Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier: zIWaftgzrQnPEPy2nifRGthGh7iu94GLoZIR4qpg8X8=
Subject key identifier: C2:24:B5:A9:00:6E:CC:F3:A8:4D:3A:DC:87:B6:6C:D6:FD:45:7D:9F
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 01A0C70F29FCD3BAA845C7FCB6050E1B388B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number: 119D
Signing time: Tue 22 Sep 2026 03:00:54 +0000
Manifest this update: Tue 22 Sep 2026 03:00:54 +0000
Manifest next update: Wed 23 Sep 2026 03:00:54 +0000
Files and hashes: 1: 3me9x6h3lSEZqUVidDsZ7ac0L_U.roa (hash: JBCZWk53MUOqTUtRTfVY6AmHie1EcXDJvYsQQVSkdlA=)
2: N0yXHUnyqI9AcfgHuAzqodetZOU.roa (hash: uOAActN4XyvIBVzO4R2n2+4reFssBEajy/J11W05BVM=)
3: npk6WkIHJCvL3_l_cXYjMzft0kI.roa (hash: t+MEBsgDts42eIKY0nTbdaPBG3x9AZb+9dTa2sHYe1g=)
4: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: sPFy/hdkngm6ttD1IEf5opkqtTcLQS9oNthTDT5wsP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0f:29:fc:d3:ba:a8:45:c7:fc:b6:05:0e:1b:38:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Sep 22 03:00:54 2026 GMT
Not After : Sep 23 03:00:54 2026 GMT
Subject: CN=c224b5a9006eccf3a84d3adc87b66cd6fd457d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:58:52:7d:31:d3:cc:56:4c:3c:de:c7:ac:
34:86:0e:2c:fc:a2:36:fe:2f:58:72:2b:2b:f2:6d:
32:e4:e6:27:6e:53:d7:1a:19:39:76:65:56:b3:14:
85:fa:db:15:a0:5a:5b:cf:4f:86:25:d7:c1:6d:c7:
53:76:ea:34:b8:a1:e6:8d:d4:d2:de:9b:32:89:87:
75:41:ce:9d:21:71:0b:a4:59:84:17:ca:ec:ac:f8:
60:9a:c7:e6:4a:ad:ea:e7:79:73:10:9e:51:a3:ad:
7a:84:ab:b1:f8:60:8d:21:47:bf:d7:9a:ac:56:94:
e4:56:0a:04:39:a1:53:0a:53:77:d8:dd:9f:38:0c:
fa:2c:4d:7a:cc:16:26:c1:36:a5:19:13:86:2f:0e:
6d:e4:57:51:d2:71:c7:09:31:0f:b9:d0:f7:41:a6:
87:d9:b4:6f:0b:92:1d:2a:57:3b:8e:fd:50:55:57:
8a:07:89:3b:dd:4c:e6:d1:82:02:a7:ac:23:03:4a:
20:af:8a:85:bb:78:e1:f7:34:32:c6:a8:8a:6a:f6:
08:72:23:67:95:0f:2c:6b:09:78:35:94:db:1a:a5:
d7:ca:be:f4:e0:1d:5c:b3:4e:26:92:2e:89:2c:db:
94:78:61:17:86:bf:c6:d1:e1:87:43:10:aa:62:93:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:24:B5:A9:00:6E:CC:F3:A8:4D:3A:DC:87:B6:6C:D6:FD:45:7D:9F
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c2:ee:11:db:19:77:ad:f5:ea:b5:76:61:f9:ef:63:99:6d:
3e:37:c5:9e:e6:4d:a1:b4:06:2f:c1:ea:f1:6e:2f:68:d4:89:
a3:1e:e8:34:5a:f4:cc:e6:6c:15:81:36:bc:f0:82:5d:21:12:
a2:cb:fb:53:bf:4a:79:c1:6e:1e:34:89:0f:7c:59:bc:b3:d3:
50:1a:86:92:bd:0c:6e:34:a9:07:f1:23:12:f1:7c:9a:5c:35:
51:23:ab:ab:7e:b1:52:02:76:da:bd:ec:d7:95:17:8b:53:bf:
5d:0c:8d:b9:b1:55:6b:a6:2e:ad:54:12:cf:6d:1f:0c:e1:c4:
03:f5:32:7c:31:71:8c:fc:0a:e8:da:7b:c6:54:08:4c:e5:3f:
a5:5f:76:a3:92:36:26:fa:19:a3:00:ab:20:42:a1:e6:02:88:
be:f9:ab:c7:95:47:0f:a6:a4:e5:d9:77:e8:2d:8f:ec:c8:6f:
8a:96:ae:7d:fa:c4:35:3b:61:cd:9c:dd:61:55:62:57:22:ee:
0d:48:6f:8a:f3:f3:9d:4e:03:3f:cd:3a:97:4c:0a:7d:52:3c:
4c:1e:8f:8d:29:5d:5b:94:12:0c:19:27:53:af:91:bf:5f:51:
5f:b3:25:7b:c6:d5:ac:ed:04:8b:b4:0b:0f:d6:03:16:ae:ee:
01:67:09:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHDyn807qoRcf8tgUOGziLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjkzNmIzNWY5MmNkZWM1ZTkwZGYzM2JkYzUwODY2MWMy
N2I0NTUwHhcNMjYwOTIyMDMwMDU0WhcNMjYwOTIzMDMwMDU0WjAzMTEwLwYDVQQD
EyhjMjI0YjVhOTAwNmVjY2YzYTg0ZDNhZGM4N2I2NmNkNmZkNDU3ZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/pYUn0x08xWTDzex6w0hg4s/KI2
/i9Ycisr8m0y5OYnblPXGhk5dmVWsxSF+tsVoFpbz0+GJdfBbcdTduo0uKHmjdTS
3psyiYd1Qc6dIXELpFmEF8rsrPhgmsfmSq3q53lzEJ5Ro616hKux+GCNIUe/15qs
VpTkVgoEOaFTClN32N2fOAz6LE16zBYmwTalGROGLw5t5FdR0nHHCTEPudD3QaaH
2bRvC5IdKlc7jv1QVVeKB4k73Uzm0YICp6wjA0ogr4qFu3jh9zQyxqiKavYIciNn
lQ8sawl4NZTbGqXXyr704B1cs04mki6JLNuUeGEXhr/G0eGHQxCqYpNQ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIktakAbszzqE063Ie2bNb9RX2fMB8GA1UdIwQY
MBaAFMq5NrNfks3sXpDfM73FCGYcJ7RVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAt
NTU5MjM2MGUzZThlLzEveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAtNTU5MjM2MGUzZThl
LzEveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtcLuEdsZ
d6316rV2YfnvY5ltPjfFnuZNobQGL8Hq8W4vaNSJox7oNFr0zOZsFYE2vPCCXSES
osv7U79KecFuHjSJD3xZvLPTUBqGkr0MbjSpB/EjEvF8mlw1USOrq36xUgJ22r3s
15UXi1O/XQyNubFVa6YurVQSz20fDOHEA/UyfDFxjPwK6Np7xlQITOU/pV92o5I2
JvoZowCrIEKh5gKIvvmrx5VHD6ak5dl36C2P7MhvipauffrENTthzZzdYVViVyLu
DUhvivPznU4DP806l0wKfVI8TB6PjSldW5QSDBknU6+Rv19RX7Mle8bVrO0Ei7QL
D9YDFq7uAWcJ6w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:43:48 2026 by rpki-client