Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
File: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json)
Hash identifier: b+nHOTLJEQcLiVPfbw375Poiza17Lw2agF4CceEPo/4=
Subject key identifier: 0B:D0:79:14:77:0F:D9:0E:A1:15:54:EA:4F:67:B6:9F:35:AC:DE:A3
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial: 019CA9EB4700A19C091F822FB2AAC1459948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
Manifest number: 11DD
Signing time: Sun 01 Mar 2026 15:01:34 +0000
Manifest this update: Sun 01 Mar 2026 15:01:34 +0000
Manifest next update: Mon 02 Mar 2026 15:01:34 +0000
Files and hashes: 1: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: vx1Z7pjxrnjeumCzIiOy/0sztU+Hxn6E0QLdWvxrAjI=)
2: apHXF-O4Ejo7yG2aEpQp8GLTcZs.roa (hash: a/Y5u9hrVgeYy/2XjMITJ3BNw9T29U+bdFNSfBZc2ak=)
3: zCOXAUBZXqisVY6lRfztNan2LPM.roa (hash: 7/x4omP0n6ejxfgW17vqQlbqviYR3EPl/2qYMEuPiKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:47:00:a1:9c:09:1f:82:2f:b2:aa:c1:45:99:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Validity
Not Before: Mar 1 15:01:34 2026 GMT
Not After : Mar 2 15:01:34 2026 GMT
Subject: CN=0bd07914770fd90ea11554ea4f67b69f35acdea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:a6:c8:9d:fc:40:76:c7:0e:cf:6d:2f:4a:
0e:a6:d5:5f:84:07:17:45:11:b8:5b:75:41:2b:40:
97:68:19:4f:c2:fa:f0:33:e3:85:7a:bf:84:a7:95:
aa:e1:00:cf:32:f9:22:da:b2:93:4b:dc:e7:a0:0e:
2b:a8:5c:c0:27:e2:c2:42:71:4b:c7:95:b4:f8:a2:
d5:f7:1b:ec:7a:74:c6:f2:0e:a1:fd:54:d6:6d:a0:
ff:ea:e4:17:e5:67:11:22:8b:1c:d5:02:d6:49:e1:
73:0a:98:5a:4d:00:b6:10:fb:e4:ed:21:8a:d3:ad:
a2:30:b8:24:2b:bc:80:d8:7f:1c:58:19:cb:a8:7d:
88:05:ba:ab:54:81:23:c3:a8:95:28:b5:91:fc:33:
f7:4c:38:e3:b4:ce:c2:79:bc:62:ec:85:a2:4c:46:
15:33:d6:34:a5:a3:a8:d3:72:05:d8:4f:b8:e4:a7:
a6:ed:62:64:f4:ad:54:2a:e0:f6:2f:fb:9f:d7:46:
c9:03:9e:dd:e5:e0:c9:65:e2:ca:b6:ad:00:15:47:
d7:7a:ce:a1:eb:eb:7e:34:61:02:41:e5:16:81:08:
02:13:f3:79:ec:0e:a5:a9:94:3c:87:3d:f1:b5:28:
d1:4d:2b:cc:00:90:15:40:2e:60:b5:a9:69:53:92:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D0:79:14:77:0F:D9:0E:A1:15:54:EA:4F:67:B6:9F:35:AC:DE:A3
X509v3 Authority Key Identifier:
keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ff:1a:1a:e8:df:eb:10:47:7d:32:4d:62:d0:5f:a0:aa:e4:
f0:1b:b7:79:2d:36:23:af:4d:47:7b:45:ea:49:08:7e:84:15:
3d:3d:19:f8:d3:04:9d:a8:62:16:9f:0a:a4:57:49:21:80:14:
85:f0:c3:5f:90:ad:ef:3f:aa:fb:75:aa:9f:99:9a:38:b1:f3:
f2:9b:2c:d7:f7:d9:30:93:8a:42:88:8a:8a:dc:22:17:79:f6:
0a:dd:e4:00:01:ba:96:51:ee:e9:a5:7a:b1:24:d8:23:65:0c:
1f:39:d3:5e:9c:f2:0b:4c:6b:86:0b:03:bf:2b:71:97:d3:4f:
8f:eb:b9:d6:a0:57:91:07:14:aa:1f:6a:dd:1f:b6:74:6c:c3:
8a:36:0c:f4:f1:da:43:fa:66:98:83:e2:59:42:0f:c9:58:68:
86:58:f6:70:73:0f:4d:08:e5:ee:0e:8d:88:95:5f:08:26:a1:
bf:9f:ee:54:5a:e2:d9:66:9a:7d:ae:b2:38:7c:75:ea:02:66:
00:dc:8e:d3:4b:14:b3:c2:f7:3e:71:1e:88:dd:4f:99:da:3e:
db:72:c3:6c:11:4d:c3:7b:90:c0:0e:eb:13:47:6b:db:9e:83:
43:ec:dc:a0:50:73:f8:ca:b8:23:54:5f:03:0a:f3:38:e5:02:
ab:23:25:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:54 2026 by rpki-client