Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: ObHxQ5rMYlRtok1sdqUHmzyAAvGbhYk5JKG1/MXt190=
Subject key identifier: DD:07:91:23:5D:CE:3D:95:42:7F:0A:A4:C2:BD:E5:94:AF:98:80:37
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 019CAC473832D71CC552466EFD40D5DAD06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 0652
Signing time: Mon 02 Mar 2026 02:01:14 +0000
Manifest this update: Mon 02 Mar 2026 02:01:14 +0000
Manifest next update: Tue 03 Mar 2026 02:01:14 +0000
Files and hashes: 1: 0nWWPWTzcFI4eXCWW9KNezctiis.roa (hash: pAWgyFDAcV7gKpwPZNLLbv0IAPB9JFrQF+fLymJ/cyQ=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: 6mXeD8IX99jEJmszVYQTkApnWa5rQfkjLWrlWJpVUho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:38:32:d7:1c:c5:52:46:6e:fd:40:d5:da:d0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Mar 2 02:01:14 2026 GMT
Not After : Mar 3 02:01:14 2026 GMT
Subject: CN=dd0791235dce3d95427f0aa4c2bde594af988037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:a2:89:09:05:90:ab:9e:ab:5e:33:7f:fd:
73:de:ef:ce:f8:19:8c:97:51:dd:28:dc:7b:d0:ef:
23:df:d5:7d:fd:71:03:0c:b2:a9:e3:0a:23:47:97:
45:51:59:3f:a1:63:38:d3:f7:8f:b4:01:74:a3:20:
2f:8a:c6:10:81:97:5f:35:25:14:bf:4d:6c:7b:ac:
61:98:d3:4a:49:59:a3:9b:9d:6c:aa:60:06:96:57:
ba:45:0b:2d:ce:a7:fd:2d:58:4f:83:96:e4:66:41:
2a:6b:67:bb:6d:a2:19:bd:fa:cf:0f:c7:bb:b4:59:
00:33:65:b2:d3:b9:37:e8:97:2c:e8:b1:5b:5a:b5:
67:fb:b1:79:92:af:4f:38:56:a1:4d:7c:0f:e6:b9:
98:ae:45:bc:0e:e7:e5:3b:b2:d0:2e:9e:9b:8d:89:
14:53:28:41:68:af:68:6f:4f:48:86:d7:12:a9:5a:
0b:a8:37:fe:ea:a1:63:f0:40:e4:ce:34:14:0d:89:
70:79:63:2a:66:b7:2a:07:b3:75:e3:dd:17:78:14:
f8:aa:1c:5a:ed:c2:19:91:ba:7a:4e:3b:08:50:ed:
14:4a:8a:1e:03:8a:c6:8a:db:0d:eb:ca:61:20:95:
6d:b7:3f:68:f2:95:a1:41:82:48:ed:14:f7:1a:02:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:07:91:23:5D:CE:3D:95:42:7F:0A:A4:C2:BD:E5:94:AF:98:80:37
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:dc:98:8b:43:be:83:eb:dc:af:af:a4:be:e4:bd:d2:ea:c3:
9d:42:bd:06:7a:93:e1:42:95:e2:00:f9:3d:05:cb:df:55:03:
e6:7a:1e:5e:86:4f:3c:ba:60:34:ef:c0:8c:d2:0b:2a:58:ff:
70:2a:6c:28:d5:17:73:d5:23:ec:c1:9b:c1:30:9d:75:17:d1:
40:87:c5:e8:84:b1:7b:73:2a:39:19:87:ad:d3:35:37:a0:70:
cf:ce:a6:66:7a:eb:4b:38:7e:f8:21:6a:61:9f:5b:2b:e0:86:
f1:ec:71:40:4d:02:68:30:09:d7:57:47:30:b2:06:da:2f:6e:
08:9c:e5:b7:29:6b:47:a4:d5:35:8c:fe:1b:6a:55:6f:82:88:
e7:3e:58:b3:ad:1d:fe:ee:e8:e5:1d:cc:05:14:1c:80:06:49:
a4:6e:02:38:9c:a1:57:a5:40:4f:78:b8:9d:7d:91:2d:62:74:
b2:13:9e:3c:df:51:3d:d5:77:08:24:c4:10:d1:a1:50:be:39:
de:2a:e6:dd:d3:39:36:4b:ee:d2:61:74:c8:4c:7d:a5:7b:64:
52:e0:70:9d:66:67:a7:c8:b6:b8:57:b3:47:75:b3:6c:48:47:
9b:bb:ef:9a:2f:29:9d:2a:23:60:e0:53:d9:7d:d8:e7:1f:69:
08:c8:4f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:07 2026 by rpki-client