Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: TozIXpzpsWA3rVoG6zhLF5bKZiSO+A0h3SQPAXrOMlY=
Subject key identifier: CA:B1:E7:BB:AC:9F:F2:A1:84:D5:20:5C:13:FB:28:8D:33:DE:F1:88
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 019EC1496EEDF14D7D494013E3E491F0DCB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 14:01:15 +0000
Manifest this update: Sat 13 Jun 2026 14:01:15 +0000
Manifest next update: Sun 14 Jun 2026 14:01:15 +0000
Files and hashes: 1: 9nMZrodBdsGgL23GxlelObATv60.roa (hash: rSWUYx/buhG+K0ScAxLaN5xf6/B7iGfzq+9e0Z2WfnQ=)
2: A3xkmt1D2tsjfBccS8FsgAFUnOQ.roa (hash: nIgl47uG67Ucbrg3x+vJSBwfTbEfiuOT6Ukb3huxJZs=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: uBeCApSrzW1vtIpvJH2mF2MAJfCa5BpgImS1JyA2MhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:6e:ed:f1:4d:7d:49:40:13:e3:e4:91:f0:dc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Jun 13 14:01:15 2026 GMT
Not After : Jun 14 14:01:15 2026 GMT
Subject: CN=cab1e7bbac9ff2a184d5205c13fb288d33def188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4e:87:65:06:80:b3:4d:b3:17:88:bf:8e:17:
ae:2d:24:cd:22:bc:b7:17:20:50:56:a2:7c:08:17:
02:56:f9:b3:ef:34:29:27:64:95:1c:fb:bb:dc:87:
51:c5:59:90:16:b7:b8:f9:54:a6:ac:19:37:b7:9c:
a3:28:36:87:8c:28:df:44:7d:e7:d5:af:d7:53:15:
a8:3d:a9:65:9e:7a:7a:09:54:a1:1a:dd:54:f3:d0:
77:96:84:c2:6c:67:22:34:27:cf:68:6d:82:de:c7:
d5:31:be:ac:b7:2b:ed:ce:b9:e1:d5:06:b4:be:bd:
ff:6f:91:ce:3e:d0:ba:98:bc:fe:fd:48:3c:98:8c:
f6:29:4e:0a:85:c6:80:69:84:cc:a9:b8:11:a0:44:
b9:00:fd:9e:68:20:f6:5d:7f:c6:b4:15:a6:e1:b9:
0c:46:29:bc:33:45:61:08:ec:16:d7:71:36:f1:a6:
e5:96:01:7f:05:f3:3c:d6:b9:7d:47:2a:37:6e:88:
3d:ed:0f:ee:e9:5e:68:3a:e8:02:d6:a7:52:d8:ef:
99:14:e4:49:c9:2f:7d:89:d6:f9:6d:27:a5:ea:18:
03:74:bf:5b:53:6a:f7:b6:24:a5:ff:1e:2b:b5:3e:
ac:72:dc:71:a5:fe:83:65:82:7c:33:09:36:50:c6:
ef:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B1:E7:BB:AC:9F:F2:A1:84:D5:20:5C:13:FB:28:8D:33:DE:F1:88
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6c:76:b6:75:04:29:e2:1a:08:ef:f8:0e:6f:75:60:06:d1:
4b:69:81:5b:ca:52:23:64:5d:94:16:8a:30:df:74:31:5b:3c:
cd:a6:c9:dc:98:37:ef:6c:fb:03:22:1c:e0:2e:c9:61:89:48:
c0:2e:0e:6d:af:2f:0a:b4:21:86:1b:cb:db:16:61:12:45:0e:
11:1e:81:f4:3c:bb:64:d3:31:79:cc:ac:fd:e1:68:79:00:78:
2a:44:54:45:c7:f6:dd:d4:1b:d1:f5:52:e9:d6:41:2f:03:36:
43:63:da:a6:0c:94:48:79:ca:57:6e:b4:5b:72:3f:39:03:54:
a1:b2:04:5d:d5:01:11:94:41:77:37:a2:63:d0:b8:a7:f2:10:
07:0f:ca:ec:6c:d3:40:0d:3f:13:88:b6:36:4e:50:87:3d:fc:
e2:bc:5c:51:c9:6b:22:c8:b6:57:ee:95:f6:ea:8a:25:59:96:
8e:91:ed:c5:de:8a:d9:b1:9c:ff:82:db:c0:1d:7d:59:4d:55:
6f:19:92:b9:bb:11:74:36:4d:37:86:5b:52:ae:da:18:42:88:
95:c3:ea:03:9d:83:7f:76:47:1f:c9:cb:75:53:cd:43:84:23:
77:fd:fa:4f:5c:ae:0c:96:5f:6f:2f:c0:2e:40:6e:c2:39:83:
55:3d:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:49 2026 by rpki-client