Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: jG7vK6FRGXdU9ghXi4r9PdV6khFNVe7nOvJB7cWdqDI=
Subject key identifier: 3C:05:9E:56:69:12:52:B0:B7:2E:EB:96:CE:D4:C3:93:1A:51:3C:DB
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 01A0EA0928A3E181E8790AA16DA310C869AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 1A0C
Signing time: Mon 28 Sep 2026 22:01:03 +0000
Manifest this update: Mon 28 Sep 2026 22:01:03 +0000
Manifest next update: Tue 29 Sep 2026 22:01:03 +0000
Files and hashes: 1: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: yc1GzZUZZQ/VveRY8NdLFAm28yO9Hpxf11+tp32bBRw=)
2: VYoAIFinaQHxNkoLpaPUIWea3QQ.roa (hash: fC8G8UEbQdEhs80n+8gVQ40HDgx8OQKG34YhOp+AKow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:28:a3:e1:81:e8:79:0a:a1:6d:a3:10:c8:69:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Sep 28 22:01:03 2026 GMT
Not After : Sep 29 22:01:03 2026 GMT
Subject: CN=3c059e56691252b0b72eeb96ced4c3931a513cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0e:1d:8c:c5:4a:aa:36:4f:35:c3:cb:63:cd:
00:11:87:b5:d0:3c:31:38:7f:5b:c6:ef:4d:95:07:
c9:36:84:ec:4b:bf:a7:a3:d1:b7:f8:9f:8f:1c:8f:
82:39:60:3a:bc:6f:c9:61:7d:f1:ed:4e:1e:2f:75:
56:48:f1:0e:6c:8c:e9:05:11:5a:d2:aa:52:31:3d:
d2:b1:60:ab:cc:37:34:97:3a:5e:12:36:86:5d:48:
06:e4:a0:47:53:55:f1:be:39:bb:f2:20:c7:27:c6:
a0:f0:74:db:be:e7:13:64:32:07:ef:5e:c3:22:2f:
3b:04:bc:43:6d:ec:a1:55:5f:01:18:1d:8a:3b:e8:
82:9a:37:ef:c5:eb:65:fe:a9:e1:51:54:e4:51:6c:
6d:65:49:ca:0e:96:56:5e:43:f3:5d:c0:68:f5:00:
ba:b9:28:b4:b7:b2:e9:e8:a3:c8:87:ac:e1:0e:a2:
e2:74:a1:3c:c5:94:a3:76:eb:17:58:5a:80:b8:e9:
93:9d:21:3d:9c:2a:a0:ef:4b:2c:47:6e:42:62:f1:
99:11:c7:0f:11:d4:71:ff:77:0c:ab:61:68:7a:37:
c6:8c:98:12:69:06:19:02:aa:d8:99:ff:ed:6b:b4:
b6:31:26:ca:d5:e3:22:9f:8c:27:4e:b7:eb:3a:ea:
72:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:05:9E:56:69:12:52:B0:B7:2E:EB:96:CE:D4:C3:93:1A:51:3C:DB
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:24:c9:1e:3b:77:c0:bb:81:ed:61:bf:e6:15:f4:57:19:a8:
b8:a6:1a:12:a4:1c:2a:82:2c:6e:6f:d8:f2:f1:07:51:6d:8f:
be:a9:c7:9f:8b:02:a8:7c:25:81:61:88:4a:cb:3e:d7:4a:40:
97:39:91:e9:56:4b:db:b7:8c:87:40:3e:3f:4e:a4:a4:eb:d0:
49:92:26:4c:30:55:05:ed:06:08:2d:2e:c0:b0:78:35:0d:7a:
77:c5:45:49:f8:cd:fb:5c:f9:da:68:f9:e8:a7:bf:ec:53:9b:
12:28:bf:59:f0:8c:a7:6c:90:a5:4b:b3:26:30:95:7d:5a:09:
cc:d4:70:fc:4c:53:2a:ee:58:ce:1b:cc:db:79:7f:e0:e0:a2:
ab:07:d4:2a:e3:b4:da:1a:3b:18:07:5e:d3:f6:6f:13:e5:80:
1f:d0:f7:54:5e:57:99:e3:03:59:72:5f:a4:7d:21:b3:c0:b1:
1c:cb:19:af:99:cb:8b:56:f0:ed:d6:d9:4a:70:d5:35:9a:35:
ce:a4:55:47:76:a5:d9:f9:55:24:62:bd:df:d8:30:14:79:05:
b9:99:7b:a8:d0:b1:f8:00:ed:c5:a8:f4:01:6f:c1:10:62:6b:
a7:be:f5:75:e7:e2:f4:be:11:3c:f4:a3:a8:b5:00:5d:a8:11:
e0:c2:8d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:33:39 2026 by rpki-client