Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: AU/F4drursAwGy8dnOLlLyv/95MMNnZTi27VSb5poN8=
Subject key identifier: 14:7C:C5:D3:85:CD:88:2A:E0:98:D8:B2:DB:6B:D3:CD:E4:BD:69:1F
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 01A10737F0712E5314DF6B969D531E31B822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 1A9B
Signing time: Sun 04 Oct 2026 14:01:08 +0000
Manifest this update: Sun 04 Oct 2026 14:01:08 +0000
Manifest next update: Mon 05 Oct 2026 14:01:08 +0000
Files and hashes: 1: 1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa (hash: 2yNm3gZsn/uIFKiYLjVHUVr0sDTSowqLDiGRvdYsMoM=)
2: BpG8igZJv8h8cPkp6g_Gbs3F_SU.roa (hash: EZCW2Mw9lZcsL5iipH/n6h6UZOB/4+vnk665tkL9CRo=)
3: PwG6kgE4pgXJJkL8ugwSTM2yxbE.roa (hash: DDzmamajStjqmhcsDYxm8w9Zc5fmsm1zJsTmwujf+jw=)
4: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: 1P15tpMHNQH+n8LpLY0hYN85DMhWov92lraIjHd0UfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:37:f0:71:2e:53:14:df:6b:96:9d:53:1e:31:b8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Oct 4 14:01:08 2026 GMT
Not After : Oct 5 14:01:08 2026 GMT
Subject: CN=147cc5d385cd882ae098d8b2db6bd3cde4bd691f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:c3:66:98:7a:33:94:08:0c:75:48:8a:78:
ea:4a:61:b4:3f:61:26:12:c9:40:8f:fa:24:92:3e:
28:c5:42:c6:ed:6b:20:bf:cb:9c:bd:3b:bc:c2:95:
98:0a:83:ff:a3:20:98:c7:4d:43:67:9f:0a:f6:af:
27:13:65:53:3d:0d:d2:3d:61:80:c9:8c:02:08:c6:
e4:95:f9:42:8d:be:0d:26:8b:97:df:cb:c9:91:a3:
d4:02:01:91:05:0e:1c:fd:f2:75:28:34:00:e2:cf:
1c:73:1a:f3:6d:c5:4e:04:c8:6b:3a:df:02:f9:12:
52:ee:21:31:6b:96:99:83:fa:04:74:43:38:95:90:
e8:4a:d0:a1:e1:94:f6:00:e3:82:38:26:d2:35:da:
bf:d3:93:b1:40:c8:a3:80:fd:f3:96:cb:0d:b6:79:
4a:f4:e2:83:8c:0f:81:9c:0d:ef:ad:71:65:c4:90:
55:bd:fe:fb:b8:56:27:d8:8c:c5:43:04:dc:41:98:
8a:81:ae:70:8d:e9:72:76:7c:c6:39:6a:14:52:1a:
e2:f4:92:c0:b6:9c:60:b8:a8:35:db:65:cb:71:1c:
c4:f8:95:e1:1d:d8:42:15:85:9f:f4:2c:e7:3a:04:
03:89:73:f3:cc:60:06:87:db:bc:57:8c:e9:4e:90:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7C:C5:D3:85:CD:88:2A:E0:98:D8:B2:DB:6B:D3:CD:E4:BD:69:1F
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:72:8b:c3:1c:25:45:56:c8:ae:6a:4f:3b:8b:34:02:fa:1d:
dd:7b:18:66:c5:3f:34:fc:70:67:31:c0:cc:a2:c9:36:57:db:
de:33:ba:d1:2f:53:ce:f8:80:ba:dd:02:3e:c9:86:63:1d:50:
e2:26:bd:9f:e1:4a:3b:be:9b:e0:ae:fa:c9:8f:02:7c:ca:5f:
24:7d:89:4e:2e:82:1d:2b:78:8a:d6:c4:38:64:2a:99:7a:23:
e8:cb:a7:6d:6c:06:b2:99:38:5e:ac:49:f1:56:75:e9:a1:be:
e0:b7:a8:fa:0d:c5:38:96:12:1c:c4:c7:87:fb:1f:9a:ba:3b:
18:8a:f2:72:3f:98:a8:e5:9b:c0:73:66:c6:69:a3:8a:c8:6a:
79:31:b8:33:fb:a0:38:3c:be:18:09:5c:e7:35:e6:4f:21:19:
78:67:18:fa:69:d5:75:bd:e0:7d:12:94:f2:35:87:80:bb:7d:
1d:23:cf:ac:1c:70:ca:e1:40:f5:6e:43:3e:1c:97:7b:51:1f:
44:6a:e1:1a:b0:89:88:a2:ec:b4:da:f8:bc:29:41:59:8e:e4:
02:fe:ce:08:9e:31:d6:a1:5e:7e:27:a2:03:6e:7c:42:78:5e:
ff:06:ca:74:ff:e3:00:46:fb:e1:27:bd:f5:d4:68:75:8b:a6:
58:93:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:51:39 2026 by rpki-client