Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: p/s3aagvcKBkAxGwI5rYDR6V/rw+vRc21AuKhJKrmCU=
Subject key identifier: 28:91:30:F3:ED:0E:DD:FB:A8:33:AC:11:03:71:36:F7:FC:71:90:DD
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 019FAB63E71E753B559F6389E753567350DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0CFC
Signing time: Wed 29 Jul 2026 01:01:18 +0000
Manifest this update: Wed 29 Jul 2026 01:01:18 +0000
Manifest next update: Thu 30 Jul 2026 01:01:18 +0000
Files and hashes: 1: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: 382K9FSVLPPp8xuNlWa22NoKBPl/2AmROYBJe9yTTIA=)
2: k6dlQXV0CNNHoojLjuToM3RWJts.roa (hash: r/95kr/PA/IvIi+wnWxWmGRUKtlOA3OqudcUD32MdDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:e7:1e:75:3b:55:9f:63:89:e7:53:56:73:50:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Jul 29 01:01:18 2026 GMT
Not After : Jul 30 01:01:18 2026 GMT
Subject: CN=289130f3ed0eddfba833ac11037136f7fc7190dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:70:97:29:db:6f:bf:65:ac:72:da:2c:aa:
3c:16:7a:88:fb:95:d8:9c:8a:ac:72:72:c0:12:9f:
05:b0:4d:dd:6e:d0:98:4b:4c:f0:10:6b:be:1f:ad:
07:1f:dc:31:e7:cf:cb:57:e3:dc:9a:7c:b3:b0:8b:
9f:6c:86:e4:a7:0c:71:f5:76:65:b2:04:c8:f6:00:
f8:bc:54:7c:9a:16:b1:e8:21:66:da:a1:df:48:c3:
3d:bf:11:93:63:be:87:72:24:a6:09:9e:e4:1d:39:
ab:9a:9f:ad:70:12:88:35:d0:9a:b7:64:96:ae:2e:
38:21:d4:3b:bf:4b:ab:c1:e9:b3:88:04:a7:62:4b:
5f:44:78:a5:fb:1a:7b:56:8c:c9:63:66:11:f4:dc:
54:79:54:c5:3b:8b:2e:63:08:5a:af:26:cd:20:82:
6f:19:d7:02:a2:f1:60:f9:1a:41:55:a3:18:76:dd:
38:2e:e0:7c:04:05:7f:61:9f:0b:1d:7b:92:7f:17:
6d:88:ca:c1:88:61:e1:d7:37:a4:a5:7b:f8:97:3b:
4d:88:c2:87:c0:bb:ce:4d:c2:fe:99:ea:3c:67:3b:
93:f3:32:57:d7:62:81:2f:bd:a6:9b:e6:ae:c4:a9:
63:a1:3b:8b:81:e0:9f:7c:56:91:6d:ed:16:ae:ae:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:91:30:F3:ED:0E:DD:FB:A8:33:AC:11:03:71:36:F7:FC:71:90:DD
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:fa:ae:4f:94:14:a0:54:ce:3e:8e:d4:65:7f:03:86:67:b0:
61:ca:b9:0f:25:24:6d:75:4d:78:cd:2b:37:c3:de:aa:c0:83:
f2:4c:0f:fa:7d:a1:6c:8a:c5:17:17:a4:11:52:81:99:09:77:
0e:89:73:0b:62:0f:a3:53:99:4b:e6:16:bc:46:f0:1b:83:ce:
4a:49:7d:ff:2c:02:18:08:c9:7b:83:8b:a1:9d:6a:26:54:1d:
1f:a4:b9:89:5b:08:e4:74:5f:9c:cc:8a:65:e0:2b:3d:57:7f:
49:1b:07:6a:23:dc:c9:e4:7f:8d:49:91:05:07:43:ab:f6:39:
eb:37:49:06:05:ff:3f:d6:88:e9:b0:76:a3:23:25:fe:a3:53:
62:86:2f:42:64:4c:96:41:96:92:25:5a:3c:1f:0b:83:74:a8:
4e:59:21:2f:6f:bb:53:56:e9:d3:e9:31:a6:ab:1e:58:e5:3f:
36:9d:13:21:47:6f:a7:3b:19:f7:e1:4c:01:36:1d:15:22:b8:
ee:a0:6c:ed:21:e2:00:7e:17:e9:4e:57:ee:83:26:37:5b:16:
d6:72:8f:da:cb:99:07:10:88:bb:44:7d:4e:b7:cf:62:85:96:
7b:16:e9:77:e9:5c:09:ae:ea:ef:e6:f4:fb:5b:23:5f:ff:a8:
d0:37:f8:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY+cedTtVn2OJ51NWc1DcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw
NTA4YjcwHhcNMjYwNzI5MDEwMTE4WhcNMjYwNzMwMDEwMTE4WjAzMTEwLwYDVQQD
EygyODkxMzBmM2VkMGVkZGZiYTgzM2FjMTEwMzcxMzZmN2ZjNzE5MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1Bwlynbb79lrHLaLKo8FnqI+5XY
nIqscnLAEp8FsE3dbtCYS0zwEGu+H60HH9wx58/LV+PcmnyzsIufbIbkpwxx9XZl
sgTI9gD4vFR8mhax6CFm2qHfSMM9vxGTY76HciSmCZ7kHTmrmp+tcBKINdCat2SW
ri44IdQ7v0urwemziASnYktfRHil+xp7VozJY2YR9NxUeVTFO4suYwharybNIIJv
GdcCovFg+RpBVaMYdt04LuB8BAV/YZ8LHXuSfxdtiMrBiGHh1zekpXv4lztNiMKH
wLvOTcL+meo8ZzuT8zJX12KBL72mm+auxKljoTuLgeCffFaRbe0Wrq7yywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiRMPPtDt37qDOsEQNxNvf8cZDdMB8GA1UdIwQY
MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt
MDA0MDNiNjQwNTVhLzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh
LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw/quT5QU
oFTOPo7UZX8DhmewYcq5DyUkbXVNeM0rN8PeqsCD8kwP+n2hbIrFFxekEVKBmQl3
DolzC2IPo1OZS+YWvEbwG4POSkl9/ywCGAjJe4OLoZ1qJlQdH6S5iVsI5HRfnMyK
ZeArPVd/SRsHaiPcyeR/jUmRBQdDq/Y56zdJBgX/P9aI6bB2oyMl/qNTYoYvQmRM
lkGWkiVaPB8Lg3SoTlkhL2+7U1bp0+kxpqseWOU/Np0TIUdvpzsZ9+FMATYdFSK4
7qBs7SHiAH4X6U5X7oMmN1sW1nKP2suZBxCIu0R9TrfPYoWWexbpd+lcCa7q7+b0
+1sjX/+o0Df4sQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:51:02 2026 by rpki-client