Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: ZRbJ8psmUVI/cQLSsF9eNIOAzpmDEd0PHeBkhMWZGOE=
Subject key identifier: 52:67:CD:64:A9:EB:6E:3C:19:49:94:FB:2D:F0:23:A6:8A:0E:44:98
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 01A0D26E23672647F0796AD86A6511F7B0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 08:00:28 +0000
Manifest this update: Thu 24 Sep 2026 08:00:28 +0000
Manifest next update: Fri 25 Sep 2026 08:00:28 +0000
Files and hashes: 1: 9nMZrodBdsGgL23GxlelObATv60.roa (hash: rSWUYx/buhG+K0ScAxLaN5xf6/B7iGfzq+9e0Z2WfnQ=)
2: A3xkmt1D2tsjfBccS8FsgAFUnOQ.roa (hash: nIgl47uG67Ucbrg3x+vJSBwfTbEfiuOT6Ukb3huxJZs=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: J38+FJLJcWkOO6ISxCALhm65wiVSaaVQYiESu3YIejY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:23:67:26:47:f0:79:6a:d8:6a:65:11:f7:b0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Sep 24 08:00:28 2026 GMT
Not After : Sep 25 08:00:28 2026 GMT
Subject: CN=5267cd64a9eb6e3c194994fb2df023a68a0e4498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:18:c6:cf:47:8f:cd:a9:ce:8e:98:2a:0b:
25:21:e8:5c:10:57:0c:a4:b7:52:1d:ad:b8:3e:a9:
f7:78:53:70:0e:bb:01:41:4e:d6:9a:2c:76:c4:cb:
17:0e:33:a5:0c:d2:f2:da:d7:54:96:06:d0:21:67:
c3:2d:a6:81:d9:4e:e5:97:52:65:6f:4d:74:bb:77:
18:75:76:88:0f:13:e2:41:f0:00:30:91:eb:41:e9:
9e:6d:ae:96:a5:a2:8a:1e:3a:90:fb:1c:87:6a:10:
55:10:44:b5:7f:b7:c0:a4:e7:79:1b:75:bf:ff:39:
db:a7:c7:bb:2c:c2:d8:4a:b1:7f:c0:42:e4:60:3a:
a4:67:01:a3:03:11:88:c0:c0:bb:83:c8:84:eb:e2:
2d:c6:d6:2d:6f:93:13:c1:84:b0:e8:5e:77:4b:22:
9b:99:aa:28:5d:ff:94:b3:be:69:9c:ca:86:ed:c9:
d1:ef:ce:df:0d:43:65:bb:76:63:45:c6:ce:d8:0e:
2b:ad:af:f7:d0:92:d5:b5:51:29:ce:2b:fb:ba:d0:
f7:8b:64:e7:d0:fd:49:b5:3f:ca:bf:29:f7:b8:1c:
65:16:e4:ae:02:56:09:50:ee:2e:05:21:92:9e:79:
d2:d2:24:b9:0f:e5:bf:9a:ff:fe:27:58:3d:25:db:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:67:CD:64:A9:EB:6E:3C:19:49:94:FB:2D:F0:23:A6:8A:0E:44:98
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:68:16:4d:66:db:36:10:80:75:18:f8:c5:a8:6a:2c:7d:40:
5f:59:84:90:da:14:58:bd:68:fa:85:ed:67:52:57:79:29:09:
d1:ab:88:b0:1f:66:17:93:20:04:db:6f:e9:49:db:54:a3:20:
71:58:59:8b:42:40:d9:9c:43:01:ec:53:a8:8a:9c:fa:f8:7f:
30:fa:26:b7:de:b4:e0:5e:2d:87:11:dc:bb:a3:61:9d:05:6e:
16:0b:01:0c:6f:71:b3:aa:27:fd:1c:77:5b:f4:7f:e0:00:09:
e1:cb:3c:61:87:79:9e:a9:98:6b:67:d6:96:97:fb:c2:21:59:
88:51:96:a6:ad:54:f3:68:e8:8b:76:3c:c8:fa:2e:48:e6:19:
7a:3e:59:5d:4b:fa:c2:90:6d:f4:ee:38:ef:e2:b0:1a:80:18:
40:d3:e3:cf:52:82:2a:19:bd:56:f4:36:a8:7a:f1:21:2d:af:
df:40:1b:10:6a:1c:cf:5f:1e:5a:5a:9b:89:ba:9c:cb:79:58:
08:02:d0:e2:79:a7:61:40:d1:87:29:ed:70:38:38:25:91:15:
90:54:f2:a3:3b:72:a5:45:c4:43:1b:7c:22:ea:cb:52:ac:4a:
20:01:cf:46:b3:a3:3c:25:1c:69:cc:3d:66:c6:95:2f:df:9b:
ad:e0:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:46:15 2026 by rpki-client