjYwNzI1MDMwMTExWhcNMjYwNzI2MDMwMTExWjAzMTEwLwYDVQQD
EyhiMTdlNWMyMWVkZDY3OGVhYmQwZDkxYWI5YThhM2QwZTQzNzFiODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCZWAPe3kmB4FZkwp6s02ILE6ucd
Cx0zsViIl9or8xHUD+wHWQAmiN37LRGcdJIThqv0yOR3ETeYXdcOBnXbK7TTE6KK
YrCKgv4SGgd+d7DpJhHiSTer92KQzBar9YxNvWCU8neL7jlM2521DUPWhxnSO184
W71qLlm0QkEiYKlR5SE1ZfPZbyd6wnJJ5ffxRr+tOmAbrr9KiUaa/86W3vWcEuhL
JVD8yfc9nI0f5TpuSIZ/059PYfczvskdzR0XX4VPYoSPOx3IUYKGnmDA2YRHEL/I
GQKRG8kRW6hxyZ2zB+gPwiZ7eF3jUMGnA8Z3EKjqFhyOcBipGZBybJ4OfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLF+XCHt1njqvQ2Rq5qKPQ5DcbhQMB8GA1UdIwQY
MBaAFMsdfv1rrPQvFF301SiwqDIP/De5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODct
OTlmNjgzMjA2Mzg4LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODctOTlmNjgzMjA2Mzg4
LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0p69CEf
KJj9bN0rThbYJRUjf0aThwU7SfWJppPgJfJuR3+amA+Mu3aOSnvlYFVzWaptUER1
jB0RfBoJeNdQGjj9I1EEvj0pvqk4eHvy92jYP5sg6U+pdIxPAQqRURizjjGPU9Fd
nw2kBt9crFnN1dXAVyaK+csKhQXc5MJ+lsriQ4RSxLsSvp2PcG0lZWOm1iTfFBu0
4kvR9TbsIHydvv1iM0hHDDKyZXchr0eb+B6mKeJWT4YLyRuyY5k78J9G+UCRIqvB
qtzYyXOaPxcU9EXlX0dqo0MFCemOPRBkIxdL11OWNHsDW3qZ6Bb9ZRdP/b97k//X
Yc5Eb0jW/ZOYRw==
-----END CERTIFICATE-----
Generated at Sat Jul 25 07:53:03 2026 by rpki-client