Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: eEuChxjUQ+2gz4RkS7IGyafz9PMb+Grfq/S0sKgxNug=
Subject key identifier: 36:2C:C9:C2:C9:3C:3B:CC:88:45:B3:79:99:27:6A:17:34:0C:B1:3D
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 019D27E018EC9A0EC709C467F4A87E0A8028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 0692
Signing time: Thu 26 Mar 2026 02:01:30 +0000
Manifest this update: Thu 26 Mar 2026 02:01:30 +0000
Manifest next update: Fri 27 Mar 2026 02:01:30 +0000
Files and hashes: 1: 0nWWPWTzcFI4eXCWW9KNezctiis.roa (hash: pAWgyFDAcV7gKpwPZNLLbv0IAPB9JFrQF+fLymJ/cyQ=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: enVEUaV20Gt3TwzX6HjL85YpZsf60lepTeIXYdZ/Feg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:18:ec:9a:0e:c7:09:c4:67:f4:a8:7e:0a:80:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Mar 26 02:01:30 2026 GMT
Not After : Mar 27 02:01:30 2026 GMT
Subject: CN=362cc9c2c93c3bcc8845b37999276a17340cb13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:f4:40:35:1d:c7:c6:a9:93:d0:58:61:22:
9a:84:40:0d:26:f8:c7:c5:49:6d:13:e7:bc:34:79:
49:d2:e0:ac:8a:8a:18:15:ca:8d:ae:e4:a0:a6:cd:
94:c2:c9:8b:5e:5d:ea:fa:f7:02:c6:6b:5d:24:58:
a9:ff:4c:00:67:2b:c2:3f:af:93:cb:84:29:d6:1a:
57:21:af:38:75:3e:f7:79:29:95:b1:d0:67:66:c4:
be:c5:ef:d4:2a:26:b6:e5:4b:f4:db:fd:94:31:90:
e0:f5:52:e9:4e:d3:63:5c:68:6b:e3:99:d8:65:03:
ab:44:1e:f7:88:d2:30:f9:99:0b:e4:59:58:0d:31:
f5:3f:d7:60:e6:f2:f8:b7:d7:ea:cb:bd:83:b5:bf:
47:0f:2f:c6:fc:fa:ff:9e:30:a8:a9:c6:ff:58:e8:
8c:4f:4e:be:04:f2:a8:22:bd:20:69:b8:b7:72:bd:
10:b1:db:a4:cb:bc:f0:9a:c0:02:aa:02:a8:c7:47:
04:33:1e:23:da:82:97:b1:bc:09:a8:88:d8:f6:8c:
44:a8:3e:6f:de:62:9f:39:c2:1a:27:35:0d:34:7d:
17:5b:f9:a6:94:32:ac:06:db:56:10:2c:2b:68:cd:
84:df:77:a3:4d:cf:05:ec:4e:51:43:e0:29:10:78:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2C:C9:C2:C9:3C:3B:CC:88:45:B3:79:99:27:6A:17:34:0C:B1:3D
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:66:b1:78:91:9a:86:3f:96:49:b1:c7:62:d1:c7:d1:e3:7d:
f3:29:b8:b3:3d:cc:37:b9:27:87:53:78:84:18:c0:a5:a1:7a:
70:58:03:f8:70:12:d4:79:2d:bd:7e:57:ce:a1:14:37:aa:c1:
a1:93:63:ad:a3:cd:41:59:53:aa:da:87:db:e7:b0:55:fd:2d:
0d:c0:c7:37:e2:15:43:17:ee:7a:41:60:c9:2e:50:cf:29:b8:
50:27:c1:3b:90:fa:e0:0c:05:1c:fa:cd:27:bd:cc:77:39:4e:
7a:19:5d:df:1d:d0:db:21:a1:3e:dd:38:38:0d:40:f7:99:0f:
a5:d5:e0:d9:43:ea:85:21:1d:a3:6c:54:1f:f0:ee:cd:20:4a:
01:ca:75:08:21:87:49:e4:a1:b2:24:92:77:13:1c:30:d8:e8:
7f:85:38:3a:8a:a1:2a:fc:08:5d:96:0b:03:53:3e:0c:85:80:
61:11:15:25:12:33:5f:fd:53:69:1a:66:72:55:5c:08:95:e1:
6a:6e:cd:0b:77:9b:3a:a0:00:8e:66:0b:c3:43:d8:23:ba:4b:
d5:86:66:32:dd:1e:d5:2c:76:00:0f:85:90:2b:54:24:29:83:
86:f4:b9:6d:ce:ef:e8:8a:14:30:c1:3e:87:23:30:7f:09:81:
d4:55:f8:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4Bjsmg7HCcRn9Kh+CoAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjlhNGIzZjBhM2FmOGJiZWQ2MDI5YThiMjY1ZGM5MzIw
NGU3ZGUwHhcNMjYwMzI2MDIwMTMwWhcNMjYwMzI3MDIwMTMwWjAzMTEwLwYDVQQD
EygzNjJjYzljMmM5M2MzYmNjODg0NWIzNzk5OTI3NmExNzM0MGNiMTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy/0QDUdx8apk9BYYSKahEANJvjH
xUltE+e8NHlJ0uCsiooYFcqNruSgps2UwsmLXl3q+vcCxmtdJFip/0wAZyvCP6+T
y4Qp1hpXIa84dT73eSmVsdBnZsS+xe/UKia25Uv02/2UMZDg9VLpTtNjXGhr45nY
ZQOrRB73iNIw+ZkL5FlYDTH1P9dg5vL4t9fqy72Dtb9HDy/G/Pr/njCoqcb/WOiM
T06+BPKoIr0gabi3cr0Qsduky7zwmsACqgKox0cEMx4j2oKXsbwJqIjY9oxEqD5v
3mKfOcIaJzUNNH0XW/mmlDKsBttWECwraM2E33ejTc8F7E5RQ+ApEHjpPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYsycLJPDvMiEWzeZknahc0DLE9MB8GA1UdIwQY
MBaAFP8ppLPwo6+LvtYCmosmXckyBOfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYt
Y2FmMmY3YTViNWY0LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYtY2FmMmY3YTViNWY0
LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2axeJGa
hj+WSbHHYtHH0eN98ym4sz3MN7knh1N4hBjApaF6cFgD+HAS1HktvX5XzqEUN6rB
oZNjraPNQVlTqtqH2+ewVf0tDcDHN+IVQxfuekFgyS5Qzym4UCfBO5D64AwFHPrN
J73MdzlOehld3x3Q2yGhPt04OA1A95kPpdXg2UPqhSEdo2xUH/DuzSBKAcp1CCGH
SeShsiSSdxMcMNjof4U4OoqhKvwIXZYLA1M+DIWAYREVJRIzX/1TaRpmclVcCJXh
am7NC3ebOqAAjmYLw0PYI7pL1YZmMt0e1Sx2AA+FkCtUJCmDhvS5bc7v6IoUMME+
hyMwfwmB1FX4Fw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:50 2026 by rpki-client