Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: 99NLYVf/0h13RCGgrOayLdFJLmUUFqxxzVqSxFY6Jys=
Subject key identifier: DA:E4:18:12:EA:7D:B2:58:BE:4E:D3:2D:78:82:03:32:41:E0:4D:05
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 019DCE2B75444EE0A258FF96D4A8B00B3321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0FC4
Signing time: Mon 27 Apr 2026 09:00:47 +0000
Manifest this update: Mon 27 Apr 2026 09:00:47 +0000
Manifest next update: Tue 28 Apr 2026 09:00:47 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: ZNxZq/CiBdo/iZ+zWfh+Kak4UHY5urLI3V8S36J/XQM=)
2: nle7H145kWARm3i3WSQ0jxUoyxQ.roa (hash: zhsBwF/9ucNK3MWhQYCLkOEtb7B4dCQtxNnhlmW24Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:75:44:4e:e0:a2:58:ff:96:d4:a8:b0:0b:33:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Apr 27 09:00:47 2026 GMT
Not After : Apr 28 09:00:47 2026 GMT
Subject: CN=dae41812ea7db258be4ed32d7882033241e04d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:0f:ad:8b:0c:ec:db:2a:7a:21:63:fc:68:
31:0c:93:32:3e:6c:29:be:90:79:4d:4a:c5:a4:ad:
88:90:13:45:b8:d7:bf:18:ad:3d:33:39:04:b4:4e:
36:60:a4:d3:f5:08:11:9f:bf:e9:8d:89:c1:4d:98:
a4:2e:7b:75:b6:b3:55:d3:ac:ea:91:ac:ea:94:54:
d1:d3:7d:d5:6c:a5:8b:b7:47:9e:37:5e:f3:dd:93:
9b:b5:f4:79:1a:43:a5:d8:68:3b:19:7f:c7:43:d6:
e1:73:cd:25:9b:62:d0:3c:61:b0:33:86:d7:61:76:
0b:ed:85:14:2a:f5:60:67:20:90:f4:46:5c:13:f0:
8d:49:e2:e6:2b:55:e1:e1:10:2b:a4:48:09:ac:0d:
1d:76:37:78:43:ed:22:eb:ae:86:11:1e:09:bf:f0:
3c:d0:bb:d3:07:e0:f1:b6:eb:6b:2c:4c:58:65:3d:
bd:7a:a7:d7:49:29:5f:5a:99:c6:7c:32:01:2e:93:
f9:f6:f1:ec:86:61:5a:81:b8:8a:a6:68:23:25:a4:
53:c7:e5:ab:03:a7:7a:b8:b6:5f:cf:fb:d9:b0:27:
e7:39:19:02:8e:da:45:f2:7d:58:07:71:5a:6f:fa:
1a:17:c8:4f:a5:9c:0e:4c:6e:30:3b:52:cc:91:bb:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E4:18:12:EA:7D:B2:58:BE:4E:D3:2D:78:82:03:32:41:E0:4D:05
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c1:be:a0:0b:53:cd:49:a9:d4:eb:72:ae:4e:b4:64:5b:ac:
1d:27:43:ba:da:6f:bc:ef:1d:92:50:26:d0:4d:cc:62:74:02:
f4:aa:88:ee:d7:2d:5b:4c:87:ae:cd:b6:04:c9:91:5a:b0:99:
f1:42:94:de:3a:95:dd:a9:20:87:cd:10:fd:41:82:fc:f4:4a:
f1:28:cd:c8:f7:6a:ce:64:c5:8e:97:f7:bb:47:d5:c4:ab:bc:
b4:47:8e:a0:e8:85:35:c5:2d:2c:60:0c:7d:e3:c8:15:0b:5a:
7c:6d:2a:0f:af:c7:8d:2f:9c:e8:1e:b6:73:32:14:d1:89:a2:
8b:59:d3:a2:87:bc:bd:ff:bb:1e:41:02:2d:38:d2:aa:a8:7b:
b4:3f:a1:cf:08:cc:ce:60:eb:58:7f:51:81:69:f4:97:5e:0d:
fa:b1:6f:8a:11:cc:96:b2:5c:9f:d5:56:f0:40:48:1d:ee:6c:
78:60:10:b7:b1:bd:85:3c:41:6c:e7:9b:0d:29:62:42:de:3a:
e6:fe:e6:e0:02:4d:e9:e9:fc:34:99:24:0a:40:1d:33:46:32:
e2:59:de:90:f1:84:9d:bc:19:74:8d:ec:7a:b8:a1:be:ba:7d:
16:d7:92:10:4e:84:b1:fb:fe:68:1b:78:85:de:dd:e1:24:eb:
2b:91:6a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:43 2026 by rpki-client