Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier: qIphJv6XNZwFiU/+eXN3Lk3zP1YyhKoy86N1L1LZ+pc=
Subject key identifier: 6A:E9:67:88:01:42:76:66:34:96:F2:C5:E0:34:62:15:21:30:37:E7
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 01A0D2A650A192803CCFE401C857A71985C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number: 11A3
Signing time: Thu 24 Sep 2026 09:01:49 +0000
Manifest this update: Thu 24 Sep 2026 09:01:49 +0000
Manifest next update: Fri 25 Sep 2026 09:01:49 +0000
Files and hashes: 1: 3me9x6h3lSEZqUVidDsZ7ac0L_U.roa (hash: JBCZWk53MUOqTUtRTfVY6AmHie1EcXDJvYsQQVSkdlA=)
2: N0yXHUnyqI9AcfgHuAzqodetZOU.roa (hash: uOAActN4XyvIBVzO4R2n2+4reFssBEajy/J11W05BVM=)
3: npk6WkIHJCvL3_l_cXYjMzft0kI.roa (hash: t+MEBsgDts42eIKY0nTbdaPBG3x9AZb+9dTa2sHYe1g=)
4: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: VxtyVIXQ424pStUwtWSr7lW/AchvMunYqHq+ojlDUic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:50:a1:92:80:3c:cf:e4:01:c8:57:a7:19:85:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Sep 24 09:01:49 2026 GMT
Not After : Sep 25 09:01:49 2026 GMT
Subject: CN=6ae96788014276663496f2c5e0346215213037e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:84:88:50:3b:c3:bb:42:51:43:4f:aa:4f:9f:
24:20:38:c8:3d:df:07:0a:ee:a1:7b:6f:cc:82:60:
49:95:c7:f3:4e:c7:45:81:fc:62:4a:8f:e4:79:ae:
16:0e:f7:10:fe:30:1d:84:77:69:da:bf:59:70:28:
ee:d5:09:bf:d8:c2:50:8f:04:10:44:1c:f5:dd:d6:
4c:0a:ea:b2:c0:db:64:88:49:7f:f6:03:0b:37:40:
a0:18:58:b8:44:87:1a:dd:8e:eb:4b:85:9c:0a:32:
cf:7d:6c:64:ea:f3:a5:bb:88:6e:db:cb:0c:9f:c7:
53:c7:8a:9c:fd:fb:00:4e:7c:4e:9b:93:46:fd:86:
dc:b1:c8:6c:99:3f:01:ff:8c:d9:43:8e:b8:29:15:
8f:2d:97:0d:ab:e6:05:7e:84:09:21:cf:e8:30:f8:
d4:76:b2:51:82:f0:9a:6b:37:8b:59:76:6c:89:c3:
d3:97:3f:6c:a6:e9:d8:02:33:d6:32:cd:66:01:0b:
6c:bc:c1:b4:67:d6:eb:36:b7:2b:96:59:88:53:84:
f4:cb:1d:06:4b:b7:5b:11:d7:a9:f2:f7:29:9b:1b:
fb:dc:34:db:36:d8:b0:df:f0:0b:fc:4c:69:02:b5:
da:51:17:f5:ac:9e:9e:de:00:a9:5c:5f:b9:a9:3b:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E9:67:88:01:42:76:66:34:96:F2:C5:E0:34:62:15:21:30:37:E7
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:21:02:61:d9:49:d1:19:5b:c4:4b:fc:19:06:37:83:ce:41:
35:47:4e:fe:64:2a:4d:6b:cf:66:73:0e:b0:c9:68:99:40:b6:
d6:cb:c8:c4:d5:47:75:a2:04:2d:a4:62:6c:1a:d3:8b:e6:3e:
6d:81:62:ae:11:54:f9:54:78:b4:a7:bd:3c:69:32:5a:25:1f:
e4:83:4d:0a:0c:45:68:16:0d:df:ec:e3:01:ef:48:33:18:18:
f2:65:43:d6:72:e8:a2:28:d1:e0:60:f9:bb:b5:71:db:c0:83:
7a:10:47:05:8f:06:65:1c:64:fe:f9:2f:90:7f:b6:bd:06:29:
4a:5b:cd:8f:df:7e:52:c1:de:30:2f:74:04:05:89:3a:4d:2d:
80:21:f6:5a:16:19:01:88:f7:94:2c:f4:27:cb:3f:e0:ff:f5:
c9:34:bf:6d:86:f5:6d:c4:a9:fd:90:11:6f:61:d2:da:f7:44:
a2:9d:46:7e:3d:3b:89:da:cc:cd:b4:86:97:01:3c:bd:ec:f8:
7a:68:78:33:b4:42:26:c2:da:ab:b9:4d:33:03:ee:ee:81:84:
63:5e:6b:e7:43:fb:33:56:12:a9:b9:7d:f2:f6:a5:1b:02:74:
01:c0:a7:6c:1c:7c:73:aa:05:6c:74:c9:a1:1d:49:62:86:31:
82:de:81:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:33:13 2026 by rpki-client