Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier: QUsIYT1dQ3xMGLto40UxOBf2ONRKERrZDSB+kXEHltk=
Subject key identifier: 65:F0:83:68:C7:54:8D:A6:84:53:76:9A:68:E4:8C:2A:77:26:D5:D5
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 019FAB2CC68EF232B5C86A952101B21D0339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number: 110A
Signing time: Wed 29 Jul 2026 00:01:06 +0000
Manifest this update: Wed 29 Jul 2026 00:01:06 +0000
Manifest next update: Thu 30 Jul 2026 00:01:06 +0000
Files and hashes: 1: 3me9x6h3lSEZqUVidDsZ7ac0L_U.roa (hash: JBCZWk53MUOqTUtRTfVY6AmHie1EcXDJvYsQQVSkdlA=)
2: N0yXHUnyqI9AcfgHuAzqodetZOU.roa (hash: uOAActN4XyvIBVzO4R2n2+4reFssBEajy/J11W05BVM=)
3: npk6WkIHJCvL3_l_cXYjMzft0kI.roa (hash: t+MEBsgDts42eIKY0nTbdaPBG3x9AZb+9dTa2sHYe1g=)
4: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: 11+WxIyd/RQr3Ziy11tsnDS4jKWHq5/sZ297FdnZNhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:c6:8e:f2:32:b5:c8:6a:95:21:01:b2:1d:03:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Jul 29 00:01:06 2026 GMT
Not After : Jul 30 00:01:06 2026 GMT
Subject: CN=65f08368c7548da68453769a68e48c2a7726d5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:d1:67:3a:dd:c2:1e:61:d5:2c:3f:0e:2c:
41:76:6f:91:e3:a7:de:2d:df:5a:12:8c:ed:d8:cc:
0c:05:b6:5d:57:cc:38:54:5f:14:4b:a3:e3:d9:25:
87:94:ac:04:ff:30:b4:91:51:ec:96:43:55:c4:82:
7d:f8:c6:1a:ef:01:71:9c:9b:ef:0d:04:6e:e7:4a:
2a:0e:f7:c5:94:e8:2c:21:2e:7d:21:38:4a:80:a6:
81:2e:5d:56:88:3d:09:e7:a8:0c:4d:4f:26:ee:23:
f0:e6:0e:8b:43:06:2e:02:9a:4f:63:4d:1c:ad:17:
09:01:de:29:fc:1c:be:66:0a:b7:36:bc:87:8e:f9:
4e:30:74:57:84:89:64:71:ad:ce:20:86:4e:1a:59:
11:e6:5c:84:58:f6:c4:86:b1:53:c9:95:fd:3d:06:
c8:f1:e7:5f:2c:44:fb:78:dd:ca:50:c8:64:9d:88:
17:59:b1:81:33:bf:da:08:bc:68:d4:fe:bd:fc:1c:
6f:9e:71:23:b4:b5:91:90:05:38:40:be:b6:6d:bb:
e7:cb:b8:b8:1a:7c:90:28:17:2d:b6:99:62:d9:a0:
20:4c:7c:91:62:95:07:84:a5:52:1d:ea:e7:d2:1e:
21:66:90:0e:e0:b5:65:99:5a:62:2d:c5:d8:51:9f:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F0:83:68:C7:54:8D:A6:84:53:76:9A:68:E4:8C:2A:77:26:D5:D5
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:76:4b:41:80:dd:77:5f:79:a5:76:76:b3:a2:7e:7d:be:bd:
1c:12:33:5e:50:f6:8d:11:87:32:7f:28:26:a9:c2:4e:8b:15:
71:63:6c:3a:b4:c6:38:22:fa:d9:fc:7f:e6:42:b6:5e:8e:b2:
cd:06:7b:0b:e5:3e:ed:1f:0a:5e:ca:f8:ec:87:be:ad:5f:cd:
74:03:fc:8c:f0:44:de:fb:a2:69:6c:7a:15:53:29:cf:f5:b2:
df:7e:9c:a5:51:c3:08:bc:9e:79:39:5f:04:ba:ff:ca:34:1d:
87:ec:10:f8:b6:1e:08:74:77:33:69:09:5b:74:c5:9c:eb:db:
47:de:24:30:11:a6:3e:ac:d0:23:36:ed:3c:79:01:2c:9e:da:
68:a8:4f:63:de:b6:b0:37:95:6e:0b:61:7d:69:55:a6:df:bf:
ea:fd:9c:f0:a7:b4:55:e5:39:da:a6:69:82:04:3f:43:1c:50:
8b:6d:62:24:9d:53:01:ff:98:87:fc:b5:e0:25:ae:39:c2:af:
60:3c:be:0b:79:1c:e1:c1:8f:b2:57:31:fe:24:c7:f6:a6:e2:
01:99:85:fc:0d:96:c6:cd:4f:db:21:80:0e:d0:f1:23:e7:13:
3d:1c:fc:16:4d:fe:38:35:45:df:f2:3d:19:4b:2d:cd:6c:9d:
98:bc:f5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:16 2026 by rpki-client