Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier: SqfrUbl+pY5UnfvcKzFlATAZCoVG3m5JCVumUWhAXU4=
Subject key identifier: 8C:AB:49:88:FC:EA:D0:85:EB:64:C9:8F:95:5D:17:CF:4C:0B:88:BE
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 01A1502C71C3851018D257A9A5712332C267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number: 11E4
Signing time: Sun 18 Oct 2026 18:00:52 +0000
Manifest this update: Sun 18 Oct 2026 18:00:52 +0000
Manifest next update: Mon 19 Oct 2026 18:00:52 +0000
Files and hashes: 1: 3me9x6h3lSEZqUVidDsZ7ac0L_U.roa (hash: JBCZWk53MUOqTUtRTfVY6AmHie1EcXDJvYsQQVSkdlA=)
2: N0yXHUnyqI9AcfgHuAzqodetZOU.roa (hash: uOAActN4XyvIBVzO4R2n2+4reFssBEajy/J11W05BVM=)
3: npk6WkIHJCvL3_l_cXYjMzft0kI.roa (hash: t+MEBsgDts42eIKY0nTbdaPBG3x9AZb+9dTa2sHYe1g=)
4: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: MRUzNmQNOF57bNGcIiD5eC1WXR5U6qDSaaBVxUGQJoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:2c:71:c3:85:10:18:d2:57:a9:a5:71:23:32:c2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Oct 18 18:00:52 2026 GMT
Not After : Oct 19 18:00:52 2026 GMT
Subject: CN=8cab4988fcead085eb64c98f955d17cf4c0b88be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:71:8d:34:27:b6:28:d9:23:29:a7:5e:4f:
28:1b:f7:bb:5a:d2:0f:41:20:ae:db:32:38:f7:62:
6b:25:97:3a:5c:68:53:84:41:d2:0b:11:03:8a:6d:
99:e2:50:14:89:ac:de:8e:1b:b3:78:87:98:20:09:
0b:c5:ed:1f:33:2a:fe:15:09:fb:3d:32:3e:3d:cf:
2d:07:cc:ec:69:af:6f:a1:c3:30:11:02:5e:4f:6b:
ed:4e:5a:19:81:2f:e8:b1:85:5b:50:99:e9:c4:8a:
40:de:0c:cb:34:79:52:1e:5e:35:8f:fa:a1:0f:e3:
cd:00:a0:fe:50:32:95:2b:7a:e8:05:7d:5d:43:21:
55:a8:2f:41:2f:7d:9a:fb:1f:56:97:89:c8:ce:cb:
99:91:c0:20:cb:46:cf:cf:03:7d:a2:81:1b:db:bc:
09:88:e0:e3:68:66:09:9c:62:d6:e7:f5:b0:6c:2e:
1b:bc:2b:41:60:83:d4:07:24:f8:bf:df:c1:75:04:
c0:87:a3:a0:a2:cd:bb:12:9c:5b:4f:6d:de:99:54:
92:1e:27:70:79:a0:8c:11:0d:c4:f9:11:5c:9f:3f:
42:66:e7:8d:44:8c:b7:4c:df:ce:4f:5c:8c:f8:d1:
87:f6:2c:ed:18:f3:94:24:d5:5e:25:47:e9:84:4a:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AB:49:88:FC:EA:D0:85:EB:64:C9:8F:95:5D:17:CF:4C:0B:88:BE
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:10:72:ac:97:e9:5c:5e:92:6b:25:cc:5f:1b:70:81:20:ba:
2c:ef:92:65:c3:b9:a5:db:7b:b8:6a:22:6f:91:8d:7d:11:b4:
07:c7:16:2f:3a:a9:55:bf:aa:c3:9a:de:a4:e6:b3:bd:6c:2e:
b0:0f:ce:dc:7a:32:45:5d:d4:2d:2b:6e:fa:76:b4:ec:8f:54:
34:5a:5d:b2:8d:27:8b:2c:c9:d3:cd:12:be:bb:98:94:55:03:
9e:22:a8:78:53:fb:ee:90:eb:83:2b:62:e6:d5:88:f0:f1:09:
71:cf:82:aa:c9:60:1f:0e:b1:31:b7:f9:0b:34:49:54:27:c9:
54:11:d9:55:0c:05:53:f1:af:8a:d0:ab:b2:46:45:a9:b7:12:
4d:e9:4b:18:7c:29:83:c5:f0:45:47:c2:2b:58:68:7a:9f:62:
c3:1c:5a:f6:e7:96:45:1f:70:91:91:68:bd:fb:48:3c:a0:ca:
7e:bc:ac:b5:37:e2:b8:1a:a6:12:d0:d7:5a:8c:dd:1a:2e:7f:
87:05:8d:68:b2:9d:d2:25:b7:c2:71:32:07:c7:1e:b1:d8:76:
f7:10:ca:d4:27:77:24:d2:97:be:cf:48:83:6c:4b:64:84:da:
f2:ec:2c:3f:eb:a4:de:e8:c4:e8:ed:f0:8e:37:89:f9:a3:81:
32:c6:c1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:48:56 2026 by rpki-client