Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
File: SYKxcZtP7HCLpmsper4NsI-tDh4.mft (raw, json)
Hash identifier: C8Bd2oFa6SR0WpbHT2fiI55TOj7Oqid1UeNqe7f2ykg=
Subject key identifier: 3F:C2:04:89:B7:57:5B:45:0A:EC:A9:67:0D:85:28:14:E7:A3:C5:95
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial: 019CA97D925ED9BDE391DBF96207836DF353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
Manifest number: 1617
Signing time: Sun 01 Mar 2026 13:01:44 +0000
Manifest this update: Sun 01 Mar 2026 13:01:44 +0000
Manifest next update: Mon 02 Mar 2026 13:01:44 +0000
Files and hashes: 1: OislEKggcD7E5vmHMkHdlxKY_PU.roa (hash: nRjbdFsuY+3HF6/aKivZHmFTEVBOZaLeegL6y1Mg1XI=)
2: SYKxcZtP7HCLpmsper4NsI-tDh4.crl (hash: scxCu5MeaXjoHOA5S8S9ktCiMBtHAifDiGuygj90S2Q=)
3: UEFaeg6w-_BLecRaFg0sOx9sg6M.roa (hash: 9IROvPnjTuXAULj8Qy8+zmh7VrKhPM1ptKS41BLzE2g=)
4: ys1jUiFYdAsS75N4hQGVBwuZ6Ug.roa (hash: 6CDsrf9c3/gJRcfyyOm7TzYrVAd5utDrsPb/K0wVSTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:92:5e:d9:bd:e3:91:db:f9:62:07:83:6d:f3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Validity
Not Before: Mar 1 13:01:44 2026 GMT
Not After : Mar 2 13:01:44 2026 GMT
Subject: CN=3fc20489b7575b450aeca9670d852814e7a3c595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fa:8a:21:31:4b:6f:f4:d0:6e:91:cb:90:23:
da:b2:a8:15:3a:b0:67:ec:60:fd:1d:a5:d8:e4:4a:
07:bd:fd:26:99:da:60:ca:3d:43:fc:70:96:e4:47:
e2:6e:29:d7:16:28:fc:21:b3:82:b6:64:ab:0f:50:
4f:a0:5d:68:45:50:55:3b:8c:27:b5:49:3f:71:38:
f2:a5:d1:84:ee:ca:c7:2b:47:f2:c6:7f:f3:84:89:
9d:85:b2:d1:d9:4e:59:e6:a7:f5:f1:3a:c7:d9:44:
5b:9c:bc:7a:12:d3:7a:29:3d:11:57:28:ad:1e:1c:
cb:72:06:4f:3b:25:8e:45:1d:1a:8e:44:07:02:18:
37:c8:42:be:a9:c2:0d:ba:e5:29:be:b6:2a:8e:a5:
db:79:72:43:9e:0c:b0:86:5c:b0:6e:03:61:d9:f2:
2a:0b:bd:9b:04:6c:39:41:05:e1:75:c4:77:b2:c8:
6d:6a:0c:dc:41:e9:35:c4:ea:6d:e7:83:64:6a:9c:
8c:8f:d0:48:cf:16:87:8f:74:0d:8f:8f:d7:4c:be:
8c:f5:09:01:f3:6a:55:ee:fa:b9:fb:62:a7:bd:cc:
78:52:46:4e:52:d4:ae:d0:c4:c1:aa:8e:e2:de:8d:
4c:60:f3:27:37:64:d1:6a:35:cf:a5:7b:7f:d9:ca:
c8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C2:04:89:B7:57:5B:45:0A:EC:A9:67:0D:85:28:14:E7:A3:C5:95
X509v3 Authority Key Identifier:
keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:33:aa:7a:5d:95:0d:63:70:b3:fc:77:60:44:cb:50:7a:ca:
ca:ac:b3:5b:c7:6c:9f:8f:53:36:1b:b4:c3:c9:a0:d8:98:47:
1a:97:c2:e9:54:55:0f:c6:d9:05:ee:5e:3d:12:41:3c:b7:73:
a2:5b:b9:86:20:53:8f:06:8c:d6:28:9a:eb:c1:db:df:ee:58:
77:7d:94:bf:8f:b2:6d:53:27:e6:8c:1f:5e:a9:ed:04:12:a4:
48:75:2a:5b:f7:3e:37:0b:71:65:9e:05:23:1e:d6:14:06:ae:
ce:31:71:25:15:e1:b7:89:cd:c9:00:43:62:a3:f0:e4:d1:e5:
e9:22:db:ce:32:4a:26:0e:50:42:d4:3d:a2:8b:a8:af:79:a0:
d7:27:2c:04:91:f7:5a:64:d4:2d:a8:b7:05:41:7a:95:21:02:
5c:99:71:42:d3:d7:c3:d4:44:2d:c5:ee:e1:2d:9a:2b:1d:c2:
9b:07:5f:6c:7e:27:00:d9:71:99:e4:b6:37:13:0f:07:54:48:
69:5a:a6:07:7f:61:17:b4:c3:e1:ee:d3:6d:b0:6a:e1:d6:9b:
63:79:95:e7:d6:b3:40:b6:1e:65:41:51:6d:8b:c7:ff:c2:01:
69:48:4a:80:ba:4a:b5:c1:64:da:51:51:f3:2d:d3:24:2d:8d:
6c:d1:de:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:28 2026 by rpki-client