Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: 6tKbKYenT6JsL2kYHjMgsLGiHnDUhJBLidK+g5Bhz5M=
Subject key identifier: B9:78:84:0E:32:B6:09:A2:C9:33:E2:B6:64:21:A4:A4:C1:53:7C:45
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 019D99D0E7662FE0F4698D693740525B9245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 1033
Signing time: Fri 17 Apr 2026 05:01:37 +0000
Manifest this update: Fri 17 Apr 2026 05:01:37 +0000
Manifest next update: Sat 18 Apr 2026 05:01:37 +0000
Files and hashes: 1: RtEJrYYYVSw3agdpZ8fIxDXTX1Y.roa (hash: cKYN0YkCJsDdPkx/HgK4R2mLQELTgIw1O/rAAl0yOQY=)
2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: mCVV6IMCDIRJWvJYnBkcrEUfYhg4DXDkO7NwV80j+HE=)
3: vcurezLdovhZEJ_5__NOTZxZX0U.roa (hash: Ve+Xn7DMb8Yh8TeJ9TkE0GiZkvH6kTEGpcyw7nrpcMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e7:66:2f:e0:f4:69:8d:69:37:40:52:5b:92:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Apr 17 05:01:37 2026 GMT
Not After : Apr 18 05:01:37 2026 GMT
Subject: CN=b978840e32b609a2c933e2b66421a4a4c1537c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:ad:bf:f8:77:6f:7b:eb:af:60:6f:15:58:
ff:74:b1:4c:72:19:90:56:a0:3f:8b:85:b3:8a:71:
9c:35:f7:cc:d3:60:0c:6f:d5:15:35:69:12:ed:81:
1b:ca:30:65:19:b3:a0:57:85:b1:87:29:4b:f8:d3:
74:07:7e:90:7c:5c:cb:80:87:98:f3:fc:5f:a7:f3:
ad:32:86:42:3b:78:52:1e:9e:b0:aa:97:1a:a6:d0:
b7:08:4b:27:a0:c5:aa:f2:5b:b9:81:c4:89:20:c7:
aa:c3:e3:54:dc:45:1b:7e:ef:6e:05:8b:8b:38:e6:
08:3e:36:a3:50:49:b4:99:c1:31:91:40:3d:61:00:
fc:ca:66:33:55:ce:44:8f:be:a4:0c:6d:81:8f:2c:
45:4e:fd:4a:a0:b7:b6:89:b5:2c:51:b3:d9:d5:99:
c8:e1:0b:cb:d7:99:17:56:a2:d2:67:2a:99:33:2c:
d5:20:cd:66:d7:99:a8:a2:f2:30:ef:c9:b4:b9:93:
95:c4:dc:f5:b6:1a:3c:16:07:8d:1b:04:30:ea:a5:
18:ba:40:d1:5d:1a:1d:d9:4d:c3:5c:bb:0c:e3:f7:
05:3b:e2:cf:b3:21:59:fc:1f:5b:60:87:49:a1:0a:
cf:62:98:35:50:5f:04:e3:1e:8a:5f:19:48:ff:15:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:78:84:0E:32:B6:09:A2:C9:33:E2:B6:64:21:A4:A4:C1:53:7C:45
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:df:cc:97:11:ae:84:a4:f2:41:71:e6:f3:5e:59:b2:60:6b:
cc:36:c8:c4:71:71:b9:4c:86:2e:97:73:b4:6e:93:10:b9:63:
76:f7:84:0c:78:47:66:e9:68:ac:a7:4c:65:44:0c:59:93:99:
2b:af:a0:7d:d7:13:ad:15:7a:c5:c0:9b:bc:ea:42:ef:81:b4:
ab:cb:f8:42:bb:7b:ab:75:88:a7:fa:52:64:0b:42:a2:e7:a2:
fd:2b:67:91:77:db:5a:4d:25:45:f8:cd:3d:33:67:cc:69:5a:
a6:5d:6f:4d:66:b9:86:f7:08:9e:a7:4e:38:1f:18:c1:98:cc:
8d:0a:11:ac:4c:64:e2:56:a2:3b:03:b5:45:55:49:a0:db:2e:
6d:5a:56:2f:95:f9:13:d0:f4:df:1e:79:33:cb:82:38:b8:97:
65:12:d7:0d:c6:0d:47:82:ff:99:e9:6e:ab:4d:5c:ff:b6:af:
99:d8:9b:4b:11:5c:a2:8a:81:f3:d7:fd:08:df:46:e4:38:e0:
c2:07:7f:c0:12:11:04:43:5d:9b:f7:a9:83:dd:11:5c:21:29:
42:81:23:45:2b:5b:5e:9d:72:77:a4:85:f2:87:20:a0:03:59:
b3:27:a8:ce:59:ff:e0:86:93:1e:4f:8f:af:02:cf:bb:69:a2:
86:94:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:13 2026 by rpki-client