Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: VQyPwOtZbUaltWEcSxdjiVgPmufU0AkIS+Kd175s6kc=
Subject key identifier: 1E:F2:46:A5:FC:27:51:A8:A5:97:74:2E:3B:B2:51:EF:84:43:BD:47
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 01A12F20E0BF951CF3DBE0E9F7320CFDA1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 08A8
Signing time: Mon 12 Oct 2026 08:00:46 +0000
Manifest this update: Mon 12 Oct 2026 08:00:46 +0000
Manifest next update: Tue 13 Oct 2026 08:00:46 +0000
Files and hashes: 1: 0nWWPWTzcFI4eXCWW9KNezctiis.roa (hash: pAWgyFDAcV7gKpwPZNLLbv0IAPB9JFrQF+fLymJ/cyQ=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: mGHblSF0xR5H/2ukhVTa/T0ChngyHrEa6dg2n0fimpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:20:e0:bf:95:1c:f3:db:e0:e9:f7:32:0c:fd:a1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Oct 12 08:00:46 2026 GMT
Not After : Oct 13 08:00:46 2026 GMT
Subject: CN=1ef246a5fc2751a8a597742e3bb251ef8443bd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:fe:78:18:00:ae:a1:a5:ee:3e:3f:cc:49:
a2:cd:57:f8:87:ec:03:84:f0:e2:72:e0:cd:ca:de:
af:c7:28:12:c7:b5:ad:f6:2e:5d:1a:d4:79:39:94:
3f:0d:fd:b3:3c:c6:01:e9:b4:6c:b2:45:b4:3b:87:
7a:97:9c:52:d2:ee:45:f9:27:50:09:9c:ef:15:bd:
a3:56:58:09:d5:a1:75:42:1e:ac:b5:9a:dd:2b:db:
6b:35:06:ee:9a:94:3d:34:68:8d:3c:88:a3:d5:3f:
a8:a8:a5:7a:60:d2:e8:4f:f8:23:31:78:21:31:0e:
ec:97:f5:ee:46:35:11:7b:2b:64:14:1f:c3:d6:ef:
0d:06:8b:c3:73:c0:9e:19:1a:e4:76:bb:49:18:a5:
c0:fb:56:ef:66:69:a5:90:a3:30:ba:8d:5f:8e:04:
68:e5:c4:08:2e:6c:fb:fb:e0:36:9a:ee:b4:e7:f4:
35:d9:bc:42:a0:57:9c:f0:3b:a7:2b:36:b5:3e:ca:
2d:61:77:37:de:21:45:ed:c1:e0:f6:78:28:99:61:
6d:26:5c:7a:3d:7d:b8:b0:26:38:e6:a2:13:a8:b4:
47:7f:4d:6d:b8:5a:0b:81:00:cf:c2:93:7c:dc:0a:
69:e0:f1:14:af:c3:0d:4e:9f:38:73:10:fd:98:64:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F2:46:A5:FC:27:51:A8:A5:97:74:2E:3B:B2:51:EF:84:43:BD:47
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:69:c9:88:f2:35:08:84:c7:99:e9:75:ea:f8:a9:1b:47:7c:
bc:79:17:4a:87:1e:41:df:37:80:23:ea:8d:b0:be:aa:3f:f1:
6d:23:07:df:05:dc:17:1d:48:96:33:c8:c5:76:d4:fb:a6:66:
28:73:23:8a:59:16:07:3e:ce:a5:e1:34:70:c8:6f:85:e8:65:
9a:9f:f7:10:e6:23:24:51:fd:8f:0d:32:6a:ae:08:72:22:05:
17:4a:9a:bf:1d:a0:eb:1d:56:b6:2c:d3:aa:e3:22:1a:d2:97:
fa:9a:d8:4a:4e:dd:f4:d5:ac:a6:e8:2f:d5:f3:5b:88:dc:de:
ac:f4:32:3b:91:de:7c:39:d9:a7:fa:03:2b:b5:c8:80:79:b4:
af:cc:04:fc:80:c6:e5:13:f3:c5:93:85:2e:05:7f:d2:9d:5b:
11:7c:98:d6:cc:4b:88:99:a6:30:ba:e9:cb:f5:d2:cd:68:66:
b6:83:9d:6e:df:7e:3a:74:01:98:31:ab:f3:15:70:34:b4:22:
98:7a:ed:ef:0d:9e:a5:ff:56:5d:83:f8:e3:f5:08:0c:e0:1a:
6b:2b:75:3c:8a:a1:6d:95:f2:b1:a7:9d:7c:07:b1:a6:b1:48:
b7:ef:b3:f7:a8:85:fd:e1:ce:87:52:f5:7c:e4:aa:e2:ce:8f:
67:f2:92:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:09:24 2026 by rpki-client