Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: wDW1pYcfwo4LZAYM9UOW9oTfQWFoF30ucrMzlSeBx3w=
Subject key identifier: 7C:F6:1E:B9:15:B6:60:D1:95:B0:5D:C5:BB:CD:26:23:6F:63:E5:57
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 019F130A9D53CE8BD048DA201491AF518CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 1998
Signing time: Mon 29 Jun 2026 11:01:30 +0000
Manifest this update: Mon 29 Jun 2026 11:01:30 +0000
Manifest next update: Tue 30 Jun 2026 11:01:30 +0000
Files and hashes: 1: 1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa (hash: 2yNm3gZsn/uIFKiYLjVHUVr0sDTSowqLDiGRvdYsMoM=)
2: BpG8igZJv8h8cPkp6g_Gbs3F_SU.roa (hash: EZCW2Mw9lZcsL5iipH/n6h6UZOB/4+vnk665tkL9CRo=)
3: PwG6kgE4pgXJJkL8ugwSTM2yxbE.roa (hash: DDzmamajStjqmhcsDYxm8w9Zc5fmsm1zJsTmwujf+jw=)
4: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: qcEEggFxRJeI8pNmXJMfJAu1OzigGNb3DK0h0oJhoUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:0a:9d:53:ce:8b:d0:48:da:20:14:91:af:51:8c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Jun 29 11:01:30 2026 GMT
Not After : Jun 30 11:01:30 2026 GMT
Subject: CN=7cf61eb915b660d195b05dc5bbcd26236f63e557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:07:54:f7:75:5f:f4:b5:30:75:6a:19:b7:
7b:20:ac:5d:78:e9:81:83:b9:8a:07:f6:12:b1:5c:
0d:91:ed:2a:ed:40:13:6c:55:58:c5:63:07:93:cd:
39:d6:ec:bd:46:5d:90:75:64:07:b0:bd:2e:3c:2c:
5b:b3:60:1b:a5:88:57:e0:ac:cd:71:b1:c8:9c:25:
78:be:bd:93:68:40:f0:b6:3e:bd:a2:77:b7:f2:52:
c8:e3:c8:13:b2:a8:00:47:52:e1:ad:41:cb:4f:30:
9f:58:5e:3e:9e:34:cd:f4:56:20:6a:9a:00:45:44:
89:f9:02:61:fe:98:5c:05:85:52:bd:43:8e:02:95:
80:ec:e1:cf:46:a7:7f:4b:e6:25:62:00:dd:f9:60:
02:ee:de:fa:f2:09:79:e5:de:8d:15:1d:32:4d:62:
ba:b1:0b:de:e1:04:7b:95:13:c3:b4:c1:99:ba:02:
67:af:74:84:d2:67:f5:9b:4e:2e:a4:b8:fa:c6:15:
48:58:53:9c:38:1b:03:5a:c1:fe:ba:9d:d0:0b:d7:
eb:95:fa:99:85:5d:c5:4c:0f:c1:97:99:61:23:6c:
63:b3:e3:ab:90:b4:6e:8f:2c:01:8f:ff:53:4b:fa:
e6:74:f7:0d:70:5e:09:5e:a3:92:cc:80:80:e3:24:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F6:1E:B9:15:B6:60:D1:95:B0:5D:C5:BB:CD:26:23:6F:63:E5:57
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a3:9a:25:c2:84:62:ab:23:a5:03:ea:1f:84:06:22:68:99:
e7:85:dd:c1:ea:c7:10:4a:7f:56:90:06:95:03:54:16:24:8d:
49:2c:bc:60:b0:83:8d:1d:5b:27:5b:6e:ae:9c:0b:c8:39:2f:
b5:df:31:a4:54:d6:56:1d:65:4c:56:43:92:8c:76:f4:f3:3d:
38:80:9a:4f:63:cc:1c:9c:f2:71:fa:e4:e2:f5:1f:61:12:ec:
99:ab:51:68:56:4c:48:c5:4d:d8:eb:ac:00:79:3d:91:a5:1b:
8e:19:2f:2b:8f:98:37:05:26:bd:ca:0c:e3:1b:ce:74:78:74:
d0:02:eb:2f:7c:43:78:e4:ae:b9:b5:9f:0e:97:90:f6:d4:fe:
41:5b:e5:24:ad:f6:c9:0a:93:ba:ad:74:cd:af:87:d9:f1:92:
3e:63:21:3e:59:58:2e:3b:5b:5d:9c:dd:ea:04:28:20:fa:44:
72:11:92:31:66:10:d0:ec:98:02:65:51:43:44:d1:11:c9:7e:
cf:05:8e:8c:2c:de:56:ae:0e:cc:f4:95:62:fb:ba:4a:54:f8:
8d:c2:59:74:bb:31:0c:95:95:4d:ee:08:31:28:33:69:ec:ee:
ce:33:86:18:05:58:e8:fd:49:02:a5:b4:3d:94:f2:d2:41:12:
93:2d:6e:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8TCp1TzovQSNogFJGvUYzWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmVlMmIzOTcxMjM3N2I0YmZlYzllNjZhYzdlNmU5MDhl
ZmNlZWMwHhcNMjYwNjI5MTEwMTMwWhcNMjYwNjMwMTEwMTMwWjAzMTEwLwYDVQQD
Eyg3Y2Y2MWViOTE1YjY2MGQxOTViMDVkYzViYmNkMjYyMzZmNjNlNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslkHVPd1X/S1MHVqGbd7IKxdeOmB
g7mKB/YSsVwNke0q7UATbFVYxWMHk8051uy9Rl2QdWQHsL0uPCxbs2AbpYhX4KzN
cbHInCV4vr2TaEDwtj69one38lLI48gTsqgAR1LhrUHLTzCfWF4+njTN9FYgapoA
RUSJ+QJh/phcBYVSvUOOApWA7OHPRqd/S+YlYgDd+WAC7t768gl55d6NFR0yTWK6
sQve4QR7lRPDtMGZugJnr3SE0mf1m04upLj6xhVIWFOcOBsDWsH+up3QC9frlfqZ
hV3FTA/Bl5lhI2xjs+OrkLRujywBj/9TS/rmdPcNcF4JXqOSzICA4yS0pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz2HrkVtmDRlbBdxbvNJiNvY+VXMB8GA1UdIwQY
MBaAFLMu4rOXEjd7S/7J5mrH5ukI787sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMt
ZjAxNmNhNWRhMjE5LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMtZjAxNmNhNWRhMjE5
LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqOaJcKE
YqsjpQPqH4QGImiZ54XdwerHEEp/VpAGlQNUFiSNSSy8YLCDjR1bJ1turpwLyDkv
td8xpFTWVh1lTFZDkox29PM9OICaT2PMHJzycfrk4vUfYRLsmatRaFZMSMVN2Ous
AHk9kaUbjhkvK4+YNwUmvcoM4xvOdHh00ALrL3xDeOSuubWfDpeQ9tT+QVvlJK32
yQqTuq10za+H2fGSPmMhPllYLjtbXZzd6gQoIPpEchGSMWYQ0OyYAmVRQ0TREcl+
zwWOjCzeVq4OzPSVYvu6SlT4jcJZdLsxDJWVTe4IMSgzaezuzjOGGAVY6P1JAqW0
PZTy0kESky1uzQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 16:25:06 2026 by rpki-client