
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: YGmNtD80rey/A3/A1lwZWVWLLDcH1ijkGzlfsrYVbWU=
Subject key identifier: 1D:45:5C:68:26:35:9E:63:7B:D9:5A:19:F9:1E:D0:22:ED:3A:28:B1
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 01A182D0A5E30A8FD2D0785648AD9C00EBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 1ADB
Signing time: Wed 28 Oct 2026 14:01:14 +0000
Manifest this update: Wed 28 Oct 2026 14:01:14 +0000
Manifest next update: Thu 29 Oct 2026 14:01:14 +0000
Files and hashes: 1: 1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa (hash: 2yNm3gZsn/uIFKiYLjVHUVr0sDTSowqLDiGRvdYsMoM=)
2: BpG8igZJv8h8cPkp6g_Gbs3F_SU.roa (hash: EZCW2Mw9lZcsL5iipH/n6h6UZOB/4+vnk665tkL9CRo=)
3: PwG6kgE4pgXJJkL8ugwSTM2yxbE.roa (hash: DDzmamajStjqmhcsDYxm8w9Zc5fmsm1zJsTmwujf+jw=)
4: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: 8K5NxgdiopHD8XaQWD8PNwtB3cYvkS8f22IDaikJLJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:a5:e3:0a:8f:d2:d0:78:56:48:ad:9c:00:eb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Oct 28 14:01:14 2026 GMT
Not After : Oct 29 14:01:14 2026 GMT
Subject: CN=1d455c6826359e637bd95a19f91ed022ed3a28b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:69:26:48:58:9f:eb:49:96:14:1a:2a:7d:
7c:ab:b2:73:87:0d:a7:c5:16:ad:ed:b4:bd:60:a9:
da:9b:6d:fb:7a:5f:94:82:34:86:3f:29:0e:70:87:
13:e3:ed:9f:be:dc:23:86:31:d3:38:99:d9:32:15:
dc:47:05:ce:99:a9:70:e6:6c:08:4a:18:56:a7:d4:
b9:36:ca:58:16:22:56:14:7a:9a:73:57:88:f4:a0:
48:81:de:c2:51:36:97:fb:a4:eb:c6:2f:2c:65:6e:
b0:84:73:f5:b1:a9:95:65:7b:6f:58:04:3a:77:91:
f7:cf:3c:0b:d0:d4:dc:52:f0:d6:7b:61:09:b3:3c:
cf:2f:79:f7:38:ab:d4:00:5d:1c:8f:5e:52:7d:b1:
b8:8b:89:12:5b:2a:47:d0:90:0c:a6:4f:73:05:86:
5c:bf:17:c1:57:7c:ac:19:4f:64:83:fa:f4:e5:25:
e5:64:1b:ee:ec:a2:80:b5:53:e5:22:f5:65:de:c0:
8b:9f:f9:d3:67:cb:93:2c:97:04:51:e1:cf:7a:7b:
e4:cf:f9:8e:a0:a6:7f:95:a2:6b:7b:f1:58:14:62:
6f:09:23:39:3e:18:af:d1:d0:24:d8:87:43:8d:d4:
5d:04:c3:7b:0c:30:c6:24:e8:d9:d6:d4:42:fd:76:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:5C:68:26:35:9E:63:7B:D9:5A:19:F9:1E:D0:22:ED:3A:28:B1
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:10:ca:a4:a7:fa:7e:ee:3c:25:30:98:03:6a:b2:a0:cf:99:
e6:0d:e4:d7:e0:7d:ed:74:07:ab:8c:58:a6:4e:a4:27:97:90:
38:f8:84:69:f6:84:5e:8b:a8:c0:bb:52:d9:96:b1:13:8b:64:
8c:83:55:31:b8:a5:c8:42:6b:6b:56:5b:97:aa:c6:f8:5e:81:
15:c6:30:76:4d:b1:ff:df:de:98:c3:43:36:c1:42:63:f4:69:
5c:0f:c4:78:c9:9f:f2:bf:cf:24:aa:a9:cc:d9:3c:96:1d:dd:
ea:76:f1:41:be:79:36:8a:d0:fe:89:2f:6e:9a:d5:c7:df:c8:
ad:85:c6:4a:c3:5b:55:09:75:84:78:43:56:6b:33:3c:b1:7c:
f6:1b:2c:84:85:76:34:11:a7:ee:93:3a:f8:73:fd:46:2a:6e:
a4:fb:b9:9f:a3:98:df:97:98:20:72:2f:ac:8d:57:1e:c5:7e:
33:bc:7f:32:9c:35:f3:2d:74:83:30:35:58:66:65:cd:2f:8a:
6c:87:a8:f9:f0:df:f8:4d:31:e0:a9:db:a0:dd:e5:62:2a:cb:
3b:16:0a:76:3b:14:0c:a9:32:f8:bb:bc:7c:a5:0a:58:91:19:
23:7d:f6:54:ab:df:07:74:ec:50:b3:e6:36:5e:b1:d9:09:b8:
a0:f4:dd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:45:33 2026 by rpki-client