Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: /0RFfA4EWSByDnYg0XLlOicXMsU3OGuo17JNoKY1B/g=
Subject key identifier: 16:8B:89:3E:03:3B:6A:14:C9:92:9F:9E:ED:7D:50:4F:02:48:D8:06
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 019CACEB9CE1D000FFA57BB59F61585B3340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 185A
Signing time: Mon 02 Mar 2026 05:00:48 +0000
Manifest this update: Mon 02 Mar 2026 05:00:48 +0000
Manifest next update: Tue 03 Mar 2026 05:00:48 +0000
Files and hashes: 1: 1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa (hash: 2yNm3gZsn/uIFKiYLjVHUVr0sDTSowqLDiGRvdYsMoM=)
2: BpG8igZJv8h8cPkp6g_Gbs3F_SU.roa (hash: EZCW2Mw9lZcsL5iipH/n6h6UZOB/4+vnk665tkL9CRo=)
3: PwG6kgE4pgXJJkL8ugwSTM2yxbE.roa (hash: DDzmamajStjqmhcsDYxm8w9Zc5fmsm1zJsTmwujf+jw=)
4: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: 0ryOIeyDi8cHCUrlQkCgmihhxKD9mcxnNK3Syy1R+9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:9c:e1:d0:00:ff:a5:7b:b5:9f:61:58:5b:33:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Mar 2 05:00:48 2026 GMT
Not After : Mar 3 05:00:48 2026 GMT
Subject: CN=168b893e033b6a14c9929f9eed7d504f0248d806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:a1:96:fc:32:b9:ac:26:9a:98:31:85:ef:
ae:81:f6:7f:7d:61:be:6f:0b:15:ec:d7:9c:25:7e:
22:ed:a0:3f:b7:8f:d8:91:be:08:ae:a0:3e:d2:42:
cd:af:ac:cb:45:a6:92:4e:30:6d:0a:d6:ca:55:ea:
66:0b:b2:55:db:6c:25:ce:47:0c:52:b8:5f:28:34:
e7:f9:b9:ad:b8:50:bf:8a:9b:4c:86:69:2e:c3:59:
5d:ff:de:80:3d:f2:87:02:51:8a:a2:35:df:b4:b6:
1d:ae:dd:51:ae:61:1c:44:a3:e9:f8:8a:04:72:78:
06:d5:a2:1d:d5:81:e1:3c:eb:34:ac:81:26:93:8e:
fc:93:af:f0:2c:97:69:4b:01:fd:21:56:5b:92:ee:
27:c4:a3:f5:e2:ad:5b:e3:a9:06:63:1f:fa:17:e4:
b2:da:43:fa:08:04:53:c0:22:bc:97:1c:0b:c5:cb:
6b:39:c6:5b:3a:8a:e2:9f:85:cb:02:ab:33:a7:4c:
62:de:fa:86:6d:92:f3:00:e0:12:e5:34:48:0f:1c:
82:95:ae:28:9f:2e:12:9e:11:ad:39:c1:fb:dd:82:
81:d4:c3:1b:cc:ae:04:5f:d2:78:7a:18:f6:ff:29:
1b:4f:15:c3:78:cb:93:e4:bf:f3:0f:75:75:51:1d:
39:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8B:89:3E:03:3B:6A:14:C9:92:9F:9E:ED:7D:50:4F:02:48:D8:06
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:cb:3c:30:d3:40:f5:4e:07:e7:ff:60:dd:28:3c:bb:bb:fe:
8f:6b:e4:38:28:02:26:d6:34:42:e2:9c:31:ac:83:57:53:e5:
14:64:79:a1:1a:69:e4:21:42:1f:93:cb:c5:7a:ff:ac:6f:b3:
55:ae:71:67:a7:5b:0f:36:8e:78:c3:bc:ec:4e:a9:e2:ad:65:
01:a2:0a:bd:97:e2:6f:ac:ab:a2:25:cc:5e:9d:06:13:4a:74:
53:8a:41:0c:f2:55:a9:f4:29:19:60:4f:33:c0:ff:c0:b4:22:
f2:e8:35:29:83:ef:b0:a4:27:79:9a:ae:8e:c4:03:00:db:23:
02:3c:7e:c7:c3:76:d3:f2:ad:d3:cf:b1:cf:77:3e:4d:a9:f5:
c8:c4:ac:05:c1:c7:28:a0:5a:57:e1:48:9d:4f:a6:7c:c3:e3:
50:c7:12:52:53:1e:7b:3d:24:19:f7:ca:ec:28:07:53:41:92:
4c:eb:f5:5c:be:76:be:18:9b:5a:4d:44:96:c9:64:86:74:e6:
8d:fb:17:74:a7:17:a9:39:3a:81:14:50:07:30:c8:c9:0d:07:
a3:6f:66:31:f1:8c:27:63:e6:8e:ec:b8:09:fc:97:ec:2f:f1:
9d:d2:f1:c4:df:36:f1:5a:03:12:e9:ee:fb:4c:de:63:fc:c0:
70:85:3b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:30 2026 by rpki-client