Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier: cm81qkmaWXm4JVR28n20JsUQJ4A0+s5P2WbRfCLFTZk=
Subject key identifier: E4:3F:50:12:E9:3C:0C:47:15:72:B8:BA:C6:8B:84:A6:A6:28:7F:94
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial: 019CAA21457BD29AED870A40148987EBC97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number: 0423
Signing time: Sun 01 Mar 2026 16:00:33 +0000
Manifest this update: Sun 01 Mar 2026 16:00:33 +0000
Manifest next update: Mon 02 Mar 2026 16:00:33 +0000
Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: ugEJ+sDUokfe2sOA8ZcZPNOny1vOq4vzdiqXriPfHAs=)
2: zqYVRlTgvHpJDmnzblzgqUd1qtQ.roa (hash: e8da42eEgoMlNnpHHSa7Q7x96Sq3pNxhBs6tD28L410=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:45:7b:d2:9a:ed:87:0a:40:14:89:87:eb:c9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
Validity
Not Before: Mar 1 16:00:33 2026 GMT
Not After : Mar 2 16:00:33 2026 GMT
Subject: CN=e43f5012e93c0c471572b8bac68b84a6a6287f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:3a:06:b0:b4:60:2d:e3:4e:4a:73:70:1a:
c3:64:0b:98:2d:61:dc:c3:f8:9d:9a:3f:c2:4e:e8:
98:19:02:89:a9:0e:a0:2d:d1:6a:fe:58:6d:b1:61:
e2:49:42:dc:db:33:5d:04:a4:0d:0d:11:71:70:81:
cf:5f:1e:8b:62:dc:99:c6:fc:3e:0f:78:d6:1c:2f:
da:6e:4c:ca:81:92:15:fb:56:5c:0a:6c:17:6e:9e:
e7:43:2b:7a:91:c5:ef:97:c2:d2:51:f8:48:50:b3:
e4:ae:5d:ab:ac:e9:32:34:c0:cc:0a:94:e1:df:b1:
dd:48:26:ce:f4:9a:d6:5c:b2:0c:ac:c8:bd:88:ac:
69:74:2d:9a:ec:22:26:9d:7b:86:9e:7f:2b:dc:9f:
10:e0:ba:27:5a:4d:95:e9:1e:29:09:03:1b:48:12:
af:fe:79:f7:3f:4e:47:93:4f:79:df:8d:fa:43:6c:
61:76:79:0d:ab:25:ad:8f:21:ed:1a:5b:e9:a2:8b:
c0:ec:a0:7c:c1:72:dc:a0:a4:ac:80:11:2d:b9:da:
02:01:63:ee:50:10:bd:74:7d:c6:62:a2:76:ed:a2:
b8:35:9a:63:db:88:ca:bb:be:f1:4f:21:80:19:91:
c6:9c:97:a3:20:31:fd:54:81:e9:e0:7b:ea:3f:90:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3F:50:12:E9:3C:0C:47:15:72:B8:BA:C6:8B:84:A6:A6:28:7F:94
X509v3 Authority Key Identifier:
keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1f:9b:ba:4b:21:d2:b5:6d:d8:2e:bc:21:be:d7:81:fc:0e:
1f:e8:09:6a:d8:ed:03:d6:21:9a:ef:6b:47:b4:04:0c:80:9e:
7f:5d:28:39:4e:bc:4b:fe:13:0d:04:df:b8:ad:c5:bb:ed:01:
86:cc:61:fa:a4:1c:8f:9b:c5:8c:1a:8c:36:e0:50:49:5f:0a:
1d:58:10:45:e9:cd:05:33:08:d8:2d:86:c3:fb:5d:aa:3c:55:
75:2d:b7:44:c8:ee:d0:49:99:2a:e4:23:c6:37:52:a9:a9:6f:
18:7d:7b:27:32:fd:aa:cf:ad:aa:46:b1:8a:26:f2:c7:d7:7d:
72:dd:4e:af:07:a1:24:4b:89:95:82:41:47:3b:17:dc:c4:7f:
bc:32:30:63:1b:7e:2c:d1:2c:d9:6f:60:b9:8d:a9:d7:df:ab:
4e:03:cb:da:ca:d2:a1:91:a8:25:aa:4b:44:85:11:00:fa:a7:
a1:dd:88:3b:19:02:b9:86:58:c5:bd:0b:fa:18:09:50:b0:a3:
6a:19:ac:1e:5b:09:f1:a5:97:41:c0:7b:6f:be:cf:b8:98:78:
2d:b8:06:e1:d7:a4:65:28:f3:41:c8:13:30:5b:4a:b6:90:3e:
be:04:95:c2:d9:51:5f:ee:72:47:2d:62:d3:b5:cf:94:b7:81:
d2:6d:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:02 2026 by rpki-client