Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: m9BOTRthRMXRNJKU6GRMPhDEmTHCd1tlrdvVN/ryhCQ=
Subject key identifier: AA:AF:80:48:C9:2A:2D:ED:E4:9B:E6:81:A7:CD:A9:26:82:94:6D:DE
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 019CAA589B5559A34BEEFCC30456A2BBE4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:00:59 +0000
Manifest this update: Sun 01 Mar 2026 17:00:59 +0000
Manifest next update: Mon 02 Mar 2026 17:00:59 +0000
Files and hashes: 1: 9nMZrodBdsGgL23GxlelObATv60.roa (hash: rSWUYx/buhG+K0ScAxLaN5xf6/B7iGfzq+9e0Z2WfnQ=)
2: A3xkmt1D2tsjfBccS8FsgAFUnOQ.roa (hash: nIgl47uG67Ucbrg3x+vJSBwfTbEfiuOT6Ukb3huxJZs=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: g7kPfrlNE8DjzjsPKHcuSrVfwnNASlTVzMFrt1ohIGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9b:55:59:a3:4b:ee:fc:c3:04:56:a2:bb:e4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Mar 1 17:00:59 2026 GMT
Not After : Mar 2 17:00:59 2026 GMT
Subject: CN=aaaf8048c92a2dede49be681a7cda92682946dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:b0:8e:d0:06:c4:93:ef:24:70:69:35:f9:
07:1d:56:3c:99:5f:12:f6:ba:39:e6:f2:69:77:66:
c5:1f:f8:b6:22:44:73:82:3f:a3:45:95:b4:74:2b:
b0:e3:7b:c1:ad:9e:ad:97:45:5f:95:f3:7c:ee:f0:
4b:a6:d9:18:9f:7c:5b:bb:4c:ff:15:73:85:29:e0:
c8:f7:67:09:5a:1b:3a:d5:81:21:5b:49:a5:d3:47:
4d:7a:77:04:89:d7:1e:4c:e2:5e:bf:b5:e4:51:aa:
9d:2a:16:8d:a0:93:61:aa:0b:d1:10:88:a6:31:6e:
a7:4e:a7:f3:a5:e4:09:ba:61:f5:26:2e:7d:b0:36:
ac:8b:d6:6c:2b:12:1f:bb:3b:ae:28:1e:8d:3a:80:
2b:97:5b:0e:e9:f9:c0:b6:61:93:d7:c7:68:c3:81:
c6:f0:8e:a0:23:bc:24:76:00:57:8c:32:52:8b:5a:
0f:d4:d2:a0:18:bf:cb:0c:3f:4e:81:17:50:dc:89:
7b:fa:10:8d:ca:5d:ae:13:f1:d6:64:c6:7b:51:f3:
c8:29:6f:a6:94:84:88:78:a2:b0:26:f1:7c:3a:b5:
2a:12:55:1a:bd:6b:81:43:9e:78:b9:f9:94:a7:24:
f2:7a:c3:5a:ea:09:e6:86:6c:71:c1:91:9d:5e:f6:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AF:80:48:C9:2A:2D:ED:E4:9B:E6:81:A7:CD:A9:26:82:94:6D:DE
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:90:74:ea:ca:e7:fc:51:dc:cf:d1:0f:ae:71:93:c2:d5:d3:
a7:b5:4f:a3:5a:48:3c:99:8b:6f:37:ec:44:9e:ac:c2:ff:ba:
a0:49:9f:32:f0:40:24:da:b0:82:0b:c1:80:bc:2e:94:7b:fb:
03:cf:5f:09:e7:1b:e4:2b:a7:84:f5:09:98:6a:bb:c9:9c:56:
6c:c8:71:17:01:b7:1d:b7:7c:6b:4c:2d:22:2f:98:5d:b0:c4:
9b:ee:34:2e:30:84:81:37:8f:a8:f8:e9:bf:8c:93:86:97:e4:
fe:f2:49:e2:42:60:fb:1b:eb:9e:93:42:cf:8f:18:2b:ff:68:
86:68:6b:54:ab:f4:12:89:0d:2e:60:84:d3:f6:ed:31:43:dd:
ce:4a:06:8d:cb:be:dd:91:18:0f:3f:3c:72:90:8e:b4:c1:d0:
56:fc:3b:33:12:e2:79:91:c1:49:96:84:95:4e:b8:62:31:62:
36:38:85:c6:ed:e5:70:9b:45:a8:f3:1d:0a:dc:c8:e1:f1:5e:
ae:21:e6:b4:83:a1:34:b0:fe:6a:81:51:f0:ca:f6:51:11:1b:
d7:f2:ee:1c:ca:af:8b:47:9f:ab:1c:56:3f:71:19:a0:b4:f0:
5c:83:29:df:75:ec:52:31:55:b6:d3:a1:1e:37:17:1c:25:5b:
27:f3:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:29 2026 by rpki-client