Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: VGPIn3Sowu88EQoCDNzAjbc2LAcu1K/kUeGdHS8+OXw=
Subject key identifier: 0E:6E:30:8A:F0:5F:C8:B2:D9:7C:EB:D2:04:9B:FA:92:4F:B9:05:12
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 019D99D079630C5A04579694492383396A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 06CD
Signing time: Fri 17 Apr 2026 05:01:09 +0000
Manifest this update: Fri 17 Apr 2026 05:01:09 +0000
Manifest next update: Sat 18 Apr 2026 05:01:09 +0000
Files and hashes: 1: 0nWWPWTzcFI4eXCWW9KNezctiis.roa (hash: pAWgyFDAcV7gKpwPZNLLbv0IAPB9JFrQF+fLymJ/cyQ=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: s72RpF4MfKTywlkMv50u4NVFkNSDfARkDDpSJE/rE4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:79:63:0c:5a:04:57:96:94:49:23:83:39:6a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Apr 17 05:01:09 2026 GMT
Not After : Apr 18 05:01:09 2026 GMT
Subject: CN=0e6e308af05fc8b2d97cebd2049bfa924fb90512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:59:af:f9:e3:51:5d:f9:d2:84:cf:c8:9f:
67:5b:f0:9b:c0:f1:5d:f8:a0:00:06:fb:f6:ac:ee:
bc:04:60:d1:34:32:f9:92:88:c9:8e:4a:92:04:7a:
9a:38:64:ef:3d:a5:30:ed:22:f1:4f:3d:f8:d7:f9:
8d:40:ea:c6:81:9b:66:e7:46:1e:be:8f:80:7c:07:
12:13:7d:38:cc:c5:b7:5e:86:ef:7d:d7:93:ee:d6:
c3:49:8d:28:fe:53:c2:50:db:7f:4d:6e:42:af:93:
62:31:72:98:2f:f1:5b:ca:a0:c7:79:d3:a7:a2:44:
31:11:a4:03:1e:92:f9:0a:62:bd:bc:fa:96:76:d6:
af:3d:de:c0:32:fb:2c:40:15:49:6f:04:6f:95:3c:
0e:af:9a:ba:3f:4b:25:3a:c0:c2:46:5c:4f:c2:16:
0a:90:0a:2e:1b:f1:47:f3:7e:fb:c2:66:8d:ee:bc:
33:e9:53:2f:ce:64:82:2b:b4:92:48:e8:0c:3c:24:
5f:16:02:4f:0e:f0:36:46:24:66:be:ce:aa:37:ff:
50:ef:94:49:7d:ff:16:c6:bb:ac:64:96:a4:02:8e:
98:09:c4:af:72:42:ca:92:35:74:8b:1c:3b:59:76:
df:bb:55:24:0d:e0:0d:d6:bd:7c:ea:d7:05:94:8e:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6E:30:8A:F0:5F:C8:B2:D9:7C:EB:D2:04:9B:FA:92:4F:B9:05:12
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1c:97:9f:87:0e:17:cd:e6:51:4d:c1:18:ac:97:b9:eb:2f:
80:2d:5d:89:48:8e:2a:ce:08:17:2b:8f:98:63:f5:50:42:70:
b4:09:d6:5e:28:b8:04:6f:e5:5a:32:82:79:09:a1:9c:52:1f:
89:f0:e3:ff:cd:9a:3b:67:a4:22:15:76:71:b6:75:bf:d5:32:
2e:f7:2b:80:18:42:17:3f:12:a7:67:4c:bf:2f:a1:5e:f7:78:
af:c3:1c:52:27:a9:94:7a:2f:27:3b:2d:0e:f2:f1:be:3d:d5:
61:bc:c5:d7:f2:e4:5a:c5:ef:cd:75:45:ec:f9:31:61:2d:e3:
dd:c4:a4:ec:af:eb:df:70:47:ca:dc:c2:cb:8a:8a:90:9b:97:
76:8b:3d:92:86:f2:3b:0d:bb:e7:96:8e:a7:95:f4:2c:ae:99:
92:2f:94:a5:9f:b9:c3:fe:bb:b7:12:e9:b7:50:b6:02:d8:18:
2b:cf:71:15:27:20:4a:65:f5:b3:f6:34:70:f5:e7:8a:b3:d4:
df:5a:4f:23:50:37:12:cb:d8:6c:cf:5c:9a:76:7d:0f:f2:80:
f0:7e:e0:9f:ca:e3:9a:78:09:d6:aa:cb:f4:cb:cb:41:af:ca:
d7:68:95:21:64:84:e5:9c:79:bf:1b:58:bb:0f:c0:b4:e1:55:
c2:b1:ed:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:15 2026 by rpki-client