Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier: ak7YXKi8de/egfvJhJz0JMEU30q6oocG1H5iaPIXRRM=
Subject key identifier: 30:C3:E3:59:87:8B:8C:F4:CB:E9:09:FA:BB:34:09:8C:D1:64:BA:2E
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 019CAD90172F6250F5E2C82E5843ACEE1BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number: 0F7A
Signing time: Mon 02 Mar 2026 08:00:27 +0000
Manifest this update: Mon 02 Mar 2026 08:00:27 +0000
Manifest next update: Tue 03 Mar 2026 08:00:27 +0000
Files and hashes: 1: L8uu4ebfrDkqdQimnWmdpvR7zrQ.roa (hash: Pgl4nKmggpktguryDKN7jPFRY/SQE3vFvuMFMU7msdI=)
2: t72vzDed8xwwFdYwzkhMty8CSXI.roa (hash: YW4OPr8TGjFQl6muhUEM/uVQLLBIy3RVHE6bb2pg68w=)
3: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: LWuBy58OqlcnH3lywmLLHw3MA3Mp6epNO+B04BxtguA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:17:2f:62:50:f5:e2:c8:2e:58:43:ac:ee:1b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Mar 2 08:00:27 2026 GMT
Not After : Mar 3 08:00:27 2026 GMT
Subject: CN=30c3e359878b8cf4cbe909fabb34098cd164ba2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:f2:3a:b1:f5:84:94:5c:55:be:76:54:54:
3e:39:c0:cf:cb:56:50:01:ff:db:e7:e2:f2:d9:15:
0b:a8:72:33:17:f4:1d:4b:3e:1c:e4:9d:3d:36:d9:
1a:c9:0b:d9:53:dd:50:b1:40:06:50:12:41:34:c6:
4f:89:1e:a7:34:32:8f:c5:f8:c2:ae:cd:2b:9b:41:
7e:5a:e8:35:e1:27:ca:be:dd:48:81:86:36:62:f1:
42:55:72:9c:f3:6c:6c:df:4e:7e:41:75:04:c7:5b:
79:16:42:09:27:df:6d:0e:35:d6:8b:fa:0f:f8:a3:
47:c5:26:a3:2e:12:e3:9f:75:33:56:01:97:c5:16:
c8:16:7e:45:d9:c7:93:e1:78:42:87:98:c0:a4:3a:
75:4c:6f:fd:6a:8b:55:51:6a:45:0a:c1:89:51:b4:
97:61:88:32:d6:fe:ff:c7:e3:80:c1:72:6d:42:40:
24:bf:a4:40:6b:3a:e4:6b:8d:62:a9:f6:bf:f2:a1:
3e:79:ae:f1:2f:fa:9b:cb:e9:69:5f:15:cd:ad:fa:
5b:62:d3:79:a9:4f:12:2a:9a:0f:2d:41:d0:ac:a6:
9f:59:07:2a:ef:cb:a6:68:16:2d:5b:73:94:af:95:
91:d3:07:89:e5:46:3b:07:5f:83:a5:34:3c:c4:4a:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C3:E3:59:87:8B:8C:F4:CB:E9:09:FA:BB:34:09:8C:D1:64:BA:2E
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b6:18:78:ff:92:a1:6a:5e:1a:21:a3:33:54:d8:bf:cb:9c:
33:e6:d7:30:47:ed:35:4e:60:91:f5:57:52:e5:17:e3:cb:19:
91:9f:a9:75:e8:2e:e4:5a:7e:eb:ca:a1:7c:30:b6:e5:a7:24:
3a:8d:ac:32:69:8e:51:ea:a7:dc:b0:41:6a:73:12:6e:41:ba:
2a:0f:3d:22:fa:b4:f1:6b:61:90:d6:f9:05:95:3d:6c:b2:5a:
be:6c:45:7f:cf:62:96:65:71:8e:24:0f:b8:29:14:9c:c2:54:
3b:0c:ce:97:14:63:9c:a8:1a:f4:42:1b:6e:1e:f2:21:a7:22:
9a:3c:c1:aa:51:c3:93:93:ba:74:cd:57:03:e2:3a:e6:5d:c5:
2b:d5:fa:f0:0f:12:9b:b5:2b:a9:e8:2c:68:1b:23:23:54:81:
33:af:4b:bf:68:6f:a9:72:e7:14:d7:ef:48:09:92:94:6f:04:
c9:3e:58:a2:aa:a3:c9:19:85:41:e8:c0:d7:cd:fe:ac:ad:66:
37:5b:4b:57:92:e8:a0:05:5c:b4:ca:f2:a2:ed:8f:2a:c5:0c:
c6:89:4b:3a:4e:75:17:b9:d2:20:4e:98:01:e6:0c:59:59:34:
b9:a6:77:9c:bd:7b:09:40:4a:54:f1:94:f7:0e:af:60:d8:4c:
cf:52:9a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:03 2026 by rpki-client