Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json)
Hash identifier: Yar0TQ+bSO/0ttb1tkBCrYRpeiYyyZZnI+uBktO6rTo=
Subject key identifier: B2:7C:B6:C5:BD:B9:85:16:BF:71:1D:2D:32:58:C4:6A:EF:2A:B7:36
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 019D99CFF9D8274C7BFA75722A9FDDEFC260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
Manifest number: 0FC1
Signing time: Fri 17 Apr 2026 05:00:37 +0000
Manifest this update: Fri 17 Apr 2026 05:00:37 +0000
Manifest next update: Sat 18 Apr 2026 05:00:37 +0000
Files and hashes: 1: MKIn2GKscAnSjEe-pKawSjFxEE4.roa (hash: 8pAAduPAownYKe2M33SgXEkvP4hCHBB83tGhPyeNyTU=)
2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: fkWS0g5c6m21kRuL5FN+WW1l0DOJlj+KiIw31/1VEcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f9:d8:27:4c:7b:fa:75:72:2a:9f:dd:ef:c2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: Apr 17 05:00:37 2026 GMT
Not After : Apr 18 05:00:37 2026 GMT
Subject: CN=b27cb6c5bdb98516bf711d2d3258c46aef2ab736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:92:ce:31:c7:1e:6c:98:09:10:a2:dd:b3:
84:bd:5b:0a:df:84:11:e2:5e:e7:cf:b0:e7:ab:f1:
e4:9b:01:2a:9e:84:06:3d:ce:75:6d:a9:f1:c3:16:
be:d3:0d:1a:f9:61:51:f8:ba:5f:89:0e:02:c8:95:
4c:ff:2c:bb:54:dc:f7:bc:02:86:7d:15:0e:c7:ec:
18:3c:e1:e1:90:69:1d:ab:5e:b7:26:33:b0:03:a1:
5d:7b:ba:06:4f:46:53:c2:2b:ef:65:35:0d:69:60:
47:f3:03:65:07:68:ed:84:42:f5:68:5c:47:80:f1:
30:a7:66:23:9a:0a:3c:17:0b:fc:81:53:9f:b0:8f:
a9:3c:e1:4b:94:c4:29:22:85:00:57:94:50:0c:01:
0b:c2:de:9b:78:40:89:d4:40:1d:e9:93:b6:c6:42:
44:c2:af:c5:52:5e:2d:cd:c5:e1:d9:8d:de:05:68:
b3:5d:d5:40:60:8d:3b:3d:86:c2:ee:9e:4f:ec:1a:
63:5f:72:31:20:26:95:a7:02:16:c6:62:31:c6:9b:
d7:19:98:2f:8a:5b:59:b9:43:ec:23:6c:4e:29:52:
9e:bf:c0:c1:98:0e:19:82:db:80:ea:6b:f7:6a:d0:
22:ef:bf:eb:1b:15:85:7b:bc:d3:28:de:9c:6b:62:
85:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7C:B6:C5:BD:B9:85:16:BF:71:1D:2D:32:58:C4:6A:EF:2A:B7:36
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:aa:44:a5:31:17:0e:f9:f7:85:e5:bd:bc:65:59:56:53:1b:
35:71:c6:bd:66:b1:d0:6d:95:54:f1:72:e1:24:f6:f2:09:32:
d8:fc:05:bf:bb:d8:9b:ec:83:17:0f:57:be:83:21:18:e3:65:
5f:77:eb:d8:c2:cf:63:48:56:28:6a:df:8e:4d:03:18:79:b7:
40:b7:08:87:4a:7c:1b:a1:b3:f7:33:6f:75:82:d6:3e:8a:92:
85:c5:57:6b:73:b5:35:a9:3c:fd:55:0d:d3:e4:a2:9d:42:ee:
49:02:6d:c3:b9:27:e3:7c:83:af:fc:b4:7d:ef:87:e6:e7:8b:
e9:03:9a:f1:34:9a:c3:28:63:38:c9:92:9c:ed:5f:a5:00:fd:
26:71:b2:bb:34:65:59:c4:9a:ba:ea:89:ed:b6:a0:e1:35:2b:
67:36:e9:29:3e:01:bc:ae:62:8a:eb:65:aa:75:cd:e5:ce:af:
82:2f:27:3f:54:ae:18:02:d2:95:e2:51:9c:30:f6:de:ef:cb:
31:60:c3:de:ea:e1:40:fa:91:b9:f1:06:85:6a:3b:4a:3f:d2:
3d:33:7c:12:5f:da:aa:30:15:91:91:3c:56:18:fd:7d:97:54:
0c:05:65:3a:0b:8a:d1:fb:e9:cc:bb:34:31:6e:f2:f7:e9:f1:
7a:69:51:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:11 2026 by rpki-client