Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier: 5Cq/6XWJjU3Qc1mQhf6tTgLv14TeZsBrMpGIQRQRI8U=
Subject key identifier: A4:8A:FF:94:B5:C0:E9:FA:EF:66:C3:2A:9A:C0:98:30:EC:1D:F5:C1
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial: 019D9962C334364BA790ED553503BCFB0A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number: 0FA1
Signing time: Fri 17 Apr 2026 03:01:19 +0000
Manifest this update: Fri 17 Apr 2026 03:01:19 +0000
Manifest next update: Sat 18 Apr 2026 03:01:19 +0000
Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: Pf+ZDDwfleeq4EZZxPUFH2qFXjYniDz5kwmhSJw2FOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c3:34:36:4b:a7:90:ed:55:35:03:bc:fb:0a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Validity
Not Before: Apr 17 03:01:19 2026 GMT
Not After : Apr 18 03:01:19 2026 GMT
Subject: CN=a48aff94b5c0e9faef66c32a9ac09830ec1df5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:91:54:a8:06:47:37:f5:5e:bd:9c:16:4e:2a:
7b:2b:40:3f:13:c0:de:75:39:e9:9f:36:e8:8a:63:
9f:cd:35:83:65:6d:c3:ca:79:30:eb:42:dc:b3:e9:
af:72:e8:5e:bc:a9:1f:fb:ec:46:aa:9b:3e:c6:11:
87:88:47:a3:57:b8:56:ac:87:96:4d:6f:03:60:df:
ef:a4:ef:da:51:ba:2d:9c:71:e1:84:35:0d:5d:88:
1e:f5:9a:32:9e:8a:10:fc:c1:bd:41:09:f7:f2:bf:
f4:e5:10:eb:0e:0d:dd:bb:59:9d:2f:94:dd:9a:78:
2e:b4:6f:cd:61:b6:b8:7e:d6:88:66:9c:4d:a6:39:
e4:72:5d:cb:3e:bd:ed:d9:23:52:3d:ac:38:24:9f:
90:71:bf:31:2b:5b:aa:dc:ff:be:c1:ed:e5:4c:4c:
41:47:59:da:00:ba:b3:8e:fd:63:c6:ed:71:6f:2d:
92:cc:bf:6e:e0:05:05:65:9b:f5:06:59:46:e2:39:
7a:aa:36:94:1c:0b:95:e2:dd:6f:72:18:21:98:00:
07:78:9a:5f:2f:20:9f:d2:ed:fb:5e:bb:ae:1a:c1:
51:d6:67:84:11:dd:ef:e2:50:44:1f:d5:0b:00:34:
1b:c5:f5:1b:b0:69:68:af:cc:0f:3d:49:03:2a:8f:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8A:FF:94:B5:C0:E9:FA:EF:66:C3:2A:9A:C0:98:30:EC:1D:F5:C1
X509v3 Authority Key Identifier:
keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b4:22:6d:74:23:d4:0e:23:a1:16:52:88:24:0f:0e:94:91:
fa:24:77:18:65:7c:d9:24:77:58:78:6f:88:44:b4:2d:7e:c5:
b4:c0:fe:10:23:5c:81:e4:f0:59:7e:d0:f1:f6:53:88:46:7f:
59:26:99:5f:b3:58:92:9c:18:62:5a:69:43:13:a6:04:4c:5c:
cf:55:cb:2e:24:58:62:ca:78:89:9b:79:50:f9:45:4d:11:c3:
40:df:e8:c2:66:6d:e9:46:71:3f:71:58:86:1c:a4:18:1a:22:
c8:f7:77:02:ec:c2:d9:10:5c:e7:4d:73:d9:f5:3f:be:71:fd:
60:15:bb:11:f4:db:30:8e:90:f7:4d:fb:86:db:bc:a7:d1:13:
ca:91:69:de:46:3e:6d:cf:a7:c3:b8:38:ff:90:af:0f:c5:56:
63:4c:cc:0d:b4:e9:cd:a3:46:05:a4:d0:e2:f6:ba:76:11:0a:
86:ee:2d:d2:ea:90:12:bf:e5:2c:09:2c:fc:88:be:ec:2f:d9:
82:19:83:2d:ba:9d:c6:04:60:dc:ac:f9:61:af:63:53:39:ec:
25:21:91:35:ad:b8:94:be:3a:c9:05:39:1f:5f:5d:4b:73:f9:
16:00:7e:7d:ec:a2:b3:33:1c:4c:77:68:f1:a6:64:77:38:d9:
4d:99:86:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:10 2026 by rpki-client