Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json)
Hash identifier: +/cGoXkLrQPq4p00u3Ezvfurkqci0Y3qDmskYYjUdGA=
Subject key identifier: 1C:4C:7F:97:61:3F:26:12:AC:3A:8E:98:AC:C1:A9:EE:28:B5:02:BF
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 019CAA588DA71C79269C071431C3D8C1D9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
Manifest number: 0F45
Signing time: Sun 01 Mar 2026 17:00:55 +0000
Manifest this update: Sun 01 Mar 2026 17:00:55 +0000
Manifest next update: Mon 02 Mar 2026 17:00:55 +0000
Files and hashes: 1: MKIn2GKscAnSjEe-pKawSjFxEE4.roa (hash: 8pAAduPAownYKe2M33SgXEkvP4hCHBB83tGhPyeNyTU=)
2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: F/zGC+3jvokMEClJywxa3g+Dc3eF5MylU2EtWv4Yw5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:8d:a7:1c:79:26:9c:07:14:31:c3:d8:c1:d9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: Mar 1 17:00:55 2026 GMT
Not After : Mar 2 17:00:55 2026 GMT
Subject: CN=1c4c7f97613f2612ac3a8e98acc1a9ee28b502bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:97:52:d3:35:4d:49:79:be:19:f7:66:40:
39:b1:71:e7:4a:ad:a8:54:e9:c9:2d:85:a3:58:b4:
fc:ba:df:1f:b1:ab:79:de:d3:33:8a:eb:32:66:60:
b8:c6:e5:5a:b8:7a:aa:a8:10:df:de:c3:f4:b5:72:
ba:47:27:49:84:fb:45:7d:de:af:8e:6b:62:42:2b:
3d:58:cc:71:95:a0:1c:30:b8:f0:ae:68:8c:3e:b4:
cf:6d:e5:96:d4:c8:4a:df:43:35:53:91:3c:28:48:
5b:9e:72:ad:82:4a:1e:6d:dd:a6:72:1a:17:33:8b:
73:0a:a6:d8:51:d4:30:01:91:a1:ec:b6:d4:2a:37:
6a:8d:c0:dc:d2:85:36:d5:16:c3:4b:d1:47:80:9a:
6d:4e:7a:37:f2:b2:39:96:a6:43:60:73:e1:32:02:
9a:cc:76:85:99:40:97:0f:c8:60:96:a8:66:39:79:
3f:58:84:a9:64:fd:73:36:67:9e:04:d5:da:c8:9d:
04:36:c4:f4:1d:7f:4b:f8:dd:4d:fc:0a:8c:2a:8d:
1a:bf:ff:35:b1:04:fd:fd:ae:ef:8d:01:94:90:f3:
63:de:ba:3a:7a:5d:f8:10:e6:d8:70:6c:fd:eb:c8:
ed:e9:39:03:1e:4a:64:bf:12:95:cd:64:77:47:78:
44:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4C:7F:97:61:3F:26:12:AC:3A:8E:98:AC:C1:A9:EE:28:B5:02:BF
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:81:b4:20:05:a9:af:ad:fb:17:70:23:25:45:ae:3a:58:ea:
09:d7:1e:8c:3a:77:b8:7e:94:4f:1a:92:c1:a1:07:df:28:7b:
16:4a:7b:16:9a:e1:af:ba:14:88:68:2d:49:8f:83:34:cb:be:
21:8c:75:ff:24:21:30:a4:3f:48:dd:bf:53:b6:2b:96:32:bf:
8d:ff:4c:e0:2b:81:da:ea:9a:79:1a:79:f9:7a:81:3b:f7:30:
47:9a:3c:d7:b2:44:06:ce:e5:45:1a:38:f3:1b:5d:98:f2:99:
bd:a9:b6:c9:42:d4:b0:ae:a2:62:27:78:d7:4f:7d:f8:90:35:
02:94:45:33:d1:eb:f5:0a:d5:3a:93:28:b8:09:a7:13:31:9d:
9c:f9:37:f0:e4:5f:69:61:11:fa:8a:2b:3f:0e:94:c3:7f:9b:
5c:ce:0d:60:7a:d2:68:7e:ae:bc:78:a9:88:c1:47:fb:3e:c7:
06:f4:9f:a2:c8:d5:49:7e:51:0c:e2:a7:cc:3f:03:1b:8c:2f:
9e:c9:e8:94:0a:d3:80:b4:fb:76:97:67:56:46:42:c1:e4:f8:
b8:0d:b1:23:20:d3:79:59:98:6a:f5:11:55:09:f0:2f:75:14:
32:3f:6e:87:1a:26:d9:ac:a8:db:2a:3e:a0:72:27:a3:bd:c6:
46:83:fa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:10 2026 by rpki-client