Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier: BqtLXP7983mZ4wCSFgut9uszVHIqQpzmPzSTFWvp7D8=
Subject key identifier: C3:69:7B:CB:35:0A:B9:10:81:67:59:26:20:C0:5C:7D:50:2C:8B:C9
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 019F92B65FB67FAFF098EF4907836AC6B2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number: 10FD
Signing time: Fri 24 Jul 2026 06:00:53 +0000
Manifest this update: Fri 24 Jul 2026 06:00:53 +0000
Manifest next update: Sat 25 Jul 2026 06:00:53 +0000
Files and hashes: 1: 3me9x6h3lSEZqUVidDsZ7ac0L_U.roa (hash: JBCZWk53MUOqTUtRTfVY6AmHie1EcXDJvYsQQVSkdlA=)
2: npk6WkIHJCvL3_l_cXYjMzft0kI.roa (hash: t+MEBsgDts42eIKY0nTbdaPBG3x9AZb+9dTa2sHYe1g=)
3: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: GFmciUDl1V2RqSybE6Bw1iXMszJhKcJB/f9D+lFNoAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:5f:b6:7f:af:f0:98:ef:49:07:83:6a:c6:b2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Jul 24 06:00:53 2026 GMT
Not After : Jul 25 06:00:53 2026 GMT
Subject: CN=c3697bcb350ab9108167592620c05c7d502c8bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:f9:2c:4e:a7:db:37:75:a6:e1:73:88:66:
a5:a7:19:1a:21:f7:ee:a6:fd:ce:e7:82:8d:07:6c:
1f:5a:92:54:67:88:14:43:30:5b:b1:10:51:bf:ad:
93:d5:32:11:74:48:03:b2:e8:46:5f:fe:23:7f:5c:
16:a6:05:59:57:3c:86:c4:6f:79:03:d7:97:7e:71:
85:07:41:0e:7f:f4:40:bf:ec:21:1e:6c:46:ab:3d:
1b:3d:d3:58:70:50:5e:02:86:04:86:c4:93:25:be:
e6:ae:47:6a:6e:6b:50:dd:65:49:91:d1:5a:02:e1:
29:b9:61:84:a6:eb:3a:7c:e6:dc:45:23:20:c7:e8:
62:ca:44:df:b2:14:b8:32:29:89:f7:85:b1:7a:95:
69:ad:5a:db:11:34:18:e8:a9:92:f5:db:68:c1:74:
e1:df:2b:c7:49:1c:6e:e1:14:75:da:55:4d:9b:b5:
a3:5b:75:af:51:08:9d:dd:fd:10:27:a2:a3:ce:9f:
62:0d:b3:83:d0:74:3a:72:96:65:d3:65:07:fd:e8:
d9:d6:b9:d0:3b:fe:e0:82:3f:72:8a:6d:f2:f8:87:
8d:52:2a:2e:fa:b9:0b:bd:10:bc:ef:87:51:13:23:
12:5e:5e:19:17:ef:eb:82:83:b9:01:99:f3:23:46:
69:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:69:7B:CB:35:0A:B9:10:81:67:59:26:20:C0:5C:7D:50:2C:8B:C9
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ce:c8:31:ff:77:91:a4:07:9a:f4:78:d7:0f:95:68:be:b6:
45:f2:9d:b9:ca:53:c5:3a:a4:c9:e1:05:6c:31:3b:c5:5c:15:
7e:59:ee:df:e6:85:d2:84:e8:ec:21:dd:65:11:e1:dc:ff:91:
d9:84:16:06:25:2d:ee:3a:84:22:70:ec:34:c1:f0:08:40:a4:
c7:c1:4f:96:88:48:3a:91:7f:d4:8c:3d:ef:cb:22:2e:75:35:
48:90:38:90:15:f2:61:c8:a1:00:56:0e:e4:0a:7a:af:67:10:
c6:a1:47:21:87:f2:56:6a:00:40:17:3b:b1:74:e5:72:19:1d:
ce:40:b3:b9:42:a8:fb:32:f0:dc:70:73:39:b3:0c:f6:d3:fb:
7e:92:33:5f:08:86:38:e5:5c:91:e4:b2:84:5c:d9:89:23:35:
80:6e:95:37:56:de:e5:55:c8:5f:35:69:47:dc:55:fe:56:09:
ab:37:69:63:a2:cc:5f:52:65:d1:1e:66:3c:c8:bd:dd:db:05:
2b:8b:7c:b3:e4:a4:58:94:c2:90:ba:4c:d9:08:12:2d:00:9d:
83:80:78:09:4b:0b:17:86:f7:b9:76:49:9c:2a:f8:ae:37:27:
18:5b:4b:02:71:14:8f:6e:ee:0b:89:e5:e5:fc:17:22:d1:8f:
fe:7a:50:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:17 2026 by rpki-client