Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File: yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier: WO+H3FpP1e/4W+kMzfuy51UIQKU3wlW5ptD4RNH15Bo=
Subject key identifier: 40:96:74:04:27:5F:B8:E7:36:B7:E1:81:E0:73:DF:6E:C4:E2:7E:51
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 019D9AE2A6FA44F8FB35E1985FEDFB660176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 10:00:38 +0000
Manifest this update: Fri 17 Apr 2026 10:00:38 +0000
Manifest next update: Sat 18 Apr 2026 10:00:38 +0000
Files and hashes: 1: YMqsGPp_mbmCjWJLd9EJ8DM4L8A.roa (hash: TYDNZdeDcVMG8xtZmUsgp0p3WxwgGHDmOb5hVCRUc6A=)
2: eD5VOvbTEGKyk2FGGxuBVSBNR0A.roa (hash: Rl68HFZO+NzHdjcGZ7M/7lCLTV99GPY1FIFYCt0/pnw=)
3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: RHESikup7Zqh5hCZKUZnv394TPLlVSoBr+PeqwJgGJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:a6:fa:44:f8:fb:35:e1:98:5f:ed:fb:66:01:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Apr 17 10:00:38 2026 GMT
Not After : Apr 18 10:00:38 2026 GMT
Subject: CN=40967404275fb8e736b7e181e073df6ec4e27e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:d3:e3:94:54:0c:3b:03:c9:31:89:66:b6:
03:1f:30:31:5e:b8:0c:ea:3e:e3:76:fb:a0:82:ae:
fa:72:6d:0a:30:13:b0:8d:14:07:49:a5:71:31:78:
6f:7e:a8:e0:b8:a4:28:51:dd:29:a0:c0:44:59:73:
75:a8:d0:59:08:0e:cb:ec:86:55:75:46:92:6d:32:
10:c1:a2:2d:fd:b5:cc:bd:81:d7:d7:95:9a:ea:da:
37:aa:3a:1d:0b:40:60:78:96:e7:ca:0d:35:e8:62:
5f:d9:c3:56:86:8e:cf:97:db:fd:f9:27:1a:2d:ae:
34:a4:21:80:8e:47:31:8a:7a:e8:62:46:94:0f:98:
3f:4c:bc:fb:e0:ad:5a:ab:77:22:dd:ac:dc:3f:f9:
32:40:4d:29:49:10:fa:58:99:2c:3f:78:6c:68:50:
75:82:68:9a:d9:14:db:9b:c2:4b:97:55:27:c7:70:
3a:3d:5f:e6:a6:46:45:4e:18:6b:8d:b3:72:53:f2:
1e:fb:03:4b:2b:ff:4d:9a:58:98:61:04:e8:8b:fe:
62:b7:b5:68:fe:3f:4f:ef:73:33:d4:3b:f0:b5:9c:
88:49:aa:65:17:0d:1c:07:d4:7c:55:0d:c1:c3:57:
86:83:6a:8f:db:34:3f:70:ca:38:b7:8a:b4:41:4e:
7f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:96:74:04:27:5F:B8:E7:36:B7:E1:81:E0:73:DF:6E:C4:E2:7E:51
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:55:03:83:d1:86:d0:27:22:7e:4e:de:12:58:6b:21:62:e7:
e2:1d:f3:9b:01:44:73:b3:f6:96:ee:2b:d4:d8:74:34:94:85:
52:35:1e:81:6b:dc:26:7a:7f:2d:da:4a:59:8a:f9:d5:86:36:
00:26:c8:1d:65:66:98:c9:7b:f8:bd:0c:dd:c0:18:19:ae:e8:
f6:dd:e2:38:91:0f:ca:6a:1c:55:0c:cd:8f:53:e4:b9:89:f5:
3f:92:35:85:46:2d:2b:a3:4b:be:1e:02:9c:d9:ce:90:a1:d0:
bc:ca:5c:7e:d7:ad:80:f1:78:1a:da:98:95:de:b7:c7:40:c1:
46:f7:f0:c0:e9:d3:58:e8:2b:da:09:6d:de:68:bf:d5:1a:c8:
b8:c7:68:9a:a6:64:1c:49:2d:0c:9b:c0:08:4f:1b:5b:46:68:
9d:f0:d9:49:cc:c4:52:f9:6c:c7:16:dd:a5:6e:df:2e:eb:46:
03:ca:31:ac:5f:0e:46:24:31:b7:f4:cf:a5:bb:88:e0:11:2e:
60:88:59:1a:0a:a9:71:5c:cb:87:9b:e5:3d:35:a4:07:1a:a1:
fe:c5:55:ce:27:2b:16:2a:ed:36:d5:b6:47:d0:b3:d0:fd:c3:
bd:b3:19:23:b3:2d:b3:30:a2:c6:e4:31:a3:97:58:6a:e4:0d:
87:fa:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:35:44 2026 by rpki-client