Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: jHi6LqRH95eYxz/t6gDIc3HBy0ocGkwSsiu1T+i0D4g=
Subject key identifier: 77:FC:B7:C2:29:F1:2A:05:AA:A7:C2:CB:F4:39:78:AF:D0:30:BF:4B
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 01A0CEFFB3EEE3587CE9CE31C6B55B36799F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0D93
Signing time: Wed 23 Sep 2026 16:00:59 +0000
Manifest this update: Wed 23 Sep 2026 16:00:59 +0000
Manifest next update: Thu 24 Sep 2026 16:00:59 +0000
Files and hashes: 1: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: XTwvw2qVNdv8sIrC89eZD1oUviLHQZalUX1AcizmWG8=)
2: k6dlQXV0CNNHoojLjuToM3RWJts.roa (hash: r/95kr/PA/IvIi+wnWxWmGRUKtlOA3OqudcUD32MdDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:b3:ee:e3:58:7c:e9:ce:31:c6:b5:5b:36:79:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Sep 23 16:00:59 2026 GMT
Not After : Sep 24 16:00:59 2026 GMT
Subject: CN=77fcb7c229f12a05aaa7c2cbf43978afd030bf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:65:38:2a:e6:a5:46:63:6f:66:39:0e:f8:
f8:53:0b:cb:9c:3a:1f:2b:1c:9a:84:8e:68:60:6b:
9c:a0:b4:e6:5c:bf:6a:b1:9b:fc:32:91:ff:09:05:
c6:4c:14:43:bf:9a:95:cf:03:36:84:fe:91:6d:ba:
7f:76:78:49:b5:ad:a7:56:31:30:0e:0b:40:7b:db:
84:91:7c:1f:fc:0f:2d:43:f1:cf:c9:28:a7:f7:28:
3e:95:5b:03:b8:19:39:70:55:69:07:45:ba:a2:24:
42:d2:52:01:90:03:31:49:a4:74:7e:cd:aa:2e:35:
3c:80:1d:b4:fa:15:f0:1b:64:14:01:bc:72:5f:4b:
f0:3d:4d:12:19:63:5e:10:dd:01:1a:a4:51:75:48:
43:d5:93:cb:09:6d:e9:92:69:99:e3:dc:0c:06:55:
b0:a8:0b:08:77:d8:c0:8c:8e:c2:8f:a8:46:5a:a4:
cb:1b:a2:64:3a:73:94:ca:ae:55:71:fc:86:a6:83:
ae:43:10:d6:ee:e2:ce:7b:32:07:24:da:19:06:52:
d9:34:90:17:35:4b:77:87:d2:8f:95:f0:2b:65:65:
77:86:6f:02:c1:ae:a9:a9:09:3d:b0:dc:e1:11:47:
20:61:34:32:1c:cd:d1:3e:41:85:23:c6:50:c2:89:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FC:B7:C2:29:F1:2A:05:AA:A7:C2:CB:F4:39:78:AF:D0:30:BF:4B
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:87:bc:cf:fc:e3:48:5d:25:b5:fd:98:d0:dd:77:2b:3c:62:
fa:20:c7:cf:fc:29:a9:6a:f2:07:22:88:dc:20:aa:fe:d7:10:
e8:7b:e2:7e:95:ef:a0:40:9e:07:54:6d:69:d7:1a:7a:7f:0f:
fc:ec:69:da:d1:a9:06:75:2b:ed:64:96:ec:90:ab:1c:bd:08:
07:d7:72:ba:6f:6d:c6:64:6b:d8:75:83:ad:ac:c7:d8:92:db:
45:bb:12:86:47:1d:fb:d6:6b:53:a1:2e:00:84:d7:a0:f4:3b:
79:47:a1:50:da:a2:c2:1a:98:df:35:42:77:fc:f5:1f:5e:a4:
09:65:e8:a9:a8:3c:88:b7:96:dd:51:53:9b:bc:9a:c1:57:7d:
cc:81:13:4b:ca:57:5b:de:74:07:3a:7f:98:f7:6d:d0:53:ca:
27:95:ad:e0:c8:41:23:e0:07:2e:87:40:20:ac:0c:22:f4:77:
12:e1:e2:80:ef:3b:e9:59:e1:88:68:ac:ac:f3:3d:64:29:3e:
67:9b:0a:ac:5e:a6:05:b1:19:1f:b9:bd:83:7e:6d:04:e1:81:
34:6a:61:75:7f:05:ba:18:6b:6f:1d:8c:0c:52:1d:bc:2a:ba:
b7:3d:72:b9:58:64:e8:6c:ad:1d:a9:c7:a4:be:ef:79:04:da:
fe:43:d1:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/7Pu41h86c4xxrVbNnmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw
NTA4YjcwHhcNMjYwOTIzMTYwMDU5WhcNMjYwOTI0MTYwMDU5WjAzMTEwLwYDVQQD
Eyg3N2ZjYjdjMjI5ZjEyYTA1YWFhN2MyY2JmNDM5NzhhZmQwMzBiZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyohlOCrmpUZjb2Y5Dvj4UwvLnDof
KxyahI5oYGucoLTmXL9qsZv8MpH/CQXGTBRDv5qVzwM2hP6Rbbp/dnhJta2nVjEw
DgtAe9uEkXwf/A8tQ/HPySin9yg+lVsDuBk5cFVpB0W6oiRC0lIBkAMxSaR0fs2q
LjU8gB20+hXwG2QUAbxyX0vwPU0SGWNeEN0BGqRRdUhD1ZPLCW3pkmmZ49wMBlWw
qAsId9jAjI7Cj6hGWqTLG6JkOnOUyq5VcfyGpoOuQxDW7uLOezIHJNoZBlLZNJAX
NUt3h9KPlfArZWV3hm8Cwa6pqQk9sNzhEUcgYTQyHM3RPkGFI8ZQwolJ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHf8t8Ip8SoFqqfCy/Q5eK/QML9LMB8GA1UdIwQY
MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt
MDA0MDNiNjQwNTVhLzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh
LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIe8z/zj
SF0ltf2Y0N13Kzxi+iDHz/wpqWryByKI3CCq/tcQ6HvifpXvoECeB1Rtadcaen8P
/Oxp2tGpBnUr7WSW7JCrHL0IB9dyum9txmRr2HWDrazH2JLbRbsShkcd+9ZrU6Eu
AITXoPQ7eUehUNqiwhqY3zVCd/z1H16kCWXoqag8iLeW3VFTm7yawVd9zIETS8pX
W950Bzp/mPdt0FPKJ5Wt4MhBI+AHLodAIKwMIvR3EuHigO876VnhiGisrPM9ZCk+
Z5sKrF6mBbEZH7m9g35tBOGBNGphdX8Fuhhrbx2MDFIdvCq6tz1yuVhk6GytHanH
pL7veQTa/kPR4g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:56:53 2026 by rpki-client