Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier: njJ/pFRfpfkD4P6IwOliXqrzDXHY/ay+JUsYTnX2cUU=
Subject key identifier: A5:6A:9A:AE:16:4B:F0:72:2E:D7:5D:3F:57:F9:9F:64:49:D0:EF:11
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 019D273AF421C210EF68DDAB104EF8C90C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number: 0FB9
Signing time: Wed 25 Mar 2026 23:01:07 +0000
Manifest this update: Wed 25 Mar 2026 23:01:07 +0000
Manifest next update: Thu 26 Mar 2026 23:01:07 +0000
Files and hashes: 1: L8uu4ebfrDkqdQimnWmdpvR7zrQ.roa (hash: Pgl4nKmggpktguryDKN7jPFRY/SQE3vFvuMFMU7msdI=)
2: t72vzDed8xwwFdYwzkhMty8CSXI.roa (hash: YW4OPr8TGjFQl6muhUEM/uVQLLBIy3RVHE6bb2pg68w=)
3: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: Flfd84AMJyN9fbskLlQD4gLHGxojlFf21Ltgob6j8co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f4:21:c2:10:ef:68:dd:ab:10:4e:f8:c9:0c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Mar 25 23:01:07 2026 GMT
Not After : Mar 26 23:01:07 2026 GMT
Subject: CN=a56a9aae164bf0722ed75d3f57f99f6449d0ef11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:2e:a2:3e:c8:70:08:b0:3f:32:f2:fa:9e:
0e:cf:2a:47:9d:74:1f:32:f1:ca:9b:b8:7f:02:74:
6f:16:5f:16:42:00:14:26:e0:7d:eb:85:51:e6:02:
01:e5:70:85:13:c1:9f:73:42:a2:a8:86:75:7c:c6:
da:74:9c:52:c9:3e:9e:77:a2:61:86:e2:8c:17:49:
be:f0:b7:48:34:46:b6:73:60:e1:a7:b3:65:e2:c3:
6b:18:95:6d:40:30:f6:4b:c9:dd:a2:d4:07:ef:99:
e6:04:59:7b:ea:8e:76:da:97:6e:4f:ed:12:ae:d0:
b8:72:f8:16:18:61:75:ca:5d:1a:f1:48:b6:94:64:
a2:37:ea:b3:ba:59:da:e5:91:4d:93:26:5b:8b:ae:
1f:19:f0:3a:73:ed:37:78:44:ca:7a:66:9e:20:c8:
b9:67:57:44:35:a1:e5:70:7f:b6:db:cd:f4:61:e0:
86:ea:95:d1:e7:aa:d0:c8:e8:e5:92:6a:8e:f5:0f:
54:57:13:56:7b:76:31:31:40:cd:ac:d9:40:13:44:
e2:1c:b6:f4:5b:8d:71:d4:e7:26:1b:c3:ae:cb:aa:
a9:b4:18:14:8c:18:b9:54:a7:8f:34:1f:3f:dd:76:
3e:e5:32:4f:c4:18:36:f6:62:a6:5e:4e:73:96:e6:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6A:9A:AE:16:4B:F0:72:2E:D7:5D:3F:57:F9:9F:64:49:D0:EF:11
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:38:aa:2c:77:16:28:52:12:a8:dc:3c:24:50:aa:86:9d:3a:
1f:32:a7:d4:2c:ca:b2:b1:bc:c0:e4:46:49:24:19:ca:7a:8c:
9a:8f:bb:1e:80:fc:84:b4:9e:6a:58:b1:f2:66:00:a0:38:13:
d8:2b:4a:8a:36:61:8a:af:25:b0:64:fe:55:19:a3:14:61:b0:
b7:4f:58:b9:d7:cc:3d:a0:77:97:a8:34:72:cc:c1:9d:d6:4a:
5c:5c:8b:66:12:21:a7:30:70:aa:f3:f5:1a:0f:2e:ce:41:6f:
4b:bd:e6:e6:38:03:3a:b6:29:0c:ed:bc:01:f5:e2:4c:1d:fd:
1f:82:46:ce:62:06:e1:7f:73:e8:8b:9a:0f:ec:82:69:b5:dc:
c0:fe:d4:c0:92:fc:4a:39:e0:89:75:eb:5b:1f:5f:f2:e5:88:
0c:46:83:96:ec:cc:24:d7:75:0b:df:85:93:13:c1:06:f4:ce:
a2:29:26:f3:15:8f:28:13:db:59:7a:d1:32:36:29:3a:9d:e5:
12:ac:51:fc:97:41:75:d9:77:21:6e:16:b6:ec:f9:ec:1f:90:
f0:fd:74:d6:73:e5:3e:ba:9f:c7:5f:15:e4:a7:a4:cf:93:21:
29:03:b8:06:f5:ff:34:74:ce:88:85:7f:1d:8f:c6:d7:cc:c6:
f4:32:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:08 2026 by rpki-client