Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier: s1H1Hp7pv8UuhDRbNRtMWRopBRStxQ+u40xLSgGknlY=
Subject key identifier: 2B:10:A9:02:19:27:96:57:C3:82:16:F1:07:58:8E:39:0D:FE:1D:4E
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 019EC036763C7A64AAF9C5D8988950A075D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number: 149A
Signing time: Sat 13 Jun 2026 09:00:55 +0000
Manifest this update: Sat 13 Jun 2026 09:00:55 +0000
Manifest next update: Sun 14 Jun 2026 09:00:55 +0000
Files and hashes: 1: lTiIdOCkR7HQgUlBuUv00XWG8n8.roa (hash: 5GQQkbQ8C7wWLUQ4RuOd8R+85EFkyHaFY8FEJbVGNpw=)
2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: oZ0FBjRn+S1d1XYe5yOao3VWK+/qGQu+wYft0rUHAuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:76:3c:7a:64:aa:f9:c5:d8:98:89:50:a0:75:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: Jun 13 09:00:55 2026 GMT
Not After : Jun 14 09:00:55 2026 GMT
Subject: CN=2b10a90219279657c38216f107588e390dfe1d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:40:d9:77:45:93:63:aa:52:fb:25:ed:67:
fd:28:04:db:0b:31:fe:74:ea:71:75:37:f1:b4:0c:
a3:00:15:e6:c3:8b:da:66:f8:97:e7:dc:7a:82:14:
08:80:94:99:4c:95:ed:d0:58:6b:b2:60:54:03:5c:
56:e1:e5:76:2d:83:d8:05:62:c8:04:af:f5:f4:f1:
c2:14:a3:67:65:d9:28:b1:dd:68:0b:16:61:dd:74:
7a:11:43:e9:58:eb:24:08:6b:f2:11:d7:5b:fb:1b:
f7:ec:a8:10:3a:70:fc:84:c9:4e:99:42:dc:39:81:
f3:79:8c:55:35:54:94:81:69:7f:96:72:1d:6d:53:
8e:f0:26:e9:28:10:8e:ce:73:c8:35:de:aa:cf:dc:
58:d2:e1:9b:36:52:22:61:e1:c7:98:a1:12:7e:79:
fe:05:5c:ad:f3:fe:f8:6c:83:7f:fd:31:c9:29:bc:
e4:dc:aa:17:c3:6b:06:d5:6b:83:9f:8c:f1:8e:8c:
e6:82:af:df:64:67:32:53:ac:4c:55:12:26:bf:01:
ed:00:91:fa:23:27:0e:fc:5b:12:66:44:69:c0:b7:
e1:cc:2c:c1:bc:e5:6f:59:2d:84:5f:5b:6e:1c:52:
29:21:04:b8:5e:07:07:59:f2:cd:a6:c6:2f:0e:cb:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:10:A9:02:19:27:96:57:C3:82:16:F1:07:58:8E:39:0D:FE:1D:4E
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7e:84:51:0f:56:b2:94:9f:31:6f:d7:b5:ac:76:65:df:12:
32:ba:2f:b0:3a:62:c5:84:25:bc:71:aa:29:86:e7:e9:34:fa:
df:f7:9d:4e:0d:59:9b:fd:06:8d:fd:12:82:bf:b6:14:79:e4:
30:af:0c:0b:c3:6b:ad:3e:3b:49:7e:f3:34:38:a7:05:b7:fd:
4d:ca:45:8c:da:ed:9e:f7:68:6d:9e:c8:cd:6f:23:e6:c3:e3:
dd:64:38:3f:1c:c3:37:38:f5:61:ce:09:ce:db:b8:4d:90:56:
a8:66:dc:0a:02:69:27:02:f9:ac:c7:40:59:a6:8e:15:4a:82:
37:99:65:36:ad:07:dd:44:66:04:82:12:68:39:5d:a0:29:aa:
cc:1c:0d:56:c6:9e:b7:df:cf:48:c1:a3:73:3a:93:ab:56:9f:
1e:60:40:dc:b8:5f:de:3e:d9:fc:88:78:a8:3b:d7:ad:64:46:
6d:94:21:a6:8a:5f:90:3c:07:01:21:45:4f:8d:6b:9e:b5:3e:
2e:a4:cd:8b:0e:7e:66:90:9d:9d:86:23:18:9b:a1:5a:9d:3d:
18:88:05:a8:16:98:17:0d:51:51:94:12:24:e6:55:e5:16:1f:
68:b4:50:b5:66:4b:32:49:f7:ff:7a:a6:38:b5:64:72:1d:6d:
d8:e9:cb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:22 2026 by rpki-client