Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: /oQtpPnyumGC3a6HlV3CKm/GQx+PXUqd4aN3Eke9JBI=
Subject key identifier: 8E:20:04:1E:3F:53:4D:EC:70:E5:2B:A9:12:D7:A2:81:D2:B0:46:29
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 01A08D8D6294213853B0F3AD3ABF1C985691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 1A5C
Signing time: Thu 10 Sep 2026 23:00:48 +0000
Manifest this update: Thu 10 Sep 2026 23:00:48 +0000
Manifest next update: Fri 11 Sep 2026 23:00:48 +0000
Files and hashes: 1: 1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa (hash: 2yNm3gZsn/uIFKiYLjVHUVr0sDTSowqLDiGRvdYsMoM=)
2: BpG8igZJv8h8cPkp6g_Gbs3F_SU.roa (hash: EZCW2Mw9lZcsL5iipH/n6h6UZOB/4+vnk665tkL9CRo=)
3: PwG6kgE4pgXJJkL8ugwSTM2yxbE.roa (hash: DDzmamajStjqmhcsDYxm8w9Zc5fmsm1zJsTmwujf+jw=)
4: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: pnCDG8vDxMr+hZE/P/ZPy/DghnbXl9wGcR2zRm438Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:62:94:21:38:53:b0:f3:ad:3a:bf:1c:98:56:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Sep 10 23:00:48 2026 GMT
Not After : Sep 11 23:00:48 2026 GMT
Subject: CN=8e20041e3f534dec70e52ba912d7a281d2b04629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8d:7b:0f:51:ce:41:ae:10:a6:59:ae:a8:93:
a9:cc:58:4f:47:a0:98:c0:68:6d:46:fc:c1:4b:cd:
23:03:e4:bd:7a:52:6f:d9:a6:27:c0:ab:44:b4:da:
74:ae:81:99:33:72:7e:fe:ff:1c:b8:c4:16:89:05:
ff:d0:a7:54:17:74:30:9a:75:5b:29:4d:04:99:67:
3a:3a:0c:48:43:a7:7a:1e:95:bb:ac:18:71:0d:50:
86:63:eb:09:16:50:71:f7:d3:53:46:54:1b:f9:83:
41:ec:7b:22:9f:fa:dc:c2:da:d4:33:a5:98:1c:14:
b6:9e:70:e7:46:fb:30:d2:a1:dc:fa:4e:1e:7e:38:
37:b4:ec:e3:2e:28:e0:ad:fd:1e:ad:0a:94:78:dd:
92:01:b9:9a:0e:13:14:20:8f:d1:33:c1:39:6a:29:
8d:86:23:70:b7:9e:53:60:1f:10:4c:33:1a:0b:42:
c0:f0:a9:c6:8d:9f:3f:23:e4:9b:e8:78:1d:37:44:
66:f4:28:ae:c5:a6:d5:25:b7:e0:dc:13:e2:24:8a:
36:7a:23:1e:0d:d2:8f:28:7e:3c:44:d0:40:60:72:
05:ba:43:a6:12:ba:43:6b:04:66:15:8c:0d:9b:6d:
63:00:0b:1d:5c:6b:49:75:ae:3c:d7:1b:ec:87:fd:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:20:04:1E:3F:53:4D:EC:70:E5:2B:A9:12:D7:A2:81:D2:B0:46:29
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:20:7c:1a:9f:13:2f:96:30:98:0c:da:a4:5a:c2:f5:37:76:
a8:10:55:f0:ba:78:be:61:41:0c:a7:59:23:65:f8:97:89:a2:
1e:d1:7c:c6:3f:4c:6f:c5:a9:f5:da:c4:a4:b9:21:9e:4d:9d:
4c:cd:8e:1d:00:f6:2b:5f:8a:2a:00:5b:25:26:a7:da:79:ee:
75:a9:3b:58:1a:5d:bd:34:39:8d:8d:5a:f4:2d:63:c7:40:20:
ef:39:28:45:fa:e9:dc:c1:d5:3c:7f:23:cd:41:1e:bb:d1:44:
45:8d:b0:21:dc:d4:a4:f5:8f:f1:6f:6e:8f:6b:07:37:1e:c8:
c4:3f:bb:66:40:09:7e:70:d3:1e:32:7d:c7:52:a6:0b:16:0b:
95:79:af:aa:6e:b9:3f:a2:fb:0e:d7:d9:ec:f4:90:11:e3:0b:
a7:e5:83:fd:2b:e6:2c:19:32:94:ee:c7:e4:03:89:31:5f:2f:
42:19:b3:8e:99:58:b3:64:f9:a6:b3:35:7a:e6:a9:c1:fe:a3:
64:41:86:b9:6b:a3:1b:7e:22:17:2d:94:82:4e:89:05:e4:58:
6b:b1:60:89:c9:d1:62:f3:ce:5a:94:6f:c9:08:49:6d:b8:1c:
11:f0:6f:a2:e1:ae:91:63:25:ed:94:ce:7c:fb:fa:17:96:c7:
c3:c7:0a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:48:57 2026 by rpki-client