Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
File: yy2f-G42PbNNBVbsFkUfL38wPSQ.mft (raw, json)
Hash identifier: z98t3IMSH3CZNDbj7AYaYOfdNu0DXb0kXmUwT8fPGL4=
Subject key identifier: 53:39:E3:0B:88:B8:FE:1B:4E:F2:21:86:7B:92:73:9F:C3:EA:0E:33
Authority key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
Certificate issuer: /CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Certificate serial: 019DCF07C7CD94500873BAEC0465DB598C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 13:01:26 +0000
Manifest this update: Mon 27 Apr 2026 13:01:26 +0000
Manifest next update: Tue 28 Apr 2026 13:01:26 +0000
Files and hashes: 1: Wx516h-ycz_F6WDuwcZAFe5X748.roa (hash: OBge6N4+W5EoPiH34P9HhCCHgJeyBg+k4ngzYQtz6A0=)
2: yy2f-G42PbNNBVbsFkUfL38wPSQ.crl (hash: /1eNMBV5miqMQ1V6zurWoEielTZOmvItZJHQhT10/T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:c7:cd:94:50:08:73:ba:ec:04:65:db:59:8c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Validity
Not Before: Apr 27 13:01:26 2026 GMT
Not After : Apr 28 13:01:26 2026 GMT
Subject: CN=5339e30b88b8fe1b4ef221867b92739fc3ea0e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:03:a4:5f:29:61:76:56:97:13:93:2f:0d:
2a:cb:d4:69:b9:87:13:7d:30:0c:fa:87:62:67:a5:
3b:0d:90:e2:a0:77:97:6b:1e:0c:fc:a5:c3:1c:b8:
3b:af:37:4f:16:7f:7e:9a:22:7f:85:75:6b:bd:44:
33:a9:a8:f1:5a:0f:5d:51:a5:20:27:5c:82:df:3d:
fb:2a:0c:b1:a3:3d:41:ab:51:2e:80:46:57:00:8d:
94:0e:53:bf:5c:29:56:21:5f:cc:7e:4e:29:2f:00:
56:e5:f9:a6:28:f6:79:04:de:e2:ad:9b:74:a7:ff:
46:fb:97:73:c0:20:14:95:25:74:fb:2f:58:55:5d:
3f:02:ee:44:dd:7e:64:a4:3a:a5:17:e5:97:40:e2:
e7:01:10:54:d2:18:e4:c6:5c:b0:ca:9b:69:bb:23:
40:cd:32:1b:39:ea:fd:ad:99:c4:52:50:d3:d5:7a:
dd:16:b1:c3:f8:4f:6d:41:b0:77:97:a3:ed:b8:ec:
c1:c0:a8:78:12:a5:d0:de:98:e7:df:1c:d9:46:ce:
22:5e:9e:11:5b:b8:07:56:5c:41:01:3a:05:4b:ff:
b9:f2:e7:0a:a9:cd:83:53:8c:66:ed:9d:25:60:0f:
fd:af:1f:94:9a:58:c1:55:d2:72:0f:0a:71:cb:a5:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:39:E3:0B:88:B8:FE:1B:4E:F2:21:86:7B:92:73:9F:C3:EA:0E:33
X509v3 Authority Key Identifier:
keyid:CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c4:76:c8:5d:8a:52:ca:46:c8:bc:5e:16:eb:9a:c6:8f:fa:
37:63:e9:63:10:38:a7:ac:69:86:9f:2b:e8:5f:e3:ce:8d:3e:
bf:aa:6e:19:14:d6:b1:03:18:67:16:a5:ca:35:5e:8e:2d:03:
