Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: tmw464/MD3OZUg1e8iD4HPdRdW6G8FC6IjSoyxPjsAI=
Subject key identifier: B1:97:B9:42:B7:7B:D1:07:E4:8E:F9:66:D5:B1:72:EF:79:8D:A2:3F
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 019F95B78559D6DB652D30760A51BD3E2579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 07D4
Signing time: Fri 24 Jul 2026 20:01:00 +0000
Manifest this update: Fri 24 Jul 2026 20:01:00 +0000
Manifest next update: Sat 25 Jul 2026 20:01:00 +0000
Files and hashes: 1: 0nWWPWTzcFI4eXCWW9KNezctiis.roa (hash: pAWgyFDAcV7gKpwPZNLLbv0IAPB9JFrQF+fLymJ/cyQ=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: 5E9eDZDUqYHavxV34mbfYNuKGuNf84YZ0pMKZDvII+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:85:59:d6:db:65:2d:30:76:0a:51:bd:3e:25:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Jul 24 20:01:00 2026 GMT
Not After : Jul 25 20:01:00 2026 GMT
Subject: CN=b197b942b77bd107e48ef966d5b172ef798da23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f6:23:a1:45:e3:ce:bb:8d:27:d4:64:dd:1b:
51:cb:42:82:c7:f3:59:31:de:13:e2:de:72:f0:b7:
46:19:83:f7:71:0e:be:80:bc:7e:98:f2:ea:22:e1:
bb:a2:04:a0:bd:3c:9d:0f:1a:5c:71:40:f6:55:a6:
0e:07:73:c7:7c:da:7a:b8:c5:e1:19:60:2f:14:3e:
8c:d9:1c:47:e5:13:2c:d6:7d:06:8a:d5:43:27:80:
aa:32:fa:d6:6d:74:7d:dc:37:65:df:4f:12:57:da:
2b:3f:3d:2e:c9:81:0b:8c:71:ea:84:76:9c:1e:96:
d3:22:c2:67:79:07:bb:80:87:53:20:87:ec:12:2e:
12:98:1e:da:8a:16:90:c9:c3:04:54:e2:d3:66:0f:
c9:22:06:65:61:c5:48:bf:3c:27:99:b6:4b:4a:44:
fd:79:38:ea:04:d3:d3:ca:92:f5:7d:99:b3:5b:92:
34:e8:68:d2:3d:01:d6:50:73:ec:37:25:7a:7f:6b:
78:20:da:1d:7d:7d:a6:6a:41:58:51:af:7d:e4:28:
7c:b8:e8:02:fb:3a:59:f3:df:66:00:07:c2:62:18:
84:73:1a:e4:c7:03:b9:36:fb:4f:f3:df:9f:e6:77:
c2:78:56:d7:00:a7:92:9f:7f:d0:db:37:50:be:cd:
09:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:97:B9:42:B7:7B:D1:07:E4:8E:F9:66:D5:B1:72:EF:79:8D:A2:3F
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d7:b7:31:ec:d5:91:6d:cc:d9:52:90:1d:1d:08:38:4b:91:
d4:54:22:8f:b0:04:b0:39:b8:a5:7b:d5:ef:cd:4b:1c:da:33:
e8:5e:cf:21:0d:63:7e:8e:c9:59:28:b3:9d:d6:cf:d4:6a:a4:
53:d8:d3:0d:7a:60:2c:72:49:cb:2f:4c:a5:d2:3d:0a:f0:7d:
67:97:34:23:fe:ee:fb:92:cc:05:35:34:02:3d:0e:d7:07:d9:
aa:77:92:2d:a2:ce:27:b2:e1:ae:ad:b9:1b:6e:42:0b:ad:6c:
e0:f0:3a:20:fb:cc:17:ab:0e:6a:24:bf:83:b1:98:33:81:97:
a6:be:18:36:c9:41:97:b8:fe:70:c3:19:71:41:73:66:84:57:
9d:6d:f1:f5:32:aa:58:26:cb:16:1a:bf:bf:55:d6:13:7b:98:
0c:6b:26:e3:02:57:23:24:ef:5f:dd:4d:9c:93:a9:d5:6a:36:
61:24:99:f2:66:8c:b8:37:4d:1e:76:8f:af:cf:9c:68:2c:bc:
04:73:01:4f:b1:26:2a:1d:d4:4f:c6:69:9f:27:c1:eb:11:00:
5d:37:11:9f:f9:05:c7:95:d3:73:5c:60:be:81:63:55:44:0a:
e5:07:74:f1:73:08:70:1a:b1:a7:83:23:98:7d:f4:8a:3f:5b:
b2:25:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:09 2026 by rpki-client