Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
File: yy2f-G42PbNNBVbsFkUfL38wPSQ.mft (raw, json)
Hash identifier: eCgRQLsDESzUwgLe4RkGFdXSiO2Qf/U8dP+brLJGXlc=
Subject key identifier: A5:10:9C:AE:B1:E2:5C:15:23:F1:B1:8D:7F:24:B6:FF:6E:D1:74:8D
Authority key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
Certificate issuer: /CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Certificate serial: 019EB8B3C8ED0283EFE561B6532572FF5447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 22:00:50 +0000
Manifest this update: Thu 11 Jun 2026 22:00:50 +0000
Manifest next update: Fri 12 Jun 2026 22:00:50 +0000
Files and hashes: 1: Wx516h-ycz_F6WDuwcZAFe5X748.roa (hash: OBge6N4+W5EoPiH34P9HhCCHgJeyBg+k4ngzYQtz6A0=)
2: yy2f-G42PbNNBVbsFkUfL38wPSQ.crl (hash: 5gF94XHf0v9MYuZYOQeKPBkvED+5C+Uq1cYhf2IaZeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b3:c8:ed:02:83:ef:e5:61:b6:53:25:72:ff:54:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Validity
Not Before: Jun 11 22:00:50 2026 GMT
Not After : Jun 12 22:00:50 2026 GMT
Subject: CN=a5109caeb1e25c1523f1b18d7f24b6ff6ed1748d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:85:8b:3a:53:98:57:37:60:2a:d9:38:7a:
8d:db:30:96:29:68:4d:ff:4f:3f:42:fc:8d:e8:d8:
1c:81:12:48:81:4d:75:4a:61:04:8b:23:8e:e2:71:
e0:8e:65:0a:1b:63:9c:4d:b1:c9:e9:0c:38:34:77:
66:19:60:8b:9e:47:58:52:f0:67:b1:21:71:00:5f:
fd:68:ab:e3:93:9c:0f:c5:c4:f2:b4:f1:6f:69:c0:
ab:47:67:7d:f2:3a:c8:3b:ee:d4:b1:67:34:0c:76:
76:bb:f6:ea:30:a2:00:19:26:ee:41:7d:7c:34:69:
29:75:bc:81:c3:ba:2f:34:b2:67:13:34:1c:c9:23:
cc:66:d7:5e:42:2c:af:1a:70:26:d3:d4:d8:53:c5:
84:4a:7d:c5:db:fd:16:ed:57:33:af:4a:64:1f:83:
8e:7e:ba:e7:3d:e0:51:e2:51:9b:3f:3e:0c:6f:9c:
02:b6:8d:6b:e2:d9:16:b8:e4:46:29:5b:12:11:cf:
09:16:10:a8:db:14:21:3e:65:d1:84:fb:45:1e:99:
77:0f:54:66:69:08:2c:7e:1a:c3:22:58:3c:01:c0:
29:75:f1:57:5a:e0:71:f8:3a:63:d7:30:e8:cd:f3:
82:3a:ce:d6:12:99:39:d2:ab:ed:14:86:b7:e7:2c:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:10:9C:AE:B1:E2:5C:15:23:F1:B1:8D:7F:24:B6:FF:6E:D1:74:8D
X509v3 Authority Key Identifier:
keyid:CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d9:e5:86:75:18:94:37:b0:48:a3:bc:b0:d1:76:ed:c3:dc:
41:ad:4d:1a:88:68:9e:f6:5a:da:fb:52:4a:b0:52:86:2a:7f:
f7:66:8b:8d:83:e2:a9:ae:4c:7d:f6:e8:af:e5:57:68:ed:98:
96:89:1b:77:ba:de:78:65:b2:d2:77:a3:dc:87:97:2f:eb:d7:
91:26:3a:79:44:bf:fb:52:5b:59:99:7a:a4:e5:69:12:fc:61:
31:c7:00:ea:b5:63:30:36:fc:e1:d3:b2:c0:de:bb:56:f8:44:
fa:39:da:04:81:3f:94:48:c7:db:fd:41:8e:26:9b:4d:b9:0e:
cb:15:9e:4e:a2:63:2a:29:b6:f5:ba:53:da:a2:db:5f:6e:ed:
30:b0:be:56:84:36:ad:2d:a4:e6:af:a1:87:12:53:f0:73:b9:
25:f6:28:a0:92:c9:8e:ae:43:b8:71:4a:9a:a0:16:6f:d4:4b:
9a:59:0a:ff:9f:e1:ae:30:e9:5f:28:4c:43:ff:ea:a5:f3:aa:
0f:62:4e:0f:78:27:13:21:f5:99:48:a8:3c:2a:04:0a:6a:17:
80:c0:3d:18:94:95:ad:3a:31:13:e4:dc:c5:42:cb:a5:c2:83:
73:a9:c7:cf:3c:2f:4b:13:29:1e:f9:85:bb:cd:f3:44:8e:07:
1d:d8:60:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:02:09 2026 by rpki-client