f7:7d:bd:1f:18:54:df:48:8f:32:1c:4e:58:6a:6c:38:4c:57:
c6:f4:48:73:f6:81:66:c7:eb:9d:5d:44:f3:ce:91:46:4a:db:
90:45:da:53:29:c0:08:ed:3b:e9:d1:47:62:95:fe:fb:74:07:
76:71:77:ce:5f:4e:7f:c1:09:c6:3a:f3:54:1b:33:59:5f:aa:
c7:a2:df:2c:11:bc:dd:0a:fc:8e:c1:47:7a:55:d0:68:eb:06:
78:c6:58:df:0d:5b:10:ec:43:03:e4:21:6d:87:4a:7b:d3:ea:
29:b1:40:64:0b:4e:0c:32:28:6d:32:61:82:22:4c:29:95:5e:
1a:88:78:37:ed:60:1d:ea:ad:5c:2d:18:17:9b:be:5f:a5:a0:
63:e9:53:d1:e4:a0:d6:c5:e8:2c:80:ac:d7:10:25:0f:ec:11:
9a:70:30:f2:52:15:a3:06:1e:b2:05:28:29:fc:04:14:09:99:
eb:b1:21:e2:70:93:ce:cf:c5:ad:87:d1:3d:4a:69:b3:39:95:
7d:e2:87:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PB8fNlFAIc7rsBGXbWYwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMmQ5ZmY4NmUzNjNkYjM0ZDA1NTZlYzE2NDUxZjJmN2Yz
MDNkMjQwHhcNMjYwNDI3MTMwMTI2WhcNMjYwNDI4MTMwMTI2WjAzMTEwLwYDVQQD
Eyg1MzM5ZTMwYjg4YjhmZTFiNGVmMjIxODY3YjkyNzM5ZmMzZWEwZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ0DpF8pYXZWlxOTLw0qy9RpuYcT
fTAM+odiZ6U7DZDioHeXax4M/KXDHLg7rzdPFn9+miJ/hXVrvUQzqajxWg9dUaUg
J1yC3z37Kgyxoz1Bq1EugEZXAI2UDlO/XClWIV/Mfk4pLwBW5fmmKPZ5BN7irZt0
p/9G+5dzwCAUlSV0+y9YVV0/Au5E3X5kpDqlF+WXQOLnARBU0hjkxlywyptpuyNA
zTIbOer9rZnEUlDT1XrdFrHD+E9tQbB3l6PtuOzBwKh4EqXQ3pjn3xzZRs4iXp4R
W7gHVlxBAToFS/+58ucKqc2DU4xm7Z0lYA/9rx+UmljBVdJyDwpxy6WArwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM54wuIuP4bTvIhhnuSc5/D6g4zMB8GA1UdIwQY
MBaAFMstn/huNj2zTQVW7BZFHy9/MD0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXkyZi1HNDJQYk5OQlZic0ZrVWZMMzh3UFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMWFmNWItMDg5ZS00Y2JlLWJiZTkt
NDI1ZWU5NjhkZjBiLzEveXkyZi1HNDJQYk5OQlZic0ZrVWZMMzh3UFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMWFmNWItMDg5ZS00Y2JlLWJiZTktNDI1ZWU5NjhkZjBi
LzEveXkyZi1HNDJQYk5OQlZic0ZrVWZMMzh3UFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8R2yF2K
UspGyLxeFuuaxo/6N2PpYxA4p6xphp8r6F/jzo0+v6puGRTWsQMYZxalyjVeji0D
9329HxhU30iPMhxOWGpsOExXxvRIc/aBZsfrnV1E886RRkrbkEXaUynACO076dFH
YpX++3QHdnF3zl9Of8EJxjrzVBszWV+qx6LfLBG83Qr8jsFHelXQaOsGeMZY3w1b
EOxDA+QhbYdKe9PqKbFAZAtODDIobTJhgiJMKZVeGoh4N+1gHeqtXC0YF5u+X6Wg
Y+lT0eSg1sXoLICs1xAlD+wRmnAw8lIVowYesgUoKfwEFAmZ67Eh4nCTzs/FrYfR
PUppszmVfeKHCA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:37:21 2026 by rpki-client