Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File: SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier: ksA0AbSC2yLEVpEtdiJK0K9pp+BHPptpzeWnRCu03WA=
Subject key identifier: 78:32:D0:2A:A5:2E:BB:B4:79:B9:22:EB:B0:54:0F:0A:6B:63:28:3C
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial: 019CAB6B29F223C938442D6EADEF3A24CDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number: 0CA1
Signing time: Sun 01 Mar 2026 22:00:52 +0000
Manifest this update: Sun 01 Mar 2026 22:00:52 +0000
Manifest next update: Mon 02 Mar 2026 22:00:52 +0000
Files and hashes: 1: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: qJBPoQo6GKFi2ZMgNsTSaID5PJS76QhN3Lhrv63Ci+Y=)
2: r0m1872U6WFK52zTuHKr_z62s0E.roa (hash: fs/NQYOW8kLu0+d2MC/W9zC6jnh40QEwXnfZoyCgClc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:29:f2:23:c9:38:44:2d:6e:ad:ef:3a:24:cd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Validity
Not Before: Mar 1 22:00:52 2026 GMT
Not After : Mar 2 22:00:52 2026 GMT
Subject: CN=7832d02aa52ebbb479b922ebb0540f0a6b63283c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:b2:4a:6d:73:48:85:da:07:95:95:02:ea:
aa:a1:13:71:19:b3:6b:56:20:f0:e8:89:05:f6:bf:
57:a6:0b:8e:62:1f:47:fd:30:d2:b4:99:1b:33:d0:
86:73:9a:aa:bf:80:a9:c4:3d:28:ef:94:db:14:99:
92:0f:b1:ad:df:a7:b3:eb:5e:73:62:e4:89:cd:34:
37:f1:51:0f:11:1a:af:18:b2:fa:d3:5c:e0:dd:cd:
66:13:67:47:28:c1:98:e7:fa:c0:bb:4b:75:56:ef:
ef:45:aa:1c:48:c3:16:da:62:02:a0:c0:d2:2a:5c:
70:f8:25:81:c8:b8:f4:95:f3:dd:59:17:75:3d:c2:
d1:04:e6:c8:6b:da:74:46:f6:c9:51:12:be:88:ad:
82:e8:d9:9f:07:0b:19:f1:df:1f:ea:0a:7f:da:23:
42:79:c1:a0:2a:88:42:b7:05:f9:2e:6f:c7:e6:41:
2f:4a:34:3c:57:bb:ad:10:03:b2:ae:7e:b5:4c:eb:
27:35:d5:f6:fd:74:28:e8:e8:0e:37:af:d3:83:2d:
48:91:02:19:36:f3:51:5b:0b:35:96:9b:9b:7f:24:
23:67:18:81:21:6e:83:27:ee:9c:d1:de:7a:0a:86:
73:bf:c3:47:30:28:44:91:be:90:44:fe:a0:4b:86:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:32:D0:2A:A5:2E:BB:B4:79:B9:22:EB:B0:54:0F:0A:6B:63:28:3C
X509v3 Authority Key Identifier:
keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a6:0f:bf:d9:35:1d:1f:62:4f:e5:5e:bd:87:5b:7e:29:3a:
ec:79:2c:17:80:66:78:45:c9:8f:a2:00:8a:96:76:e9:ba:b9:
5d:ac:32:80:0d:7a:b5:0c:9f:56:69:bb:29:e0:42:07:43:ae:
35:41:52:b8:c9:c7:99:f1:e5:6d:72:84:b1:d4:99:7e:7e:67:
c4:94:1d:4b:a2:c4:f3:7c:c2:76:8e:76:56:7d:02:3b:69:26:
2f:32:c6:5f:29:d7:f8:66:04:75:19:f8:5c:79:da:77:81:50:
4a:f8:bb:09:0b:9f:8e:38:e7:74:cf:57:ae:39:9e:b9:6e:d6:
3f:07:f9:f6:59:ce:a4:b4:f6:dc:4e:ea:47:97:0d:d7:7e:a3:
47:8f:0c:ac:e4:a0:3c:d3:27:d3:7a:ce:08:68:03:16:f0:84:
d6:5b:84:5e:05:07:bb:36:cb:70:87:e5:68:51:6f:3d:03:91:
c2:24:35:8f:5c:f7:3d:f1:4d:4f:6e:28:11:82:6b:23:9a:be:
c3:c8:58:73:e6:03:aa:07:68:94:9a:f2:8f:8b:1e:90:10:69:
49:51:48:15:f2:34:be:66:4c:95:96:34:10:37:c3:d9:45:47:
7c:87:8d:45:1f:d0:7b:79:f2:42:b3:99:cd:26:e8:4e:a5:bc:
c7:66:e8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:54 2026 by rpki-client