Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: Vdb8h6GJi1nxS8pap0U3wBfg98D86gnXpvcHHh7nOI8=
Subject key identifier: DE:F5:39:4F:6A:87:EF:4A:76:C4:56:04:B2:C5:34:B7:46:0A:AE:80
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 019D97E1B6F46C576A1EFF236BBA2418B099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 20:00:45 +0000
Manifest this update: Thu 16 Apr 2026 20:00:45 +0000
Manifest next update: Fri 17 Apr 2026 20:00:45 +0000
Files and hashes: 1: 9nMZrodBdsGgL23GxlelObATv60.roa (hash: rSWUYx/buhG+K0ScAxLaN5xf6/B7iGfzq+9e0Z2WfnQ=)
2: A3xkmt1D2tsjfBccS8FsgAFUnOQ.roa (hash: nIgl47uG67Ucbrg3x+vJSBwfTbEfiuOT6Ukb3huxJZs=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: i+N5sJXPtKFfmHQ6hWa6GefP+szJUnatsnnUEeMqspQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:b6:f4:6c:57:6a:1e:ff:23:6b:ba:24:18:b0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Apr 16 20:00:45 2026 GMT
Not After : Apr 17 20:00:45 2026 GMT
Subject: CN=def5394f6a87ef4a76c45604b2c534b7460aae80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:30:0b:49:db:4b:27:33:c0:37:9d:1d:be:
35:e3:35:d7:7a:7a:78:dc:2c:15:f7:8a:43:23:8f:
ab:1d:be:18:3c:fa:d0:ff:ed:75:23:2d:31:e3:27:
e6:cf:d5:5d:bc:dd:d6:15:20:4e:4c:da:56:f8:fb:
89:fc:24:e3:6c:00:d6:36:a0:4a:cf:0d:ae:e8:12:
94:85:e6:01:f8:29:52:57:6e:81:cd:0e:a6:a5:c6:
2c:45:03:c8:56:0b:d9:52:34:05:68:f3:79:a5:54:
43:13:70:e6:74:11:6c:d6:9e:c5:84:87:99:32:17:
c0:f3:e4:ea:92:0b:4f:ae:e2:06:3b:95:27:f0:7e:
90:d0:dd:2a:86:3f:b8:dc:24:7c:36:9e:60:02:7d:
15:0b:2d:0a:ce:09:ae:5a:ef:6b:13:ea:58:b4:ab:
be:bc:5e:57:d2:e6:c5:09:23:47:ee:88:d4:ec:a3:
b0:33:ad:60:aa:68:4f:04:c3:f1:96:c3:d5:23:49:
13:41:02:80:38:a7:df:92:a7:c1:3b:08:35:6d:b9:
3f:e4:a4:d1:59:13:67:10:3d:a7:e9:eb:58:a2:2e:
a6:77:26:13:c5:0d:52:d6:5f:23:16:25:3c:71:c7:
0e:88:f8:28:ee:94:af:0c:90:9d:c1:c4:e3:72:04:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F5:39:4F:6A:87:EF:4A:76:C4:56:04:B2:C5:34:B7:46:0A:AE:80
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2b:6f:2a:98:35:4a:ae:3d:9c:30:63:7d:73:de:32:f8:16:
66:2d:e8:77:d5:e2:5b:f6:85:60:5b:87:ce:80:48:40:02:04:
e7:56:cb:cf:f9:7c:67:36:89:cc:a8:57:a1:14:88:e6:47:53:
57:20:9a:16:b4:49:48:ce:9f:04:db:d2:71:a0:78:49:79:57:
7e:cb:d7:da:5b:eb:89:38:67:95:29:d0:b6:26:bb:d3:08:3b:
8d:7d:61:50:a2:a4:4e:05:17:00:0b:ed:87:e8:e9:0e:7c:f8:
d1:83:6f:62:d7:4e:19:72:f3:af:c9:db:1a:30:e6:c0:18:d5:
a2:c4:fa:d6:17:ab:87:f1:c0:01:3b:bf:ff:d5:6d:31:ed:3b:
ed:f9:16:a8:d7:a3:5b:88:f8:6d:84:51:de:7c:ea:b5:97:8f:
0a:53:69:78:52:cf:2b:27:2a:d7:ab:6a:02:d0:f4:69:07:c3:
33:dc:ac:d7:fc:06:87:f6:19:9f:1f:9b:ad:20:f7:f8:94:37:
b8:c4:1b:c5:9d:4d:43:e0:42:ff:c8:2a:0b:a9:44:18:45:09:
c6:8e:39:42:13:7e:1b:80:cb:5a:22:8c:5a:51:02:94:f0:fb:
04:ee:45:0d:10:fe:cd:48:a9:cd:2a:8d:2f:e7:c6:fd:4c:5e:
c1:03:b8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:14 2026 by rpki-client