Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: Bo8+jw+7U1L0eCdHyw4IYcz19aHEgTi15jLoK0QjzXI=
Subject key identifier: 6B:14:D0:97:FE:3C:62:68:C6:13:E5:E5:40:AF:34:40:C8:FB:7C:BF
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 019D37F6FBE139D6B43F0257435D127DF8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 18A2
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: 1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa (hash: 2yNm3gZsn/uIFKiYLjVHUVr0sDTSowqLDiGRvdYsMoM=)
2: BpG8igZJv8h8cPkp6g_Gbs3F_SU.roa (hash: EZCW2Mw9lZcsL5iipH/n6h6UZOB/4+vnk665tkL9CRo=)
3: PwG6kgE4pgXJJkL8ugwSTM2yxbE.roa (hash: DDzmamajStjqmhcsDYxm8w9Zc5fmsm1zJsTmwujf+jw=)
4: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: ugxh0Z04G8EQw8KVUnbmi6cjkHBM289ybfKiH6mmOUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fb:e1:39:d6:b4:3f:02:57:43:5d:12:7d:f8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=6b14d097fe3c6268c613e5e540af3440c8fb7cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:30:32:5d:5a:26:97:eb:88:d0:98:64:b7:d7:
66:82:3a:4c:21:04:5d:6a:7b:5e:db:97:62:1f:47:
f0:47:7b:df:16:03:22:71:4a:21:3f:36:54:06:f7:
96:24:36:e8:84:18:0c:69:ec:8e:f2:e0:8d:b4:ff:
4b:50:1a:93:65:14:2b:18:97:ce:23:db:09:e2:60:
8f:f8:b3:71:08:a2:d1:6a:3e:43:7f:b5:58:36:b8:
5f:89:bd:49:5f:b4:37:b3:04:38:88:77:fe:e6:d1:
7b:b6:36:62:63:48:08:11:3e:17:3d:0a:5e:69:9d:
a0:bd:c6:63:7f:44:38:b3:dc:d2:a3:13:5a:05:62:
a8:34:f9:ea:cb:65:95:83:cd:5b:a6:6c:3d:5d:ae:
f0:47:cc:bb:b5:40:43:ba:32:9c:c1:57:16:1e:64:
e8:35:87:d3:3b:fd:77:c9:b2:2c:f5:26:26:e2:ef:
1d:44:b6:b8:e0:d7:c1:37:bc:5e:20:59:4c:4c:2a:
ff:e1:48:53:ae:6c:29:fa:3c:03:67:80:0d:47:68:
90:2d:31:69:57:e3:2f:34:78:62:66:3f:9c:e4:5a:
7f:ab:a4:72:19:b8:c4:7c:8f:10:02:38:26:7f:1d:
8e:3c:ec:ae:1a:b6:42:77:0e:96:af:5f:95:a6:37:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:14:D0:97:FE:3C:62:68:C6:13:E5:E5:40:AF:34:40:C8:FB:7C:BF
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b7:2e:c2:72:eb:aa:23:d0:d4:f4:a1:8f:e0:53:22:31:7b:
6f:9f:0b:02:e3:69:1b:22:00:72:de:7a:94:da:76:74:f9:ce:
92:dd:39:22:0c:97:96:09:50:85:44:0a:fd:7e:70:89:ec:cd:
1c:fd:8b:a2:2b:10:6a:51:ba:71:ec:d6:9e:cd:5e:fd:6a:08:
ab:b1:d9:b9:f7:a6:08:3d:a2:d3:06:7c:62:01:45:c6:d0:c5:
42:5e:23:98:ff:3e:bc:42:41:2b:bf:cb:21:cb:93:77:36:41:
f4:79:cf:96:d9:50:2f:c5:0e:8e:d1:38:b4:92:a0:bd:28:55:
58:9c:6a:aa:e5:a9:5b:97:69:ff:70:28:c2:79:85:fe:55:f8:
e6:6c:f6:b0:b0:dc:ca:b3:86:c9:36:d7:c2:e9:c5:77:cd:f6:
48:62:1b:14:98:03:63:9d:3f:8d:42:fb:12:d4:7a:1a:1f:dc:
58:98:b4:29:a9:8c:1b:d6:91:04:3b:b8:e8:a1:4b:ed:bf:61:
4c:9c:44:11:3d:e5:ca:c5:df:33:e1:c1:99:d4:4d:eb:53:a5:
68:06:5a:20:ab:43:08:33:a5:4d:96:b3:4f:34:79:50:ae:36:
90:cd:3f:d8:12:a8:80:46:7a:84:2e:94:22:cd:67:b2:68:08:
46:e0:e7:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039vvhOda0PwJXQ10SffinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmVlMmIzOTcxMjM3N2I0YmZlYzllNjZhYzdlNmU5MDhl
ZmNlZWMwHhcNMjYwMzI5MDUwMDI2WhcNMjYwMzMwMDUwMDI2WjAzMTEwLwYDVQQD
Eyg2YjE0ZDA5N2ZlM2M2MjY4YzYxM2U1ZTU0MGFmMzQ0MGM4ZmI3Y2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljAyXVoml+uI0Jhkt9dmgjpMIQRd
ante25diH0fwR3vfFgMicUohPzZUBveWJDbohBgMaeyO8uCNtP9LUBqTZRQrGJfO
I9sJ4mCP+LNxCKLRaj5Df7VYNrhfib1JX7Q3swQ4iHf+5tF7tjZiY0gIET4XPQpe
aZ2gvcZjf0Q4s9zSoxNaBWKoNPnqy2WVg81bpmw9Xa7wR8y7tUBDujKcwVcWHmTo
NYfTO/13ybIs9SYm4u8dRLa44NfBN7xeIFlMTCr/4UhTrmwp+jwDZ4ANR2iQLTFp
V+MvNHhiZj+c5Fp/q6RyGbjEfI8QAjgmfx2OPOyuGrZCdw6Wr1+Vpjdo+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsU0Jf+PGJoxhPl5UCvNEDI+3y/MB8GA1UdIwQY
MBaAFLMu4rOXEjd7S/7J5mrH5ukI787sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMt
ZjAxNmNhNWRhMjE5LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMtZjAxNmNhNWRhMjE5
LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbcuwnLr
qiPQ1PShj+BTIjF7b58LAuNpGyIAct56lNp2dPnOkt05IgyXlglQhUQK/X5wiezN
HP2LoisQalG6cezWns1e/WoIq7HZufemCD2i0wZ8YgFFxtDFQl4jmP8+vEJBK7/L
IcuTdzZB9HnPltlQL8UOjtE4tJKgvShVWJxqquWpW5dp/3AownmF/lX45mz2sLDc
yrOGyTbXwunFd832SGIbFJgDY50/jUL7EtR6Gh/cWJi0KamMG9aRBDu46KFL7b9h
TJxEET3lysXfM+HBmdRN61OlaAZaIKtDCDOlTZazTzR5UK42kM0/2BKogEZ6hC6U
Is1nsmgIRuDnZw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:07 2026 by rpki-client