Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: Wzs3OCj0NJZvhUafhmF6ioh4kkYqIXSoECzaW9D75pA=
Subject key identifier: E6:71:A8:5F:AB:EA:10:10:22:D6:58:76:73:5C:29:38:46:E4:41:D3
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 019D394143EE1A9F228870BB6A33008904D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 069B
Signing time: Sun 29 Mar 2026 11:01:11 +0000
Manifest this update: Sun 29 Mar 2026 11:01:11 +0000
Manifest next update: Mon 30 Mar 2026 11:01:11 +0000
Files and hashes: 1: 0nWWPWTzcFI4eXCWW9KNezctiis.roa (hash: pAWgyFDAcV7gKpwPZNLLbv0IAPB9JFrQF+fLymJ/cyQ=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: UA9g+DBvCVy0DUP5U2Lo+RtxsidpuI9HFwKsc7nLGJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:43:ee:1a:9f:22:88:70:bb:6a:33:00:89:04:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Mar 29 11:01:11 2026 GMT
Not After : Mar 30 11:01:11 2026 GMT
Subject: CN=e671a85fabea101022d65876735c293846e441d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:f9:92:53:72:b6:a6:45:d2:c5:bd:47:ac:
be:09:19:f6:c3:e2:5e:9c:b4:10:da:ab:dc:de:90:
56:da:87:7f:fd:2c:17:c4:9e:8a:42:b3:a2:55:86:
9f:45:6c:ab:7c:5e:00:52:44:af:d8:3e:23:5b:a6:
40:4d:f5:0c:5b:c5:5f:7f:86:15:4d:9a:7a:3d:7c:
e1:35:20:08:e5:84:c1:cc:0a:9a:93:cb:07:c9:1e:
74:6e:c8:5a:94:20:e7:d8:22:63:12:d4:0b:a6:5b:
fd:ea:4e:c9:36:ac:f8:44:9d:f1:91:16:ec:51:b0:
dd:97:f1:a0:b4:15:b5:4c:34:3c:c9:0b:d6:95:75:
8f:6e:bd:92:a9:8c:31:07:b3:8b:12:31:07:21:9e:
40:d1:c6:07:f0:cf:fd:3d:cf:10:ca:ec:45:45:27:
1f:ff:b3:2a:2b:0d:e7:ef:d3:c3:4c:10:fe:7b:cb:
ed:4d:f2:4e:71:b1:8b:28:0e:82:ec:09:6b:83:83:
e5:b2:3d:c7:21:52:cf:56:0c:34:6b:1e:13:a4:99:
45:3b:11:e5:35:3c:d9:9d:b0:e8:f6:10:8c:ee:75:
1a:2c:be:e6:ac:77:8d:99:e7:48:2e:4e:0f:1c:4e:
1d:3c:16:ae:3a:de:79:dc:67:16:88:16:d6:62:fa:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:71:A8:5F:AB:EA:10:10:22:D6:58:76:73:5C:29:38:46:E4:41:D3
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b7:85:11:c1:65:76:d8:1c:ae:fb:92:2a:a2:2a:53:47:45:
6f:58:de:64:0c:7e:16:7c:41:a1:f9:0e:d5:1a:bd:88:32:d6:
a5:13:04:7e:70:91:39:90:e4:98:7a:7d:59:1e:25:40:a7:af:
65:63:b4:b8:42:f9:98:9d:a8:a3:46:0f:01:ea:59:de:98:54:
c0:95:3b:4f:95:ab:9e:2d:62:48:e6:d7:ef:2b:07:36:e9:51:
5f:fa:b1:98:7f:13:ab:c4:6d:74:7d:ef:88:29:44:82:4c:10:
37:5c:d2:02:22:f6:19:74:4f:bb:13:1c:7e:8d:34:4a:49:11:
df:b8:05:83:de:1a:e2:d4:55:45:d8:da:28:a3:5b:3d:c1:66:
b8:df:9c:dd:5a:e2:4b:78:f3:4f:ab:33:ee:f8:55:b9:1d:24:
01:9b:d3:43:cc:dd:8d:86:89:fd:e5:2d:51:72:e1:4d:29:7f:
25:7b:6d:4c:89:f6:56:63:4e:93:7f:d4:69:2f:e1:52:39:96:
a0:89:60:27:ba:25:27:4d:69:63:8d:42:aa:77:44:8f:52:0a:
14:f4:83:e9:83:0b:c8:dd:7d:aa:8a:51:bc:0e:6a:fa:44:66:
db:56:25:0f:5b:59:de:9a:1e:d5:73:e4:d7:bd:13:91:25:56:
82:3f:07:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:48 2026 by rpki-client