Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier: gk6pRTQFWzbr8LVMOjWehoHQYtNX043dKNtzGy21IyM=
Subject key identifier: 57:9D:8A:D4:86:FE:7B:0C:2E:67:DA:FB:3D:C1:A7:09:1D:41:A1:85
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 019E1F47E539FF8D371CEF9AE86ACE888DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number: 103C
Signing time: Wed 13 May 2026 03:01:05 +0000
Manifest this update: Wed 13 May 2026 03:01:05 +0000
Manifest next update: Thu 14 May 2026 03:01:05 +0000
Files and hashes: 1: 3me9x6h3lSEZqUVidDsZ7ac0L_U.roa (hash: JBCZWk53MUOqTUtRTfVY6AmHie1EcXDJvYsQQVSkdlA=)
2: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: Fh4UggYx7jsT/dL5jBjBEaDxev8GEXsjRT1i/4QAecg=)
3: znSv9nqP8eMAaw0trtXq-8l7uP0.roa (hash: IpWzwCN1acfxD019R3lb756yunapUuWhfzcdhZhAN1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:e5:39:ff:8d:37:1c:ef:9a:e8:6a:ce:88:8d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: May 13 03:01:05 2026 GMT
Not After : May 14 03:01:05 2026 GMT
Subject: CN=579d8ad486fe7b0c2e67dafb3dc1a7091d41a185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:f1:79:26:ef:b4:f7:0b:71:3b:bf:ab:41:
b3:b1:05:35:3d:81:76:5e:a4:26:a2:0c:01:2b:da:
80:43:64:ea:9b:92:aa:de:69:31:8b:9e:2e:c1:ee:
35:7f:84:d0:55:53:61:7b:7b:6c:92:01:b2:ee:1b:
a1:f5:29:8a:ed:58:63:d0:64:4c:af:dd:62:06:24:
9c:05:e6:af:bf:ce:86:c9:4e:5e:b6:97:7e:49:07:
3b:2e:31:78:d0:d3:f6:db:06:26:6d:82:c0:ac:30:
72:b3:db:c0:ac:df:a7:3b:2f:b6:6e:2a:4e:67:e7:
2e:6e:de:5a:ef:03:c7:f1:b5:03:c2:61:5d:67:b4:
8f:8c:e0:c9:ca:15:ec:b1:11:1a:ff:f0:d7:8e:25:
ce:2d:84:43:75:00:69:39:21:a5:ed:db:28:8a:8d:
c0:a6:0d:ca:01:87:b3:e0:2b:99:32:a9:1f:7d:0b:
54:e0:62:39:74:25:6f:86:85:42:30:e8:a1:70:c7:
86:89:bc:f3:8f:4d:1d:3f:a4:54:81:7b:7e:7c:fc:
ad:8c:d9:0e:cd:2f:da:d6:f2:5d:06:2e:eb:09:3a:
89:6e:cb:fd:d4:cd:de:72:bd:a2:e3:cb:44:b0:81:
06:fc:7b:5f:02:d9:2c:37:66:7b:48:57:8d:2f:c0:
01:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9D:8A:D4:86:FE:7B:0C:2E:67:DA:FB:3D:C1:A7:09:1D:41:A1:85
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:12:e6:77:bd:d2:26:91:b8:00:82:83:7e:30:91:21:70:6a:
d4:dd:27:11:5a:be:9d:ba:a5:27:15:da:9d:1e:f7:09:19:7e:
a8:67:c2:a7:9a:c0:63:e6:2a:78:66:db:53:ce:f2:e6:8f:df:
1b:52:4f:f7:06:f8:72:7b:93:7b:ec:21:5c:f1:7c:f6:e2:68:
32:3e:ef:8a:42:c0:70:43:9d:6d:0c:6b:53:18:dd:78:45:b6:
93:4f:b8:4d:66:3a:be:30:79:2a:42:ea:87:e0:4f:50:f6:3b:
86:6f:b6:4f:8a:64:ca:61:bd:bb:bb:56:56:4b:c6:5a:fd:a1:
92:92:68:a6:05:81:c5:b1:77:00:3b:af:2a:67:cb:03:cb:77:
60:cb:e4:3f:73:30:18:da:cf:a3:b9:fb:96:d6:02:c9:05:3d:
e6:19:cc:a1:9f:89:d2:fa:a8:35:bc:c6:e1:be:43:e9:2a:5f:
5a:9c:0b:7b:74:bb:f0:4c:06:04:e4:ae:93:d4:09:18:b2:31:
a1:cc:0f:cc:9b:5a:9a:33:1a:01:05:b7:75:e1:c5:07:e1:f7:
68:8d:f7:de:b5:af:98:fb:42:c5:50:7b:79:ac:b4:ca:4c:77:
78:8d:49:44:f4:a0:73:e2:f1:79:3b:2d:62:fb:26:2c:96:f3:
e7:fc:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:56 2026 by rpki-client