Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File: yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier: Ldj4aiXElOkVnsUUAw07I2kuWPOd0Bm8N1PGAfjq8vM=
Subject key identifier: 66:CE:F9:40:D2:1D:F5:12:36:26:CE:81:C9:33:8F:D6:81:83:EA:32
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 01A08FE974E5C3CC7330B38035D723C4706A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number: 1A49
Signing time: Fri 11 Sep 2026 10:00:36 +0000
Manifest this update: Fri 11 Sep 2026 10:00:36 +0000
Manifest next update: Sat 12 Sep 2026 10:00:36 +0000
Files and hashes: 1: YMqsGPp_mbmCjWJLd9EJ8DM4L8A.roa (hash: TYDNZdeDcVMG8xtZmUsgp0p3WxwgGHDmOb5hVCRUc6A=)
2: eD5VOvbTEGKyk2FGGxuBVSBNR0A.roa (hash: Rl68HFZO+NzHdjcGZ7M/7lCLTV99GPY1FIFYCt0/pnw=)
3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: 5NYKU4CTIPEPXZCsSscbT/HUfRYKOeL06E7YGM191FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:e9:74:e5:c3:cc:73:30:b3:80:35:d7:23:c4:70:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Sep 11 10:00:36 2026 GMT
Not After : Sep 12 10:00:36 2026 GMT
Subject: CN=66cef940d21df5123626ce81c9338fd68183ea32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:ee:28:27:aa:d7:d9:08:20:f1:7e:89:9a:
31:c8:60:47:17:a4:d4:23:5f:e5:4e:4b:89:69:99:
54:dd:86:b6:4a:f0:a8:5f:d7:3d:3a:5a:65:eb:74:
cf:1d:5a:c8:45:79:9a:4c:23:e9:9e:27:56:ce:3b:
0d:16:4e:35:f6:f0:a1:88:35:34:41:0d:57:25:0b:
37:d3:f0:ee:29:07:72:a2:55:53:7f:6c:cf:fa:d2:
c6:ed:cd:d3:78:4b:69:01:01:0f:c2:13:8c:cc:ba:
c9:24:9f:76:76:f3:62:21:91:7a:55:a5:a7:48:ce:
ee:c3:58:36:e3:95:3f:41:4e:d0:55:c3:00:23:cc:
0c:2e:72:9a:05:49:19:d2:bd:fe:53:38:fe:23:bf:
f7:1f:91:34:27:a3:e2:5b:89:0f:d9:ce:4c:0b:0e:
32:f4:8f:ed:63:58:46:88:d7:0e:f7:3d:14:91:e8:
e3:f4:5c:7f:4a:ae:99:33:41:ea:3c:db:a4:9d:09:
db:df:1f:46:49:fe:73:4b:6a:5a:f7:3f:b3:57:eb:
b6:00:b9:07:8a:11:35:37:55:47:72:d0:b2:cf:85:
a1:c4:36:0b:82:59:c1:32:01:9d:40:2c:03:e5:35:
37:ee:c0:c7:2c:fd:ba:b7:14:ab:cb:b6:e6:6f:62:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CE:F9:40:D2:1D:F5:12:36:26:CE:81:C9:33:8F:D6:81:83:EA:32
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:22:4c:2f:c0:bb:15:6f:87:bc:7c:85:41:a8:21:8d:84:96:
86:4b:97:e5:e9:74:9f:39:39:c6:27:72:d6:41:a9:4e:f2:31:
72:56:09:72:1f:a5:b6:4e:92:f8:5b:63:58:1b:65:de:4e:09:
d7:75:9d:7e:dd:31:af:ad:72:70:a9:ca:a0:cd:fe:7c:4b:2b:
a7:37:c0:fd:eb:20:ef:f6:76:0b:51:2b:d1:85:59:84:12:87:
55:00:c0:b3:ee:47:c9:12:9a:0f:d1:fd:67:6a:98:a1:fc:90:
99:56:35:49:b6:34:fa:58:1b:91:43:57:69:be:85:9e:07:35:
db:73:39:75:b5:f8:c1:ac:13:b9:db:53:a0:da:2b:ba:98:ed:
4d:93:0f:c7:3b:49:30:a6:e5:cb:2c:f1:1e:af:c8:c1:62:2e:
b0:1a:cf:45:03:ec:0e:03:ac:59:62:e2:df:99:67:57:bd:b3:
b3:63:d6:48:54:31:b4:92:9e:36:a1:ec:08:ed:93:58:0e:1d:
92:3c:ff:27:4c:f4:6a:58:79:84:2f:8d:87:f0:f4:76:4c:60:
5e:3f:b5:7d:1b:8e:f0:af:05:e4:df:2a:15:72:ae:69:ab:22:
d9:a3:60:6e:ab:4a:72:8e:a9:9f:93:e2:08:df:af:ef:ff:e1:
0a:19:29:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 18:37:36 2026 by rpki-client