Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File: yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier: CIpPwZZ+OU6AK0arCidSnncr+B6aOM3yF6XtPX9Bxtw=
Subject key identifier: 85:6D:43:AE:88:C9:9B:58:3B:9E:7C:B3:58:96:76:1B:B7:ED:F6:F8
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 01A0DD294A5FCE967188C6F9E3615AFFF8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 10:01:05 +0000
Manifest this update: Sat 26 Sep 2026 10:01:05 +0000
Manifest next update: Sun 27 Sep 2026 10:01:05 +0000
Files and hashes: 1: YMqsGPp_mbmCjWJLd9EJ8DM4L8A.roa (hash: TYDNZdeDcVMG8xtZmUsgp0p3WxwgGHDmOb5hVCRUc6A=)
2: eD5VOvbTEGKyk2FGGxuBVSBNR0A.roa (hash: Rl68HFZO+NzHdjcGZ7M/7lCLTV99GPY1FIFYCt0/pnw=)
3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: t1MgbmtWtAQdwTmPsjfiIWcsDKArXQIgHk5eNy5QWRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:4a:5f:ce:96:71:88:c6:f9:e3:61:5a:ff:f8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Sep 26 10:01:05 2026 GMT
Not After : Sep 27 10:01:05 2026 GMT
Subject: CN=856d43ae88c99b583b9e7cb35896761bb7edf6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:38:7b:a1:be:cf:68:e2:98:1c:d0:60:93:
61:48:86:21:7c:5d:c3:63:c3:82:2d:61:72:29:d6:
af:5c:04:2d:ab:21:e0:fd:64:a1:cb:18:90:cb:97:
3d:d5:58:59:11:41:8c:e9:00:69:34:59:d0:3e:7e:
85:9b:14:81:8e:e6:26:ad:f2:3d:0b:63:eb:76:72:
13:ef:21:16:4e:e4:74:d3:44:69:e5:84:81:0f:c5:
5b:65:8d:a7:92:51:f8:a3:0d:b3:f2:91:0f:9e:d3:
7a:28:d5:b9:d8:95:a4:88:4e:d7:63:1d:d8:ab:9d:
86:08:1e:5c:26:ba:09:8b:7d:4f:6d:77:55:1a:1e:
d5:6f:78:92:3f:23:99:91:fe:12:e9:0a:0b:46:62:
94:6a:e4:fe:27:fd:09:b1:6b:7d:cc:44:bc:78:ce:
34:64:57:56:b8:2c:d2:12:75:d8:06:ee:1a:5b:0b:
d4:06:71:44:c8:e8:f5:6d:2a:24:9f:5c:dd:5d:50:
6f:57:b7:2a:d2:b1:a0:2a:4b:6e:ac:00:62:aa:0e:
72:a3:8d:ae:db:64:26:0c:4e:d2:cb:90:52:5d:9c:
f7:a1:4a:55:85:f3:37:70:2b:58:72:7a:f7:cb:9b:
63:8a:c8:1d:b9:d5:44:87:4f:72:d1:3b:d5:c4:7a:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6D:43:AE:88:C9:9B:58:3B:9E:7C:B3:58:96:76:1B:B7:ED:F6:F8
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:69:95:2a:0d:eb:26:e8:6f:5a:42:b0:5e:ab:dd:08:79:5a:
03:ae:24:0e:11:bc:17:a8:31:78:20:a7:d2:92:95:e7:6b:ca:
c4:2f:77:c9:6a:c1:d4:70:cf:1a:09:e9:7e:fe:76:60:62:d7:
99:28:8a:2d:53:05:97:86:cc:93:a9:fe:7f:b5:f9:4c:e3:b1:
31:f3:eb:99:cf:b1:1e:85:a7:60:ee:e0:1b:5f:21:14:59:a2:
3c:a5:a8:65:22:5d:00:37:c3:23:ce:1b:e5:10:b9:c7:b9:a2:
83:cb:98:3c:8a:d5:5b:7a:c4:30:ee:d7:af:1d:28:8f:78:fb:
cf:9e:90:c2:c3:60:f5:67:13:14:5f:e0:b3:21:2f:40:a8:36:
a0:ce:4e:24:56:ae:75:5e:6d:14:f1:97:0c:e4:2b:1f:55:23:
a8:2e:cf:5d:24:59:22:2d:4f:f9:fe:b1:3d:ff:02:10:79:e1:
81:c9:89:23:cc:63:db:7c:3a:32:ff:62:7f:6d:27:3b:e3:d2:
1d:1f:3f:d5:b8:ea:89:a2:0e:8e:bb:ef:56:68:fe:3c:2a:0e:
45:e1:1c:40:ff:8d:6b:cb:65:50:ec:20:16:1f:d7:a2:02:a2:
37:2a:c3:a9:ab:fd:12:27:58:f6:79:c0:0b:52:97:02:ea:e2:
5d:72:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:30:07 2026 by rpki-client