Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: w8OR/xHFFxV1/kkKYMl6SuJv9TbeLrRDXUq1sA6fmd0=
Subject key identifier: E8:9C:60:A6:38:31:6F:9E:FB:80:58:BA:3B:B3:3C:B4:41:05:5F:92
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 019D9A06EF284D5D3FA427D195AFE8033287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0FA9
Signing time: Fri 17 Apr 2026 06:00:38 +0000
Manifest this update: Fri 17 Apr 2026 06:00:38 +0000
Manifest next update: Sat 18 Apr 2026 06:00:38 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: D8/bwgvFEfh7WGIvBcXC/Y38JvGGKgPcZ68UbsdbvIM=)
2: nle7H145kWARm3i3WSQ0jxUoyxQ.roa (hash: zhsBwF/9ucNK3MWhQYCLkOEtb7B4dCQtxNnhlmW24Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ef:28:4d:5d:3f:a4:27:d1:95:af:e8:03:32:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Apr 17 06:00:38 2026 GMT
Not After : Apr 18 06:00:38 2026 GMT
Subject: CN=e89c60a638316f9efb8058ba3bb33cb441055f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:03:9d:56:e5:6f:4f:1a:68:3d:2d:d4:37:
0e:49:7b:e4:8b:14:c3:91:e7:a5:80:5a:ff:34:c9:
80:c2:03:64:23:e6:06:e1:6d:8f:74:c5:f4:f1:89:
6d:d3:04:d0:e7:d3:38:e0:ef:de:d8:dc:07:bb:dc:
4e:0d:f0:ae:5a:0b:06:9b:6b:3c:70:b3:4e:41:eb:
ef:f5:b1:d0:3e:97:23:4a:05:ae:93:b1:65:22:b4:
a7:e6:92:58:b1:92:31:48:f1:b1:c7:10:4d:a7:e5:
33:c5:ca:27:80:44:3f:58:36:e9:69:8b:a2:4c:80:
a7:3c:bd:d8:ac:7f:95:a2:22:e2:94:fc:43:12:cd:
c0:24:e1:fa:11:6f:a9:d5:34:27:9d:7f:d0:0e:dd:
c7:55:8f:3c:e2:47:a9:5b:a9:04:c7:57:6a:87:cb:
b5:f9:85:6c:1d:35:55:0d:d8:c6:2c:10:ff:49:45:
04:85:60:92:66:87:dd:c7:ea:75:a7:02:8a:18:9a:
d8:86:59:13:71:2c:d7:9d:2c:15:e2:6a:a3:5c:34:
74:e9:cd:08:ee:db:0c:5b:48:f7:c8:83:da:b6:0f:
9c:8e:99:d6:02:d1:4b:3a:57:65:44:36:c6:89:dc:
94:c7:a1:69:e6:dd:14:18:77:33:53:1b:fa:b3:48:
f1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:60:A6:38:31:6F:9E:FB:80:58:BA:3B:B3:3C:B4:41:05:5F:92
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:64:99:58:9c:75:a3:60:c6:de:9d:4b:f3:12:0b:cd:cb:8c:
e9:fa:30:9f:10:6c:02:c7:14:7a:15:d5:b3:07:a9:50:28:54:
0a:81:c1:3d:94:20:80:66:5f:ac:24:f7:8b:bd:98:fd:bb:1e:
f8:99:82:da:16:b7:65:e2:cf:ec:46:d8:72:19:a4:28:77:10:
fa:74:d3:53:10:b3:9c:a6:a9:92:93:5d:27:22:9e:e9:54:1c:
31:95:ee:55:1a:59:9e:a2:04:44:56:de:d0:a8:dd:40:dc:6b:
39:c5:33:69:7b:02:fa:fe:33:62:e5:6f:ad:4c:65:fd:b3:00:
d1:42:62:2c:5e:16:55:5f:32:5c:e9:74:2d:2e:41:0d:da:53:
ed:3e:9e:27:89:3b:3d:42:08:b4:c1:1d:87:3d:4c:b1:d4:32:
91:87:20:ed:0c:38:12:86:c7:74:58:a4:40:e7:f6:a4:47:e4:
ce:01:08:5e:8c:2a:fe:54:dd:85:05:7d:0f:ac:28:be:8e:d7:
bd:65:b9:9a:cd:ed:dd:80:c6:ec:7e:9a:d8:cc:4a:32:b9:66:
a8:da:f5:ad:c0:ce:5a:34:b9:05:48:9b:c6:c5:8b:d6:3c:49:
1f:d5:20:ce:f0:54:88:0f:89:cf:ed:d8:3f:a0:e4:8f:1b:b8:
a2:d2:5f:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBu8oTV0/pCfRla/oAzKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGY1NTUzNGUzOGVhYzJjMzI3YTk0MWUxYTI2YjljNDAz
MWJlMTgwHhcNMjYwNDE3MDYwMDM4WhcNMjYwNDE4MDYwMDM4WjAzMTEwLwYDVQQD
EyhlODljNjBhNjM4MzE2ZjllZmI4MDU4YmEzYmIzM2NiNDQxMDU1ZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiADnVblb08aaD0t1DcOSXvkixTD
keelgFr/NMmAwgNkI+YG4W2PdMX08Ylt0wTQ59M44O/e2NwHu9xODfCuWgsGm2s8
cLNOQevv9bHQPpcjSgWuk7FlIrSn5pJYsZIxSPGxxxBNp+UzxcongEQ/WDbpaYui
TICnPL3YrH+VoiLilPxDEs3AJOH6EW+p1TQnnX/QDt3HVY884kepW6kEx1dqh8u1
+YVsHTVVDdjGLBD/SUUEhWCSZofdx+p1pwKKGJrYhlkTcSzXnSwV4mqjXDR06c0I
7tsMW0j3yIPatg+cjpnWAtFLOldlRDbGidyUx6Fp5t0UGHczUxv6s0jxewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOicYKY4MW+e+4BYujuzPLRBBV+SMB8GA1UdIwQY
MBaAFEmPVVNOOOrCwyepQeGia5xAMb4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYt
M2VlNjM2MmVhMzdiLzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYtM2VlNjM2MmVhMzdi
LzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2SZWJx1
o2DG3p1L8xILzcuM6fownxBsAscUehXVswepUChUCoHBPZQggGZfrCT3i72Y/bse
+JmC2ha3ZeLP7EbYchmkKHcQ+nTTUxCznKapkpNdJyKe6VQcMZXuVRpZnqIERFbe
0KjdQNxrOcUzaXsC+v4zYuVvrUxl/bMA0UJiLF4WVV8yXOl0LS5BDdpT7T6eJ4k7
PUIItMEdhz1MsdQykYcg7Qw4EobHdFikQOf2pEfkzgEIXowq/lTdhQV9D6wovo7X
vWW5ms3t3YDG7H6a2MxKMrlmqNr1rcDOWjS5BUibxsWL1jxJH9UgzvBUiA+Jz+3Y
P6Dkjxu4otJfSA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:23 2026 by rpki-client