Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier: aOKmXJ8jjDHI4ZGky+I0WCXQKAUb7+ZuTUWr7oXHrN8=
Subject key identifier: 29:A1:4A:E3:DA:B1:F9:86:1B:4A:6B:E2:D7:3B:A2:5C:FF:FA:20:8D
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 019FABD19C9A3AF90E2EE2900933314373F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number: 1514
Signing time: Wed 29 Jul 2026 03:01:08 +0000
Manifest this update: Wed 29 Jul 2026 03:01:08 +0000
Manifest next update: Thu 30 Jul 2026 03:01:08 +0000
Files and hashes: 1: lTiIdOCkR7HQgUlBuUv00XWG8n8.roa (hash: 5GQQkbQ8C7wWLUQ4RuOd8R+85EFkyHaFY8FEJbVGNpw=)
2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: u5rOwLr9dEVqYD5nYg0LVVrXVb4TABJP8lwLk5LbfMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:9c:9a:3a:f9:0e:2e:e2:90:09:33:31:43:73:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: Jul 29 03:01:08 2026 GMT
Not After : Jul 30 03:01:08 2026 GMT
Subject: CN=29a14ae3dab1f9861b4a6be2d73ba25cfffa208d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:ed:0c:02:84:29:6b:01:7a:08:64:90:de:
46:8f:f9:55:c3:61:f3:29:fc:e1:f4:0d:26:97:63:
33:f2:c3:2f:5a:f8:1a:b0:87:06:fe:a3:ab:58:0e:
1d:f5:94:7f:50:f7:9b:ea:2c:b9:27:90:d9:20:ed:
ca:ac:46:07:81:1e:68:ad:2a:60:1f:08:3c:dc:1b:
2c:74:8c:ff:37:05:88:7e:ef:ad:6a:b8:d8:01:90:
6d:10:b1:50:95:c8:e4:04:cc:91:79:77:ac:d6:a8:
27:0e:06:46:2b:d0:a4:6f:ba:81:2d:aa:f6:01:31:
61:3c:ab:4d:25:11:7b:f1:97:f0:f7:07:1c:2d:12:
1d:b5:72:ec:d2:fb:0b:a8:07:8a:0a:87:44:dd:c2:
ed:65:6f:9b:56:d9:28:4c:a9:19:3e:a8:58:fc:11:
f1:6d:3d:2c:0e:0d:3d:4c:d3:0d:80:c5:9c:25:87:
2d:89:72:d2:d7:94:36:03:92:38:59:f5:03:27:21:
e5:38:84:ca:fb:44:f6:54:85:91:ad:a6:f5:5a:77:
35:26:05:59:e0:83:df:87:75:24:7f:81:2d:90:50:
0c:1e:dd:75:63:b5:7c:1b:8d:00:d8:59:97:63:ba:
51:21:c7:63:d5:96:c3:ca:bd:ea:53:e1:70:07:dd:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A1:4A:E3:DA:B1:F9:86:1B:4A:6B:E2:D7:3B:A2:5C:FF:FA:20:8D
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:29:31:23:4b:78:88:e2:01:b4:03:16:68:ba:25:22:f4:e8:
50:19:1c:3d:e5:71:75:3a:cd:c4:5f:2c:5f:1d:f4:f7:0d:1b:
d7:42:b0:5d:e5:8b:64:9d:b9:f3:63:8f:51:9b:02:2f:cb:74:
1e:fb:9e:92:9f:81:4c:dc:a2:b3:98:c8:d5:db:3c:0d:61:69:
52:2b:63:7c:16:7d:a1:98:73:c3:5d:00:b9:e5:3d:98:06:46:
67:b8:8d:f0:60:78:03:23:36:64:28:89:5c:57:c0:c5:45:7e:
fe:c5:8f:a2:4b:06:fb:20:5e:f7:14:33:47:c1:c9:7c:f3:bd:
cd:b5:41:2f:1b:ae:85:c0:96:25:4b:f7:5b:2b:f3:d2:55:bd:
9a:91:f9:c3:1b:e8:00:33:4c:49:70:78:84:18:30:16:4f:1e:
7c:3a:30:bb:19:57:36:9c:38:31:c2:75:70:55:36:7f:42:58:
99:48:e1:2c:7b:c2:e9:71:8f:24:13:36:e0:46:02:77:5d:00:
1a:c4:38:73:ef:a4:49:2b:a6:26:d0:1f:36:3c:7a:a5:b3:01:
e3:d5:30:b8:3c:a3:fa:e8:d1:9b:85:03:e1:12:24:f0:39:e9:
f8:95:3a:f9:c9:17:41:b5:5b:1d:42:20:85:31:52:94:1f:f8:
4e:a4:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:16 2026 by rpki-client