Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: fqPgoCBZYyC/USbKinRL9XbyW8+iaRkwYq1g8uge8Cs=
Subject key identifier: 89:AC:D3:51:DE:DC:48:1A:34:9D:80:C2:FD:43:A9:61:C1:F0:CB:6D
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 019CAA5861A0B8CA0BDCD3F0047B676BD322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 0FB7
Signing time: Sun 01 Mar 2026 17:00:44 +0000
Manifest this update: Sun 01 Mar 2026 17:00:44 +0000
Manifest next update: Mon 02 Mar 2026 17:00:44 +0000
Files and hashes: 1: RtEJrYYYVSw3agdpZ8fIxDXTX1Y.roa (hash: cKYN0YkCJsDdPkx/HgK4R2mLQELTgIw1O/rAAl0yOQY=)
2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: vWZEtcElF/+Ud2Xj+4opbRugJhDc3j0qs/rdYR3kREI=)
3: vcurezLdovhZEJ_5__NOTZxZX0U.roa (hash: Ve+Xn7DMb8Yh8TeJ9TkE0GiZkvH6kTEGpcyw7nrpcMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:61:a0:b8:ca:0b:dc:d3:f0:04:7b:67:6b:d3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Mar 1 17:00:44 2026 GMT
Not After : Mar 2 17:00:44 2026 GMT
Subject: CN=89acd351dedc481a349d80c2fd43a961c1f0cb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:88:b5:8a:b2:6b:a9:92:24:0c:d2:1a:ef:
e1:bc:eb:7f:9f:ba:c0:2d:cf:6f:d2:04:2d:f5:9d:
0e:b1:cd:7a:3f:80:1c:75:49:8c:be:f4:a6:6a:30:
32:25:d5:0e:bf:5d:a3:8f:c0:73:eb:b9:fa:15:15:
70:52:90:2a:2d:b9:40:54:5f:99:4a:cd:4d:61:15:
c5:84:c9:a4:f6:e4:f7:d2:42:23:8c:c6:5c:8f:9d:
5d:60:6a:6b:2e:57:bb:8c:13:12:07:2e:90:6c:e3:
3b:45:29:d0:8d:d1:d7:19:e7:6e:c1:68:f0:02:14:
c5:21:1e:19:47:c7:d5:a6:f3:66:9b:49:37:ac:a9:
07:4d:c2:3c:04:39:ee:c7:eb:8a:91:d8:b5:67:a8:
fd:49:69:e9:f2:a5:fa:22:2e:3b:e7:7d:37:e8:05:
ea:28:6c:68:9c:b2:6e:50:ab:90:88:cc:db:66:e7:
86:d0:9f:5d:46:53:71:a4:e8:d8:10:a6:bf:13:ba:
24:4d:ed:17:32:fe:be:35:f7:ff:11:91:5e:d8:b9:
1d:62:11:e9:f0:a3:20:37:16:1d:79:51:bc:6a:81:
47:6d:26:2c:bd:b1:aa:4e:fd:41:d2:d4:d4:0d:f7:
50:4b:4b:fd:35:a7:3b:0c:1c:88:95:2b:23:5c:57:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AC:D3:51:DE:DC:48:1A:34:9D:80:C2:FD:43:A9:61:C1:F0:CB:6D
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:20:c3:40:8c:df:5c:b4:d2:63:2c:69:40:fc:66:e5:f9:5d:
b9:d0:89:a2:77:15:6b:f5:3f:97:2d:16:c3:c4:19:71:9b:81:
bc:53:74:8a:82:fb:c9:96:19:d3:e1:54:89:a9:36:ca:c9:0e:
5c:74:bc:c8:d5:56:bd:64:48:a6:2a:7a:18:7a:55:17:fb:1b:
03:c2:8c:ac:76:30:65:96:01:ea:da:99:d9:8b:38:69:5d:97:
ec:59:77:08:21:7c:b6:1a:97:8b:d2:37:57:d8:49:75:83:1f:
11:3e:ae:da:98:76:2a:d1:3b:3c:b9:c8:2e:a0:b1:7a:25:8c:
9f:a3:7d:bf:b1:3f:fd:37:ad:7f:f5:76:7d:89:6c:e7:e2:47:
15:51:bf:d8:be:b2:e1:4e:fb:15:08:48:5d:81:22:66:e5:ff:
66:d1:07:fc:52:c4:cb:e2:0c:95:df:07:e6:f4:5d:a6:d2:ff:
df:3a:c4:a1:3d:fa:78:ed:51:26:35:ca:60:12:e4:a4:68:d9:
73:a2:23:34:d8:88:0a:04:91:be:63:dd:80:d2:0c:83:06:13:
91:1b:96:84:e2:b0:fc:20:ef:7a:55:a9:a0:fc:39:e6:3b:36:
bd:74:d8:54:de:07:bc:5d:ff:52:c1:29:22:c0:bc:da:87:3e:
e0:27:3f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWGGguMoL3NPwBHtna9MiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMjNiMDZkNjBlYzNlNzZiNDkyMGIyYjY0MTQxZmEzYWY2
ZTVmYmIwHhcNMjYwMzAxMTcwMDQ0WhcNMjYwMzAyMTcwMDQ0WjAzMTEwLwYDVQQD
Eyg4OWFjZDM1MWRlZGM0ODFhMzQ5ZDgwYzJmZDQzYTk2MWMxZjBjYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZGItYqya6mSJAzSGu/hvOt/n7rA
Lc9v0gQt9Z0Osc16P4AcdUmMvvSmajAyJdUOv12jj8Bz67n6FRVwUpAqLblAVF+Z
Ss1NYRXFhMmk9uT30kIjjMZcj51dYGprLle7jBMSBy6QbOM7RSnQjdHXGeduwWjw
AhTFIR4ZR8fVpvNmm0k3rKkHTcI8BDnux+uKkdi1Z6j9SWnp8qX6Ii4753036AXq
KGxonLJuUKuQiMzbZueG0J9dRlNxpOjYEKa/E7okTe0XMv6+Nff/EZFe2LkdYhHp
8KMgNxYdeVG8aoFHbSYsvbGqTv1B0tTUDfdQS0v9Nac7DByIlSsjXFdMqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIms01He3EgaNJ2Awv1DqWHB8MttMB8GA1UdIwQY
MBaAFEsjsG1g7D52tJILK2QUH6Ovbl+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAt
NTRmNmU1MmY1NDdiLzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAtNTRmNmU1MmY1NDdi
LzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSDDQIzf
XLTSYyxpQPxm5fldudCJoncVa/U/ly0Ww8QZcZuBvFN0ioL7yZYZ0+FUiak2yskO
XHS8yNVWvWRIpip6GHpVF/sbA8KMrHYwZZYB6tqZ2Ys4aV2X7Fl3CCF8thqXi9I3
V9hJdYMfET6u2ph2KtE7PLnILqCxeiWMn6N9v7E//Tetf/V2fYls5+JHFVG/2L6y
4U77FQhIXYEiZuX/ZtEH/FLEy+IMld8H5vRdptL/3zrEoT36eO1RJjXKYBLkpGjZ
c6IjNNiICgSRvmPdgNIMgwYTkRuWhOKw/CDvelWpoPw55js2vXTYVN4HvF3/UsEp
IsC82oc+4Cc/VQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:12 2026 by rpki-client