Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: N88zklEZ/+5ipwicfiDQB59SzFwDhMBNt6G0kI11Azs=
Subject key identifier: B0:DC:9D:7C:CB:EC:BD:B0:BD:C0:F0:A1:27:8E:BA:E7:5C:80:44:2F
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 019CE47F4FB527557F202DFC30FB43CF1A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0F4B
Signing time: Fri 13 Mar 2026 00:01:14 +0000
Manifest this update: Fri 13 Mar 2026 00:01:14 +0000
Manifest next update: Sat 14 Mar 2026 00:01:14 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: +aSzjX3tmdZKy45rfSpKv6RlwaDP9x/sZl7D+Cb39gY=)
2: nle7H145kWARm3i3WSQ0jxUoyxQ.roa (hash: zhsBwF/9ucNK3MWhQYCLkOEtb7B4dCQtxNnhlmW24Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7f:4f:b5:27:55:7f:20:2d:fc:30:fb:43:cf:1a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Mar 13 00:01:14 2026 GMT
Not After : Mar 14 00:01:14 2026 GMT
Subject: CN=b0dc9d7ccbecbdb0bdc0f0a1278ebae75c80442f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:6d:15:d9:8f:88:b5:87:db:75:73:35:d9:
dd:d0:5a:ec:7a:0a:d2:c0:28:31:80:33:4f:df:60:
d3:f3:2e:4c:56:18:6a:cb:ad:e8:6f:21:bb:f4:a5:
ae:dd:08:4f:13:70:48:fd:dd:a8:c1:68:8c:93:37:
b0:c6:23:ea:36:3d:42:4a:4c:5e:6b:73:b1:f7:37:
a5:aa:51:eb:f8:8a:22:ed:cc:32:c3:04:12:73:6a:
ff:21:53:cc:5e:d4:d6:20:f5:d4:b6:f3:8f:17:60:
a4:c4:ae:dc:ed:27:dd:c3:cb:1a:35:c3:3f:3a:2b:
1e:6d:00:f0:5d:1e:09:4e:37:32:29:24:d4:28:aa:
5c:0a:54:3e:8b:3e:c9:e2:50:b2:32:a0:54:2a:cd:
25:84:c1:06:03:53:a2:91:e5:2c:ab:6b:cf:c2:8e:
e2:65:35:ab:82:3b:68:c2:5d:a9:f4:26:34:2a:6b:
40:3b:01:47:ba:c5:1d:30:bc:fa:52:32:0c:99:85:
d2:55:5f:7c:31:63:c2:b0:1c:6a:b2:63:1c:99:43:
fd:cf:5a:d1:c9:ed:c2:b1:5b:3f:c7:97:89:d2:27:
a7:cb:26:5b:57:d1:dd:8e:6e:bb:17:81:d9:95:4e:
5c:c7:ba:ac:64:9a:ca:c4:66:c7:87:be:b6:b7:e3:
d7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DC:9D:7C:CB:EC:BD:B0:BD:C0:F0:A1:27:8E:BA:E7:5C:80:44:2F
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d0:a8:15:6e:be:06:6f:58:c4:e5:68:31:46:4e:24:61:62:
fb:39:e9:12:7d:dd:88:a7:58:d6:97:72:3f:77:9d:cb:36:5b:
cf:72:15:39:16:b5:0b:2d:f4:41:60:14:05:a4:86:70:cf:70:
17:6e:d9:56:6d:0a:12:cd:1e:60:4b:82:e5:80:e1:f5:73:35:
a7:8f:9b:0e:76:66:e3:ed:71:40:69:19:c7:ea:05:c1:db:62:
55:90:0d:49:36:f1:31:cf:35:99:19:eb:a8:07:9b:e1:25:a3:
c0:52:5d:cc:5d:07:fd:39:3e:2b:32:45:07:27:ce:12:3f:0f:
90:0c:be:80:9a:36:b0:1f:a3:2e:e0:e7:7c:93:02:2d:e6:b4:
fd:59:1a:0d:9b:4a:80:48:a2:28:01:dd:c4:49:0d:19:51:94:
f3:d2:c8:86:4e:c9:6e:e6:06:35:50:3a:0d:5e:e3:37:74:7e:
f9:d5:26:f3:d6:f7:89:d4:fc:42:fa:0a:c6:b2:b1:a7:29:0a:
2d:6e:8d:f6:bb:75:49:11:46:22:61:b6:91:b0:91:b7:d5:1a:
3c:20:44:cc:8e:52:13:27:a4:30:8b:cd:c1:ac:b3:c9:f2:7b:
00:5c:f3:98:5d:7e:00:92:bb:28:ba:7b:5f:2e:50:65:6b:1d:
72:c3:e9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:55 2026 by rpki-client