
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: lWb4wBEy/niXrnbtlqXeBn+YLBqB+oRSNrNU0k7kUPI=
Subject key identifier: 8B:4B:49:EF:32:5F:B7:4B:C6:50:5A:FF:CE:CB:37:D4:D2:88:C2:5E
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 01A0B5AD0AEB133591027AB220FE92D0171F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 1145
Signing time: Fri 18 Sep 2026 18:00:11 +0000
Manifest this update: Fri 18 Sep 2026 18:00:11 +0000
Manifest next update: Sat 19 Sep 2026 18:00:11 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: Ja/jOFLcB+qxunGGc0quMV1WgTR3UPnq+a69LQSX+y0=)
2: nle7H145kWARm3i3WSQ0jxUoyxQ.roa (hash: zhsBwF/9ucNK3MWhQYCLkOEtb7B4dCQtxNnhlmW24Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:ad:0a:eb:13:35:91:02:7a:b2:20:fe:92:d0:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Sep 18 18:00:11 2026 GMT
Not After : Sep 19 18:00:11 2026 GMT
Subject: CN=8b4b49ef325fb74bc6505affcecb37d4d288c25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:60:7a:f3:f9:14:1d:1b:7b:fc:34:2c:c9:
e8:df:ce:00:16:79:b5:e6:56:d2:93:00:65:8f:55:
b8:d7:aa:07:b7:b7:36:1c:31:ce:b0:a2:1b:79:63:
26:0d:1a:f9:7d:20:7c:32:37:3b:20:b6:10:ed:be:
c0:18:84:ae:d3:32:9f:52:a8:51:d7:50:f0:44:d3:
40:ee:61:37:c1:f4:ce:38:7c:27:28:9a:2b:fb:e7:
94:0e:f9:8f:29:5a:8e:20:bf:17:79:0a:8b:3d:11:
c2:31:f3:c6:e3:3e:f8:51:16:c7:d1:bf:d3:9e:8a:
97:20:5d:d3:7f:e9:1b:3b:97:bc:64:2c:ec:74:b6:
26:78:4e:86:a8:3e:a2:ca:ea:ff:7a:da:32:97:2c:
c7:62:92:b9:ba:c9:a8:25:af:af:26:c3:48:db:52:
41:96:79:71:d5:fd:0d:78:0d:6b:ee:7b:7b:a0:e7:
02:97:2d:4a:0c:f0:87:5d:eb:97:ef:db:a2:b7:12:
26:70:18:d6:b2:37:c9:88:1b:d8:20:b6:6b:ac:70:
30:fe:c1:b9:6c:99:95:38:ef:10:3e:3f:e6:52:29:
a1:fb:bd:9e:dc:a6:f5:43:57:3d:04:e8:7f:84:c3:
0b:59:ac:f0:23:17:48:25:0b:29:26:b2:6b:0f:90:
05:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4B:49:EF:32:5F:B7:4B:C6:50:5A:FF:CE:CB:37:D4:D2:88:C2:5E
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:63:99:e2:30:2c:a7:a1:7e:d8:0c:fa:33:c7:2f:3b:ce:0d:
d4:05:b5:5e:30:1e:b7:d4:20:88:83:f6:61:39:f2:cb:e0:cc:
79:ea:f5:f4:6c:57:fe:66:98:09:de:1a:e7:c9:34:42:35:6e:
eb:5b:ad:2a:fe:b9:9c:6d:ea:e3:98:19:fd:4d:75:eb:b8:fb:
3f:93:51:9c:c1:8d:b3:27:88:06:6d:22:65:45:75:c6:c9:ec:
a4:bf:b9:21:ea:e5:99:94:82:f5:b0:ba:32:1e:51:b6:4f:89:
aa:90:bc:1a:33:61:7c:bf:ee:87:6a:02:2c:3b:f5:1a:03:b5:
91:ef:32:fb:fc:06:98:c5:b1:34:56:f2:cc:ae:96:69:02:f6:
27:2b:35:51:ce:ac:70:d8:29:cf:05:70:5b:79:65:0b:e6:7d:
9e:d5:fe:5c:ea:47:b8:ff:ab:6c:f6:b8:54:bc:f6:ab:be:b2:
b6:1d:71:3a:d5:e7:c1:38:9d:40:99:a9:e3:a2:be:93:38:1f:
3a:05:1d:7c:1a:0d:ce:cb:62:8e:ba:7f:33:fd:33:11:26:f3:
cc:f8:4b:09:f8:e2:5f:c9:d7:eb:a5:94:82:09:4a:e7:fd:1b:
a1:5c:56:a4:a1:f9:9b:f3:93:b8:89:6c:eb:35:c9:33:3a:4e:
e2:c8:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:04:50 2026 by rpki-client