Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File: yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier: y5mOv9G9fGhQ0Nbv94tppM9d1JjRT2gZiBOMUqolgLg=
Subject key identifier: F0:5D:28:D7:74:67:3F:70:59:9D:66:43:1B:CA:C8:BB:56:9B:E8:43
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 019D3865F5A67D5DF2BD983000C33B16329E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: YMqsGPp_mbmCjWJLd9EJ8DM4L8A.roa (hash: TYDNZdeDcVMG8xtZmUsgp0p3WxwgGHDmOb5hVCRUc6A=)
2: eD5VOvbTEGKyk2FGGxuBVSBNR0A.roa (hash: Rl68HFZO+NzHdjcGZ7M/7lCLTV99GPY1FIFYCt0/pnw=)
3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: iij8HCQ4OwSI4Egs+HXLg5SDDpEgoSxIE4Ufc4UVZRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f5:a6:7d:5d:f2:bd:98:30:00:c3:3b:16:32:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=f05d28d774673f70599d66431bcac8bb569be843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:33:9b:85:35:40:7a:a9:85:84:7c:50:a1:
71:fc:98:d9:fa:de:56:bc:4b:01:37:b0:53:e5:e5:
41:3e:8b:ef:55:c8:58:00:dd:3f:05:cd:6b:0b:c5:
ba:2e:ba:e4:6a:02:37:95:01:a4:79:5a:b2:c2:da:
78:60:10:e4:cb:d5:42:42:f0:ee:64:e1:a6:56:be:
01:e5:c5:23:92:4a:09:0c:71:6d:e7:b5:7a:0c:2b:
2e:00:8c:36:7f:02:fd:b7:11:ba:ff:76:4c:5e:67:
0e:91:d8:2a:ed:e2:5e:f5:8a:de:57:fb:27:ed:e0:
f1:ea:80:38:a1:e4:9a:3c:80:93:b0:8b:71:ce:c8:
66:ac:a4:7a:ce:a1:22:7c:c4:1d:3d:42:10:6b:f1:
38:8f:17:f5:85:87:95:cb:40:a6:f3:f1:8d:d1:ac:
6c:a2:f0:b1:18:45:f5:36:f1:b8:27:1d:73:5a:cb:
a6:8c:2e:c2:26:e8:32:2c:c2:6b:e5:30:46:ac:d4:
98:72:46:f0:21:ff:e4:9a:44:ee:1e:b0:2c:ae:47:
13:ef:c4:d3:4d:e3:9c:c9:c2:83:ce:1c:3a:59:f2:
5c:e1:4c:2e:46:1f:de:a1:bd:7b:a5:6c:7a:fe:bf:
c2:76:f8:a3:0a:35:2d:8e:d6:b6:27:f7:ad:51:5d:
7a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5D:28:D7:74:67:3F:70:59:9D:66:43:1B:CA:C8:BB:56:9B:E8:43
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c4:34:3d:33:13:87:2d:1d:07:ee:56:26:36:31:80:92:00:
ad:ed:96:e4:83:b4:34:5e:b1:f5:0a:6a:f9:ba:4c:bc:54:99:
3c:78:9e:16:db:5d:63:75:e9:90:4a:8b:b4:70:10:81:66:5d:
45:dc:ad:7e:f1:1f:87:01:55:f7:c6:65:59:20:74:80:7e:2d:
e8:e4:cd:0a:04:ef:ad:0a:e2:d4:82:52:4d:3d:bd:ca:1f:08:
aa:9d:d4:ec:38:88:15:4e:5d:b9:15:ae:c2:8e:85:4c:74:a7:
2d:4c:82:e2:78:af:43:0a:44:0e:e1:31:b0:8b:93:72:5a:f4:
d5:21:ab:21:f6:df:b4:80:aa:49:2a:29:3c:75:58:46:4a:a4:
39:42:5c:05:a9:15:a6:8a:19:2f:b3:22:b6:e3:81:f7:50:bc:
50:11:ca:89:e0:bc:b8:2e:76:e0:95:40:b2:e1:c5:b1:3f:39:
db:3d:6f:dc:00:4c:5d:24:65:bb:56:7a:1e:44:5f:a8:1e:39:
12:3e:9e:8b:bd:3b:2e:5b:34:46:4d:bb:5d:b0:af:9b:4b:75:
da:a8:0c:de:1b:c0:55:9e:37:c9:f9:71:8c:4a:40:f4:7f:59:
da:92:f1:14:5f:fa:68:87:6b:c0:d5:36:8a:a7:ce:b1:40:98:
61:f7:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:19 2026 by rpki-client