Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File: syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier: yOFiMVjGdizX7js7mOP4RODIBi5FVbWVOWWynNFU9G0=
Subject key identifier: 8B:35:D5:DB:62:26:42:4F:40:D1:9B:8B:6E:12:22:D4:96:F3:57:B8
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 019CAB6BD290647396C8FB4F8C5CD73CEAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number: 159A
Signing time: Sun 01 Mar 2026 22:01:35 +0000
Manifest this update: Sun 01 Mar 2026 22:01:35 +0000
Manifest next update: Mon 02 Mar 2026 22:01:35 +0000
Files and hashes: 1: WMztSrM9WH6_B2jYyND7vogeoak.roa (hash: qkZXV6hlhG+/bjTk0s5ZCuj7+/Exx9l0vry2uFfuJGs=)
2: o8B0PAfalqfvGUk59igvX166aWg.roa (hash: kw1L/i09wIPhjO8Z5uMcPMhKkC329A5E4T69tV/r0hg=)
3: s9k0K6aJjOStyADPW-j4DrCiTzQ.roa (hash: aKe5eq+hv5FKwLnkRuiYsTzEG/OXN64m5QzBhcI3+lU=)
4: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: HaEJTjZIL9Ovn7Za3125aIVzQa1hD2MlswdDmMBQ42U=)
5: w3DCowazjgMi9gjwGAJIhM5qJJs.roa (hash: lA7zts8IbAcCFB2NtgjPdkbP+GYnfp5CJxUEtKeYrhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d2:90:64:73:96:c8:fb:4f:8c:5c:d7:3c:ea:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Mar 1 22:01:35 2026 GMT
Not After : Mar 2 22:01:35 2026 GMT
Subject: CN=8b35d5db6226424f40d19b8b6e1222d496f357b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:3d:04:7f:e4:be:ff:18:85:95:35:95:c8:
9d:58:fc:ce:f7:79:53:ce:e6:55:4c:d0:e5:9c:eb:
b0:d0:50:14:e3:89:ca:51:88:6d:76:98:38:f1:22:
46:73:d2:15:04:be:a0:16:db:ae:8c:2d:79:34:57:
19:09:59:56:26:b0:88:4a:a5:58:22:d4:9b:62:84:
3d:bb:bb:c6:8f:d8:f3:05:df:2d:8e:e4:41:5d:81:
24:4a:a6:be:47:93:82:00:ba:63:26:4c:e4:c6:74:
cd:2c:f7:4f:ea:25:63:d6:88:7f:4b:7a:a8:0a:94:
3a:fb:0a:1b:c9:dc:0b:cb:07:bd:be:e8:7f:d8:b0:
66:ea:84:37:c4:56:30:d6:77:9a:e3:a5:c5:dd:a4:
32:44:fa:33:9f:ce:2f:c6:d8:c5:c9:70:53:5e:14:
29:9e:8a:fa:2e:cb:8e:74:35:45:d2:c9:aa:5e:3c:
c5:a3:31:d7:78:f1:c5:bf:1e:4f:89:aa:a5:ed:94:
b7:c1:cd:5d:68:40:75:67:84:8a:54:70:dd:81:e1:
0b:e6:2c:51:58:06:10:90:85:a2:fb:1d:ae:da:c3:
a4:a5:a8:1d:4f:f4:b3:b9:bd:c4:3e:9e:9b:97:e0:
5c:a8:00:4b:8f:4a:e1:7f:19:9d:b7:df:5d:cc:6a:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:D5:DB:62:26:42:4F:40:D1:9B:8B:6E:12:22:D4:96:F3:57:B8
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e7:10:38:1d:37:d2:cc:2f:04:6e:bf:bb:ef:5d:1b:11:cf:
6a:31:ec:3f:d6:26:60:09:19:42:76:b3:e4:b2:32:ef:26:14:
ec:1b:53:43:b9:23:3a:e1:06:33:a7:96:01:89:20:5f:d9:3c:
77:30:75:b4:3c:e6:38:1b:80:ee:53:8f:bf:45:13:4a:aa:1b:
c2:d9:70:aa:27:88:d5:dc:4d:2c:e1:fb:5a:17:f1:eb:11:9c:
03:04:c1:89:9d:e2:36:05:80:da:8a:90:95:72:bc:90:0b:17:
96:40:10:94:f2:a3:d1:ba:79:57:62:8c:04:50:c9:69:b0:20:
f0:90:11:44:0c:bc:db:1d:a6:52:1d:38:7a:df:2e:a6:93:dc:
a6:1d:f5:e6:af:5b:7c:20:6a:6f:f3:c8:ee:91:ac:bd:35:69:
e1:d5:0e:83:64:71:c0:b1:9f:48:67:af:4a:cc:89:eb:65:e6:
ca:8f:ae:b1:cd:44:97:89:f0:46:97:b9:7c:8e:05:ad:6d:cf:
40:6b:2e:5e:e4:7c:ad:b9:99:d3:3d:f6:77:47:30:e3:ad:7d:
2e:72:1c:55:89:92:5a:63:6f:de:f5:ba:ab:47:96:8d:00:c3:
e2:d3:22:f8:16:cc:c6:67:67:e6:f2:9b:d7:a1:88:90:5b:b6:
cd:5e:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:58 2026 by rpki-client