Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
File: yy2f-G42PbNNBVbsFkUfL38wPSQ.mft (raw, json)
Hash identifier: 3wjjob+lI3afbmxPSAgE3w7inA3T/tiUJaypWwG5RTY=
Subject key identifier: 07:ED:AC:6C:63:28:6B:E1:8B:1D:82:03:B2:AB:36:BE:2F:DB:93:5C
Authority key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
Certificate issuer: /CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Certificate serial: 019FA44E8A8A3A2A588AA5B12FCB52904DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 16:00:38 +0000
Manifest this update: Mon 27 Jul 2026 16:00:38 +0000
Manifest next update: Tue 28 Jul 2026 16:00:38 +0000
Files and hashes: 1: Wx516h-ycz_F6WDuwcZAFe5X748.roa (hash: OBge6N4+W5EoPiH34P9HhCCHgJeyBg+k4ngzYQtz6A0=)
2: yy2f-G42PbNNBVbsFkUfL38wPSQ.crl (hash: djdcERUQg9L2Ezl1pnAgInQpBw8ITVuHtxuit35z6Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4e:8a:8a:3a:2a:58:8a:a5:b1:2f:cb:52:90:4d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Validity
Not Before: Jul 27 16:00:38 2026 GMT
Not After : Jul 28 16:00:38 2026 GMT
Subject: CN=07edac6c63286be18b1d8203b2ab36be2fdb935c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:49:89:34:7e:2d:be:c4:ad:62:ca:75:a8:
19:86:dc:61:1b:06:54:98:4d:a4:b2:70:e8:a2:f5:
08:fa:89:0e:cc:ba:81:62:f4:bc:38:ef:fd:d2:59:
a1:1b:35:0f:59:41:57:f8:76:35:d5:8f:82:76:fe:
ff:c3:2a:c0:e8:59:1f:4e:48:f7:6c:63:68:7d:d9:
e9:7e:43:e4:44:ca:2e:01:55:14:b9:37:d8:e4:eb:
19:f8:97:f3:58:ce:35:52:9a:fa:8f:15:f5:90:a4:
86:5f:a2:5c:d6:a6:bd:39:5b:16:54:7e:3a:5c:90:
8e:67:e9:f3:bf:fb:f6:c1:0a:50:e6:0e:48:42:58:
31:86:74:a9:15:89:a3:3c:7b:7f:44:2c:bd:62:ec:
cb:50:18:12:b2:e0:60:7f:d6:bf:01:59:a2:90:46:
8a:0a:83:3d:db:b5:61:f2:10:7c:ee:6a:f6:f4:dd:
4c:f5:55:8d:ed:67:d0:ae:d5:94:15:3a:e5:37:33:
50:5e:d1:ee:83:62:8b:9b:c6:16:f6:b2:c7:42:a1:
86:60:3e:73:af:ff:9d:3b:4e:43:7e:2b:05:42:2a:
0c:6f:ae:70:2a:3d:b7:38:3a:d2:7d:a8:a0:88:df:
9e:37:ce:7f:5a:4a:b9:db:66:34:15:6d:2a:b2:3f:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:ED:AC:6C:63:28:6B:E1:8B:1D:82:03:B2:AB:36:BE:2F:DB:93:5C
X509v3 Authority Key Identifier:
keyid:CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:bc:f8:b9:e9:70:42:b8:e3:0d:e6:6d:16:4d:ea:af:9d:df:
2d:47:e9:68:2c:c9:e9:66:43:86:79:22:04:04:15:af:5f:7b:
03:a4:90:14:ba:32:9f:a9:65:02:29:35:5b:da:77:a6:45:75:
a4:03:bd:6d:9f:d1:b8:e3:e5:16:b6:1e:25:bf:8d:a1:cd:04:
50:06:b1:d8:3f:aa:36:ac:e0:d1:d8:58:ac:ff:3a:99:62:6a:
5c:e2:14:34:73:05:a6:10:66:b3:5c:f3:d2:4c:20:b8:fa:e8:
a5:e1:f8:39:64:ba:bc:37:99:71:6f:9d:f7:3b:cb:26:95:95:
ca:6e:85:06:bc:18:b4:e9:3f:d2:78:73:13:62:cf:96:d4:ea:
cb:12:9c:c2:af:eb:09:9c:7a:af:b7:9b:7f:04:ad:e4:b1:8d:
5b:75:8a:86:91:c0:78:db:8c:d3:44:b0:9c:68:85:ae:25:5d:
09:61:db:11:97:87:a5:8b:89:8c:56:af:68:97:c8:ef:b2:3a:
a0:84:65:d2:d7:41:1f:33:82:0f:7b:4a:f2:d5:18:fe:85:f9:
be:fb:9e:73:6b:02:12:f0:ff:a9:e3:6a:04:05:46:ee:5b:ee:
87:a3:88:41:cf:22:15:42:7b:d0:41:61:0b:31:59:bd:2d:a0:
23:76:55:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:17:08 2026 by rpki-client