Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
File: yy2f-G42PbNNBVbsFkUfL38wPSQ.mft (raw, json)
Hash identifier: YA/rvqxV4Pi+UajFXAYXTBCjH+/A/XqOKcPg6M9xwVU=
Subject key identifier: 04:99:BE:A8:67:8F:4E:35:5A:73:DD:24:1B:52:3F:BE:B3:AA:56:E8
Authority key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
Certificate issuer: /CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Certificate serial: 019F92EDC6DD1320B42A225231A6A87ECD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 07:01:24 +0000
Manifest this update: Fri 24 Jul 2026 07:01:24 +0000
Manifest next update: Sat 25 Jul 2026 07:01:24 +0000
Files and hashes: 1: Wx516h-ycz_F6WDuwcZAFe5X748.roa (hash: OBge6N4+W5EoPiH34P9HhCCHgJeyBg+k4ngzYQtz6A0=)
2: yy2f-G42PbNNBVbsFkUfL38wPSQ.crl (hash: GEFLFo/2AjxRecj4xZ1inqFHIpBZyIz9ncDGFZmyxCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:c6:dd:13:20:b4:2a:22:52:31:a6:a8:7e:cd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Validity
Not Before: Jul 24 07:01:24 2026 GMT
Not After : Jul 25 07:01:24 2026 GMT
Subject: CN=0499bea8678f4e355a73dd241b523fbeb3aa56e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:66:86:a6:cc:dc:8c:a7:77:f8:76:b4:37:
1d:99:7c:f6:fb:6d:c8:41:2a:72:20:fb:e5:f7:8b:
76:49:a7:61:62:a2:fc:3d:98:4d:14:f8:0d:c6:16:
cc:23:2c:b5:a8:99:41:ab:a3:b2:c3:72:eb:46:2c:
e6:32:06:fd:e7:3d:10:8d:b3:ed:53:a3:a3:ae:bd:
d5:5c:d7:21:f7:63:69:0b:34:6d:43:f6:de:f9:f7:
ca:d8:40:40:7f:63:c4:78:ad:29:b1:da:38:38:ca:
28:47:2f:39:31:71:26:8a:d8:49:6a:fa:92:4d:79:
74:48:6f:e3:45:e7:be:84:ad:65:fc:9c:93:c7:32:
cd:03:b3:44:7f:2c:a0:6e:98:a3:11:3b:46:f0:35:
99:df:dd:9b:ff:30:d1:92:88:e9:c1:b5:de:34:41:
46:e7:04:d1:2f:e8:53:5f:2c:e8:4d:68:92:ff:29:
60:0b:21:d2:ad:d6:a5:28:b3:d1:b3:0a:f8:c7:c2:
71:b3:ef:7b:57:8e:c1:49:09:6d:bd:ef:63:39:eb:
40:9c:9f:94:a9:fe:86:96:c4:31:8b:1d:61:c3:2f:
35:97:11:90:b0:49:2d:74:bc:1f:52:46:19:ca:e5:
9c:0b:b1:1d:32:f3:fa:f0:f5:d2:e6:38:a4:29:a9:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:99:BE:A8:67:8F:4E:35:5A:73:DD:24:1B:52:3F:BE:B3:AA:56:E8
X509v3 Authority Key Identifier:
keyid:CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bf:04:bb:1e:aa:88:13:ae:ec:a6:d1:74:4f:a8:39:ad:92:
3c:a5:d3:7c:b3:4d:3f:6c:b4:9b:b1:8d:74:19:22:66:a1:d4:
17:22:89:d0:df:66:e5:a4:95:ae:8a:bc:1c:dd:0f:29:61:9e:
c6:eb:e4:60:17:bd:bd:00:2d:24:9c:dc:10:67:8f:03:0d:3c:
1d:ac:2f:b0:d2:51:cd:c1:4e:e2:8e:83:e4:84:01:82:9e:c3:
06:7b:8a:a2:89:78:d3:30:07:e0:51:a3:e4:b4:ef:84:c7:5f:
0b:c5:2b:d7:44:6b:e0:38:6d:03:ff:95:b3:57:12:bb:fe:fa:
8f:64:0a:a7:68:ea:6a:a9:2a:54:ad:ea:d0:71:aa:ea:f4:a2:
f5:90:60:3f:96:75:5f:f4:9d:7d:fb:26:88:7f:82:b1:b3:3a:
75:e8:d9:5c:66:fa:15:ba:25:2f:b0:6d:25:c5:29:ff:e1:09:
b0:85:b1:31:66:38:22:cf:70:f1:09:72:cb:af:bf:fd:87:7d:
cb:57:59:db:d5:85:75:cf:50:cd:66:fb:ca:5a:3f:93:4a:75:
d4:10:a8:67:c4:14:a5:3d:f0:bc:8a:34:db:8c:81:36:c3:8f:
7b:89:1e:a0:c0:4f:33:2e:8a:8f:c3:0c:a4:ae:c8:5c:b5:60:
1b:34:a0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:13 2026 by rpki-client