Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: c9mSDloliGuqY+5G3MyHrewczGjvqOa5V+uRoH31GVk=
Subject key identifier: 40:77:8B:F2:9C:FC:E3:59:12:99:A0:AE:24:F1:4C:2C:7C:F6:5E:DE
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 019CAAC718962D066952D5DB17D575BD5AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0B6E
Signing time: Sun 01 Mar 2026 19:01:40 +0000
Manifest this update: Sun 01 Mar 2026 19:01:40 +0000
Manifest next update: Mon 02 Mar 2026 19:01:40 +0000
Files and hashes: 1: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: 9KDfKPnel90oIzt/kMrfs8SSqdw/DtjosUIdogIUtOk=)
2: k6dlQXV0CNNHoojLjuToM3RWJts.roa (hash: r/95kr/PA/IvIi+wnWxWmGRUKtlOA3OqudcUD32MdDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:18:96:2d:06:69:52:d5:db:17:d5:75:bd:5a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Mar 1 19:01:40 2026 GMT
Not After : Mar 2 19:01:40 2026 GMT
Subject: CN=40778bf29cfce3591299a0ae24f14c2c7cf65ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:4c:73:34:74:4c:71:ab:e6:6e:75:3e:73:
ef:a6:68:c6:28:34:b3:ed:62:46:6c:d3:2f:86:d0:
b1:2f:08:9f:31:9f:b2:e3:19:c6:a1:c2:df:26:06:
3d:1a:44:ff:15:9a:7f:5e:f1:ff:b7:be:8a:7e:36:
ae:6b:e2:36:6e:57:5c:e9:3b:b4:01:41:7c:af:ec:
d8:90:0f:06:74:e7:75:9d:13:23:fc:2b:bf:77:bb:
a9:2c:3c:3e:a5:64:15:7f:a7:79:23:e0:45:27:8b:
50:f3:14:ba:67:21:7f:39:5a:d9:f2:2b:c0:ba:5d:
b7:20:8e:c7:81:a3:af:13:c0:41:ef:43:10:53:c2:
29:eb:28:46:cc:18:9e:9b:29:db:69:9a:06:e5:e9:
2b:8e:e8:84:93:80:59:cb:76:6b:e1:2c:f8:fe:19:
40:29:05:cd:f7:74:c4:5d:fe:a2:db:22:1a:c5:70:
6e:99:61:0a:60:3b:8e:86:34:ad:21:ba:c4:91:95:
2e:66:89:43:16:31:3f:aa:09:6c:5d:90:f6:86:02:
bd:c4:a8:4a:30:2b:1a:3d:40:34:48:ef:3a:38:d7:
05:44:09:aa:ff:8c:93:fb:5f:e1:7e:d4:3e:ff:ab:
51:49:83:23:d0:e0:8e:35:32:fd:c9:94:78:b8:92:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:77:8B:F2:9C:FC:E3:59:12:99:A0:AE:24:F1:4C:2C:7C:F6:5E:DE
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:34:e1:8b:bd:e5:f1:3a:40:b6:e5:0b:c8:a4:4c:d2:58:d8:
4a:57:95:72:42:ab:0e:91:1f:b0:1c:b8:15:29:55:d3:50:dc:
97:85:64:8f:96:e7:1b:2a:55:4a:da:1b:3c:5c:62:b9:6b:5f:
c0:9f:be:3d:fa:f1:15:12:16:b5:3d:ed:b4:85:b7:f2:e5:1f:
f9:58:cd:f8:16:72:b9:7a:b2:6e:cd:40:58:79:c4:56:9f:07:
ef:60:6e:63:e2:c0:81:f3:98:3d:e4:66:a7:79:50:9d:46:60:
c0:50:b0:02:9b:05:15:f0:14:6d:8b:8f:ce:f8:bd:2b:aa:ed:
5a:be:15:ac:6c:0a:37:67:35:22:da:13:80:8c:79:97:18:51:
38:c7:e0:14:17:c1:7f:78:6c:e6:86:7f:0f:a2:e4:12:5e:a5:
30:d2:27:aa:f4:24:51:d8:71:7e:fe:74:5f:a9:65:52:62:17:
80:c5:51:5b:ba:bb:3f:d3:f3:64:b1:21:ef:da:c2:93:e0:7c:
d6:1d:8b:9a:f2:8b:bb:78:b5:e3:5f:8e:11:09:4c:be:5c:f9:
be:d3:3f:25:b0:b1:ce:aa:66:8f:69:3e:15:d7:4a:c5:d6:1b:
1a:96:55:9a:07:4d:5b:3f:9a:80:74:4d:cf:b7:f8:d3:70:b3:
34:1e:7a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:00 2026 by rpki-client