Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: yALhgxKGbiQzfG67Fki8gVu1CR87ETBJ90hlk3+rP7Q=
Subject key identifier: FD:0A:28:19:F9:5C:80:DC:13:30:6B:71:10:58:52:0B:3A:56:DB:AF
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 019FA93E073E37BF3CD642A952893E5AAE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 10BA
Signing time: Tue 28 Jul 2026 15:00:42 +0000
Manifest this update: Tue 28 Jul 2026 15:00:42 +0000
Manifest next update: Wed 29 Jul 2026 15:00:42 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: 1IVzXi/lcms1nPqZ6Ue0CAal4CTgb7ODjqfdjW3xtF8=)
2: nle7H145kWARm3i3WSQ0jxUoyxQ.roa (hash: zhsBwF/9ucNK3MWhQYCLkOEtb7B4dCQtxNnhlmW24Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:07:3e:37:bf:3c:d6:42:a9:52:89:3e:5a:ae:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Jul 28 15:00:42 2026 GMT
Not After : Jul 29 15:00:42 2026 GMT
Subject: CN=fd0a2819f95c80dc13306b711058520b3a56dbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:22:29:aa:51:e4:05:28:a5:7b:cf:bb:ad:
4d:d2:6b:7c:57:c0:23:91:0a:a1:86:77:c7:ca:91:
bf:5c:0f:44:d4:3d:76:33:4a:63:2e:23:76:7d:7d:
a3:bd:29:11:a8:04:95:e1:04:76:fd:2e:76:24:69:
6e:f6:9e:11:36:55:58:fe:9e:0b:69:5d:23:9f:9d:
54:b2:b6:fc:17:e7:72:d8:a9:95:f4:41:fa:c7:ca:
ef:a5:e6:f0:58:e9:8c:59:ce:ac:82:b3:d2:fd:9c:
91:85:e3:37:09:fe:a2:f7:38:4d:1f:62:75:85:05:
50:f9:1f:1f:63:a7:b3:d0:49:56:e1:8f:3c:fc:2c:
69:20:7a:20:7b:6d:d7:f0:20:39:7f:5b:63:a2:4a:
74:d9:e7:6f:9d:ff:ba:ad:c1:89:cc:c5:0a:7b:b2:
2b:f0:aa:fe:8d:d0:ae:26:63:03:c4:3a:c8:61:8f:
b6:2c:5a:19:68:94:fc:cb:e0:00:1a:79:3e:9d:f2:
ae:5a:a6:f6:80:9c:ef:82:c6:f3:4a:76:04:8f:f1:
9e:9e:e9:a1:89:6d:91:77:1d:d9:97:6b:49:5b:0b:
48:eb:88:51:37:98:49:1f:60:26:00:00:2b:12:b2:
6b:60:63:52:28:8d:d0:c9:d5:1b:9c:5d:1a:0c:ee:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:28:19:F9:5C:80:DC:13:30:6B:71:10:58:52:0B:3A:56:DB:AF
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a8:5d:e9:7e:de:d8:1d:b3:c2:e2:64:a6:77:af:5b:4a:70:
b9:32:1c:f6:63:a2:9e:5c:72:08:9a:6a:94:b6:f4:5a:ee:86:
dd:85:09:48:8d:ba:63:16:af:c6:bf:09:b5:7a:e0:a5:08:01:
5f:71:a9:5a:cb:98:d9:41:09:f3:f0:f5:ce:25:a3:28:27:32:
be:d1:a0:17:ac:00:f9:6c:b4:f8:20:78:9a:b6:c6:1d:a2:02:
e2:09:8f:9c:21:de:a5:10:b7:be:f9:78:40:fb:eb:2f:b1:21:
a5:37:33:1b:11:15:ae:a4:22:18:a5:d4:9c:f8:45:1d:ed:7e:
87:53:2c:e6:4b:95:a7:33:c0:c4:fe:ea:66:e9:01:cb:71:d7:
54:86:7f:f3:8b:1e:40:b8:df:fe:ef:49:0b:55:c9:9c:74:a0:
55:05:15:dd:4e:37:14:24:02:bd:05:2e:58:3b:cd:ee:45:47:
0d:b5:a8:a5:fe:d8:71:b1:5a:ad:dd:8d:ec:ba:58:dc:7e:8e:
63:74:14:a7:14:da:2f:a5:b6:b9:7a:48:b1:63:df:ce:81:ad:
a7:d8:bc:e5:10:78:48:d6:fa:b5:f3:6f:b3:e3:00:df:78:66:
fd:3c:43:87:00:69:25:11:0c:b8:7e:8d:80:7c:ce:76:c3:f8:
69:d6:8f:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPgc+N7881kKpUok+Wq6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGY1NTUzNGUzOGVhYzJjMzI3YTk0MWUxYTI2YjljNDAz
MWJlMTgwHhcNMjYwNzI4MTUwMDQyWhcNMjYwNzI5MTUwMDQyWjAzMTEwLwYDVQQD
EyhmZDBhMjgxOWY5NWM4MGRjMTMzMDZiNzExMDU4NTIwYjNhNTZkYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LciKapR5AUopXvPu61N0mt8V8Aj
kQqhhnfHypG/XA9E1D12M0pjLiN2fX2jvSkRqASV4QR2/S52JGlu9p4RNlVY/p4L
aV0jn51Usrb8F+dy2KmV9EH6x8rvpebwWOmMWc6sgrPS/ZyRheM3Cf6i9zhNH2J1
hQVQ+R8fY6ez0ElW4Y88/CxpIHoge23X8CA5f1tjokp02edvnf+6rcGJzMUKe7Ir
8Kr+jdCuJmMDxDrIYY+2LFoZaJT8y+AAGnk+nfKuWqb2gJzvgsbzSnYEj/Genumh
iW2Rdx3Zl2tJWwtI64hRN5hJH2AmAAArErJrYGNSKI3QydUbnF0aDO5rjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0KKBn5XIDcEzBrcRBYUgs6VtuvMB8GA1UdIwQY
MBaAFEmPVVNOOOrCwyepQeGia5xAMb4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYt
M2VlNjM2MmVhMzdiLzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYtM2VlNjM2MmVhMzdi
LzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6hd6X7e
2B2zwuJkpnevW0pwuTIc9mOinlxyCJpqlLb0Wu6G3YUJSI26Yxavxr8JtXrgpQgB
X3GpWsuY2UEJ8/D1ziWjKCcyvtGgF6wA+Wy0+CB4mrbGHaIC4gmPnCHepRC3vvl4
QPvrL7EhpTczGxEVrqQiGKXUnPhFHe1+h1Ms5kuVpzPAxP7qZukBy3HXVIZ/84se
QLjf/u9JC1XJnHSgVQUV3U43FCQCvQUuWDvN7kVHDbWopf7YcbFard2N7LpY3H6O
Y3QUpxTaL6W2uXpIsWPfzoGtp9i85RB4SNb6tfNvs+MA33hm/TxDhwBpJREMuH6N
gHzOdsP4adaPfw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:12 2026 by rpki-client