Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
File: syu38vqMQUxnGIvau_t2IVaTuoc.mft (raw, json)
Hash identifier: YqPRpo7DyZLuc+ZP/GQb6CThRL3AouqH6i9S7zFgl3w=
Subject key identifier: 19:90:51:4D:AD:7F:E1:A2:24:93:C7:38:57:63:8E:EE:B9:04:A1:F7
Authority key identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
Certificate issuer: /CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Certificate serial: 019CAEDA5102614F3CBF6DD60C04403F9698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
Manifest number: 0644
Signing time: Mon 02 Mar 2026 14:01:09 +0000
Manifest this update: Mon 02 Mar 2026 14:01:09 +0000
Manifest next update: Tue 03 Mar 2026 14:01:09 +0000
Files and hashes: 1: syu38vqMQUxnGIvau_t2IVaTuoc.crl (hash: 2tKwkPd8w/1gilNjr6AOCc/kG94OT7cLZl0KNyM8duQ=)
2: wJwV6ipRPUdCTP4fq4B5e44G-Bk.roa (hash: OuGJ2COZawhtaPzVWGfAkluTCMVpexyVap4Pk8L9hUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:51:02:61:4f:3c:bf:6d:d6:0c:04:40:3f:96:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Validity
Not Before: Mar 2 14:01:09 2026 GMT
Not After : Mar 3 14:01:09 2026 GMT
Subject: CN=1990514dad7fe1a22493c73857638eeeb904a1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:ee:9c:fe:ea:43:b9:1f:5c:1d:83:b8:bc:
1c:32:22:1c:fd:91:51:de:97:7b:fa:ad:b7:dc:a3:
7c:30:19:dc:6d:c3:e8:6e:e0:93:83:12:cc:03:c1:
c9:e4:71:d5:b2:d4:b0:3a:27:5c:50:c3:fb:be:2a:
17:6d:c2:31:a2:4e:48:28:70:f6:3e:27:dc:63:3c:
7f:ff:4b:f7:8e:32:5f:40:a5:a4:28:e4:6a:34:ba:
8d:66:d7:42:ea:a8:0f:23:d2:2a:23:cf:20:fe:19:
63:0c:f5:49:42:72:11:f5:1e:1f:9c:57:32:bc:a9:
39:13:fa:3e:7a:97:b4:07:60:ef:41:d4:a8:93:f6:
85:08:50:c3:8c:30:a6:54:a6:d2:25:38:f7:17:0c:
33:9e:76:e1:1f:a2:b9:bf:b7:df:fe:d2:39:1a:6c:
5e:be:48:06:59:59:a7:1c:06:d2:ef:a2:60:c5:11:
9b:77:a0:b3:a7:75:92:51:d1:4a:d5:b3:18:ae:00:
11:b6:1a:dd:c2:c8:65:c3:37:e0:a9:99:99:45:85:
e2:e8:39:dd:c6:c9:03:3d:68:9e:02:7c:03:42:b0:
f9:31:69:b1:3a:d0:d2:1f:12:0f:33:c8:9d:33:ff:
3c:12:af:58:30:6c:51:d9:81:c1:f8:8d:5c:67:d9:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:90:51:4D:AD:7F:E1:A2:24:93:C7:38:57:63:8E:EE:B9:04:A1:F7
X509v3 Authority Key Identifier:
keyid:B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:33:cf:3b:be:cd:b9:54:0f:e9:90:e9:a3:35:50:38:29:c6:
e1:4e:d8:30:35:29:6a:ed:79:fa:d4:21:4b:b8:70:98:21:2d:
64:f6:a3:fd:6a:bb:76:62:bb:84:1c:d9:f0:0e:7a:75:ce:d5:
6f:b6:fb:18:37:28:04:c7:e9:29:73:e7:86:f6:a9:6d:30:05:
53:11:58:76:55:0e:c5:a9:fb:1e:a9:7d:59:df:72:c7:eb:a2:
18:23:1d:c7:bf:e7:c4:32:f4:64:bc:72:63:b1:df:ff:46:82:
83:03:48:c8:b4:47:bb:6c:6f:d5:98:5f:a0:aa:a1:ab:29:03:
08:67:06:a0:7a:53:c7:ab:a5:c2:61:ad:a8:07:e9:51:9c:81:
5b:43:d9:4e:9f:cb:e7:82:64:45:9e:a6:07:29:8a:7a:4a:f9:
27:e6:0f:77:82:1a:2d:9e:a1:79:78:e1:39:b3:79:95:9a:4d:
89:a6:20:03:58:ea:eb:e6:fc:75:93:cc:46:78:5f:36:25:db:
3d:dc:9b:78:99:48:64:12:ad:1f:67:77:8a:0f:77:55:87:4e:
ae:d3:5d:7e:35:d2:e1:e1:ca:1c:4e:ea:05:66:cb:09:31:cb:
1a:62:27:da:74:e2:16:7b:d6:40:67:37:d5:e9:d7:8d:47:a4:
26:50:9d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:30:08 2026 by rpki-client