Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File: yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier: 1ns+S+PhS+x2EJYhz9HXr365/p/IH6VQl4Nsyn5YHDY=
Subject key identifier: C5:B2:97:37:18:C2:44:DF:D4:4A:BC:78:42:4F:74:12:6A:F4:8D:1C
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 01A1833E38F1D68D29E2AFE91797FA448C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 16:00:55 +0000
Manifest this update: Wed 28 Oct 2026 16:00:55 +0000
Manifest next update: Thu 29 Oct 2026 16:00:55 +0000
Files and hashes: 1: YMqsGPp_mbmCjWJLd9EJ8DM4L8A.roa (hash: TYDNZdeDcVMG8xtZmUsgp0p3WxwgGHDmOb5hVCRUc6A=)
2: eD5VOvbTEGKyk2FGGxuBVSBNR0A.roa (hash: Rl68HFZO+NzHdjcGZ7M/7lCLTV99GPY1FIFYCt0/pnw=)
3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: /2m/Pe4SOEIEsm1oCYFl3pi1g7OwfnLP6r4nFos3uH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:38:f1:d6:8d:29:e2:af:e9:17:97:fa:44:8c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Oct 28 16:00:55 2026 GMT
Not After : Oct 29 16:00:55 2026 GMT
Subject: CN=c5b2973718c244dfd44abc78424f74126af48d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:9e:fb:d3:57:21:98:17:a4:8f:10:dc:2a:
36:e2:52:62:35:01:4b:a9:f1:35:15:6b:9d:20:18:
37:97:a5:5c:8d:3d:e7:40:36:38:fa:42:f0:18:54:
48:39:61:f7:fb:c5:cc:fe:00:e5:5f:0e:fc:4b:0f:
44:4a:93:61:b3:7e:10:33:cc:53:15:ce:33:23:f6:
de:df:0d:ec:9d:8c:80:63:a8:5f:54:8e:0f:2e:bd:
ee:81:20:b4:20:fe:f7:64:04:b0:37:75:38:12:89:
3c:5c:f3:a5:94:b3:86:95:9f:12:46:0a:26:90:00:
61:48:27:3c:ee:92:40:c6:33:0e:fb:c0:6c:18:8d:
58:e7:d5:1b:ca:e5:6a:d2:eb:5a:f5:7a:95:01:95:
9a:10:ea:70:b1:19:b5:71:d2:ba:0b:79:69:fb:31:
8e:a1:ae:ef:9a:3c:28:cd:d9:e0:f4:4e:45:86:91:
6c:8c:4c:b9:c3:44:83:a9:0a:9f:7d:29:65:02:52:
b9:4e:23:ca:b5:cc:9c:0d:04:41:62:5d:4d:78:6a:
af:61:14:94:c5:53:93:5c:8d:a0:b5:1c:99:4c:6c:
73:db:04:f1:c3:63:eb:21:e9:02:04:eb:b6:f5:23:
05:80:eb:4f:71:2c:4b:43:53:f2:ea:65:82:aa:70:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B2:97:37:18:C2:44:DF:D4:4A:BC:78:42:4F:74:12:6A:F4:8D:1C
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1b:2d:75:54:b6:a4:e8:a5:cc:d9:3b:5e:4a:2c:36:e8:12:
f8:34:7a:89:3d:75:1c:6d:77:2f:47:61:9c:69:9f:50:93:a2:
ec:a2:7a:b3:69:34:76:47:01:10:03:e9:df:fe:1d:e3:63:52:
29:09:21:18:18:55:a9:7f:64:b2:20:bd:57:26:1e:5e:67:c6:
0c:8d:48:8a:9e:45:5b:41:f0:0d:03:52:32:d8:a1:4f:0e:e3:
c1:bf:2e:7c:c7:70:d7:97:e5:55:f7:0b:58:7d:f7:07:db:d5:
21:84:7d:cb:f3:71:5a:7b:46:16:ac:6a:0f:63:23:a2:e8:99:
dd:72:8f:6e:28:05:b3:c5:2e:b5:ae:64:c3:83:d6:2b:38:c0:
97:71:4d:88:49:d5:bc:e0:5f:b9:f5:4e:18:a9:1f:b7:25:28:
69:cd:48:b1:be:f5:3f:93:d1:b5:20:b7:ea:d2:4c:02:8a:fb:
33:3d:54:4d:d3:36:88:f4:c4:5f:80:41:75:4c:61:88:e1:d8:
95:2d:8f:aa:45:97:ab:21:9d:d5:0e:9a:05:2f:3e:7f:c2:ec:
55:f5:1b:11:65:2e:07:15:53:1d:80:26:f6:b4:86:04:a6:a6:
61:66:13:2a:73:ff:3b:c7:7c:8b:50:fc:7e:bd:62:07:c1:03:
c3:f7:0f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:10:27 2026 by rpki-client