Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: EimDThUlQF9gksS1mycwh/3XDX8UP588nHHOmkNBUZI=
Subject key identifier: 7D:61:76:46:E3:19:59:EE:8F:0D:67:40:44:1B:57:EB:AF:2A:12:1A
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 019D9A752E6FF7D1E3B9508A7A0B9C8BDBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 18D5
Signing time: Fri 17 Apr 2026 08:01:03 +0000
Manifest this update: Fri 17 Apr 2026 08:01:03 +0000
Manifest next update: Sat 18 Apr 2026 08:01:03 +0000
Files and hashes: 1: 1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa (hash: 2yNm3gZsn/uIFKiYLjVHUVr0sDTSowqLDiGRvdYsMoM=)
2: BpG8igZJv8h8cPkp6g_Gbs3F_SU.roa (hash: EZCW2Mw9lZcsL5iipH/n6h6UZOB/4+vnk665tkL9CRo=)
3: PwG6kgE4pgXJJkL8ugwSTM2yxbE.roa (hash: DDzmamajStjqmhcsDYxm8w9Zc5fmsm1zJsTmwujf+jw=)
4: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: NEPcus+RcuoAzpGGynTpOwFbM65MqaUMycIlykPyuC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:2e:6f:f7:d1:e3:b9:50:8a:7a:0b:9c:8b:db:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Apr 17 08:01:03 2026 GMT
Not After : Apr 18 08:01:03 2026 GMT
Subject: CN=7d617646e31959ee8f0d6740441b57ebaf2a121a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:67:c4:e1:4a:bc:e4:b5:1b:9c:4e:d7:62:24:
1d:15:74:18:e6:8c:eb:cc:a0:e5:59:b5:17:9a:47:
d1:ab:c7:45:f9:d2:8a:33:4e:de:d7:d3:45:ad:5e:
97:79:78:23:a8:01:76:74:cb:23:a7:6a:35:98:38:
d1:ca:a4:ef:5f:98:f0:ad:55:f3:91:12:00:1a:f9:
5f:70:7e:a7:05:f8:8a:01:5e:a3:2f:ec:6d:18:6f:
8a:ed:23:28:d9:b5:e9:b2:e5:39:84:75:17:5d:e8:
fd:4e:d8:20:12:1d:92:f3:00:f1:76:c1:ff:ad:83:
f6:7c:ef:ae:64:56:bb:23:1e:29:2e:79:36:55:63:
71:14:5f:b3:5a:ba:22:a2:64:1e:b8:02:7b:be:8b:
1e:42:4f:49:bc:ee:78:7b:35:f1:69:4e:d9:a8:ca:
a0:46:a7:e6:15:34:45:71:92:f3:3f:34:15:af:e1:
22:5d:0d:26:c4:e0:0a:4a:9b:dd:af:28:3f:2b:84:
05:47:b8:b5:63:19:1b:51:f8:21:83:86:b4:26:63:
e0:44:52:94:47:0b:3a:e9:eb:c0:f6:9c:c8:26:d4:
c0:00:a0:26:16:78:07:71:f9:74:00:19:33:d4:22:
37:16:f1:c1:86:68:3a:f2:c3:13:52:43:e4:70:2e:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:61:76:46:E3:19:59:EE:8F:0D:67:40:44:1B:57:EB:AF:2A:12:1A
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cc:50:eb:2f:57:8a:40:6a:a0:67:20:24:c7:5c:12:10:46:
6b:35:05:cc:dc:9b:da:f9:ca:9a:bb:75:3f:19:41:0a:43:91:
dd:33:06:f4:fa:01:ba:96:51:52:a2:cd:5c:e9:66:7b:6d:66:
e3:96:7b:e6:cf:23:97:15:32:76:fe:21:f8:37:a8:04:ee:a0:
6a:7c:2b:c4:6c:aa:b3:51:5f:65:07:a1:f9:d4:3c:cc:04:de:
d9:1b:c0:d6:26:58:d5:d5:83:76:8d:7c:89:d0:fe:ec:28:2a:
e9:69:de:75:cd:d1:63:0b:0d:98:cc:e2:6e:76:74:9f:0e:91:
94:9b:5e:a6:92:37:63:89:21:78:6c:06:6d:82:bb:82:e4:ac:
61:c1:42:62:92:3a:25:56:86:93:40:53:6c:4a:46:5b:77:5c:
60:65:fe:46:4e:75:0a:ec:57:7a:2b:a9:94:21:ae:e5:7a:12:
f3:f2:bf:aa:a4:f3:da:bf:5d:46:91:48:16:5f:7a:5c:6c:2a:
41:5e:06:01:e5:93:e6:73:cf:0f:1f:08:ce:0b:8b:07:63:0c:
72:8c:96:0e:70:ca:67:71:08:07:9e:8b:80:83:0b:cb:2d:cc:
ae:c0:92:86:2a:5e:8d:95:cb:46:71:de:bc:44:c1:52:ed:34:
53:ae:ec:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:23 2026 by rpki-client