Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json)
Hash identifier: xnIRUnkWghnFzv97da0wDuKQHL8FGqMJJ4JaL+mH494=
Subject key identifier: D5:55:8A:53:2C:10:8E:4D:FB:0F:61:17:5A:4C:8F:CD:6E:3D:2F:20
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 019FACE3EF9BB6169AB108736891C4310252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
Manifest number: 10D4
Signing time: Wed 29 Jul 2026 08:00:46 +0000
Manifest this update: Wed 29 Jul 2026 08:00:46 +0000
Manifest next update: Thu 30 Jul 2026 08:00:46 +0000
Files and hashes: 1: MKIn2GKscAnSjEe-pKawSjFxEE4.roa (hash: 8pAAduPAownYKe2M33SgXEkvP4hCHBB83tGhPyeNyTU=)
2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: 1WbYQEhWMmi/BnswOvyFxOOlpU6P6RzV9zOGe0jkIyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:ef:9b:b6:16:9a:b1:08:73:68:91:c4:31:02:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: Jul 29 08:00:46 2026 GMT
Not After : Jul 30 08:00:46 2026 GMT
Subject: CN=d5558a532c108e4dfb0f61175a4c8fcd6e3d2f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:5d:e3:eb:c5:dd:d3:61:5e:1c:5d:a6:d4:
5a:1e:94:87:74:ca:9a:56:ea:73:17:db:12:03:e8:
81:1a:e0:42:68:dc:b5:8b:d6:57:f7:73:69:d0:f9:
52:74:dd:83:d0:ae:1b:1d:9a:07:50:f9:2f:f0:68:
9c:c1:9e:16:5b:ae:eb:69:0f:56:1b:96:19:2d:13:
47:e6:39:79:9f:e8:eb:87:30:43:be:eb:5d:b1:01:
56:ab:f1:e7:4a:be:0c:23:bf:38:89:df:96:3e:3e:
1d:a3:88:f6:9d:9a:2a:2b:cc:62:d1:1f:81:c3:a8:
ce:d5:a9:29:21:61:09:12:99:fe:fa:11:b8:75:d8:
5a:50:19:d9:7d:cc:7d:cc:62:21:1f:64:da:6b:38:
58:e1:8b:80:8d:92:35:a7:1a:61:c5:5b:ff:ff:52:
a5:e8:17:90:5a:20:6a:7f:ff:f1:db:82:42:33:f2:
14:9d:a6:18:88:a3:8d:04:4d:8a:34:9f:b2:98:19:
f5:d0:03:4f:86:92:1d:94:a6:5c:6d:46:b4:19:6d:
c5:c4:0e:f1:82:d2:6c:ea:cc:81:0e:6d:39:a2:e2:
68:a2:63:da:d8:75:b4:a4:29:40:95:2f:d6:56:8f:
53:19:b7:ea:31:d0:ac:5f:be:04:2f:ad:6f:43:cb:
70:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:55:8A:53:2C:10:8E:4D:FB:0F:61:17:5A:4C:8F:CD:6E:3D:2F:20
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d5:11:a1:5d:f5:27:a5:7c:e6:c9:56:36:c2:0e:98:82:6c:
8a:04:c2:7c:5b:3b:60:33:d6:87:99:92:25:e4:b2:e2:a2:7b:
31:2f:a2:cb:22:46:f3:af:bd:28:33:1a:88:b0:42:87:e4:db:
d5:04:0c:91:d7:51:f4:fc:f5:19:4b:61:19:2b:9c:7b:fe:45:
cd:60:d9:7b:2f:a6:55:20:19:dc:1c:e2:9a:24:a5:93:01:33:
a6:3b:bc:16:03:a2:92:6c:6f:be:53:42:c1:21:3f:8e:cc:91:
d1:62:9f:fa:81:c8:5a:dd:52:53:52:d6:5e:53:91:a1:48:0a:
ed:91:21:3f:fc:a0:e9:d3:6b:b7:29:0c:f3:e1:9c:7e:36:a0:
9d:cf:81:93:6f:5b:dd:b7:2e:3d:72:ce:41:62:5d:08:ea:f0:
dd:3c:80:58:e8:8c:f6:72:0d:97:bf:eb:ad:74:aa:5e:d3:c2:
a6:dd:c1:01:7e:9e:e9:31:e7:27:fc:16:ee:62:97:14:c0:75:
a8:4b:b2:2f:61:a7:4e:cf:61:cc:69:ff:61:16:c1:2a:95:60:
05:3a:c6:c5:9f:f7:89:d2:1f:e7:4b:66:55:73:21:ae:a9:ac:
36:d6:e5:49:e6:e1:22:80:f5:3a:31:1e:72:cf:2a:04:1a:12:
4e:82:10:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:28 2026 by rpki-client