Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier: q2s3QupYmjMKLyRl49UCzykhSlWyN84aGBhwexu+Vpg=
Subject key identifier: 75:44:74:DD:6F:3B:7E:B4:7A:26:A6:CB:1D:AF:D6:FB:F9:51:53:5D
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 019F871FB107A43706BE35DD9ABAE63F5ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number: 1501
Signing time: Wed 22 Jul 2026 00:00:28 +0000
Manifest this update: Wed 22 Jul 2026 00:00:28 +0000
Manifest next update: Thu 23 Jul 2026 00:00:28 +0000
Files and hashes: 1: lTiIdOCkR7HQgUlBuUv00XWG8n8.roa (hash: 5GQQkbQ8C7wWLUQ4RuOd8R+85EFkyHaFY8FEJbVGNpw=)
2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: frYxyf00nFfMEh/mZ8HhZyZ/AHhxZw8LWZHi1WOXA1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:1f:b1:07:a4:37:06:be:35:dd:9a:ba:e6:3f:5e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: Jul 22 00:00:28 2026 GMT
Not After : Jul 23 00:00:28 2026 GMT
Subject: CN=754474dd6f3b7eb47a26a6cb1dafd6fbf951535d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:32:c6:70:c2:0a:8b:35:d6:cd:e1:62:7d:
66:fd:98:09:f5:03:23:54:6e:2f:fe:0f:bd:f8:f1:
9d:a6:fa:d3:fd:4c:5c:52:60:b0:f7:a7:e8:a5:42:
87:f5:03:3d:a1:52:f5:f9:0d:bf:52:03:bb:a7:2e:
8c:79:51:9a:5e:b6:db:7c:b5:6f:bf:47:94:16:78:
aa:a7:7a:4c:72:32:3c:ee:c3:17:65:aa:68:7b:80:
d0:11:ac:2a:52:30:9b:c9:6d:6f:13:d4:50:50:ec:
a7:6f:c7:db:3b:48:5a:de:e7:a3:51:92:cd:1a:b5:
70:f2:f5:1a:16:a9:14:d5:24:38:fd:d7:f9:90:b5:
09:76:4d:dc:e5:ab:a3:5b:8b:cb:f8:6a:1b:b4:09:
37:47:bf:94:ce:9f:8c:ec:48:8a:7f:ef:46:dc:40:
0b:af:d6:48:d1:f2:97:fc:46:dd:5c:e8:21:75:b4:
89:8e:b0:62:68:5d:b7:3c:94:42:05:5a:df:a9:88:
45:cd:03:15:d1:ae:c0:b2:ad:42:dd:8a:de:7b:3e:
26:01:b7:c3:72:a0:3d:7f:9f:9a:d8:37:28:40:ad:
3b:e9:4e:1a:df:5e:b3:f2:75:d5:52:3b:ef:75:e8:
2f:df:67:04:38:bd:36:71:5c:c3:6c:02:59:40:dd:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:44:74:DD:6F:3B:7E:B4:7A:26:A6:CB:1D:AF:D6:FB:F9:51:53:5D
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:dd:a5:57:29:d9:d4:a3:c3:14:3d:f6:84:a3:15:95:5f:de:
35:c3:d2:5d:59:56:b6:e4:f3:50:90:d0:40:5b:e0:fe:6a:85:
66:17:ff:55:9f:9d:db:d9:93:1b:9a:d2:2c:eb:11:09:e9:89:
7a:64:9b:fb:1d:2b:17:43:4b:26:bb:09:7a:b4:2c:64:99:72:
31:50:0b:b3:34:69:bf:d0:69:63:8c:cd:ff:70:f6:24:da:3d:
82:08:3c:7a:50:61:a8:b6:93:24:0b:fb:38:df:b4:6d:52:61:
0a:ed:3e:67:70:26:c9:e1:80:1d:0a:68:2b:ba:fe:af:1f:07:
5a:1f:5e:11:22:a7:2d:23:8e:fe:cb:52:60:d9:4d:9b:7a:9f:
2a:fe:a1:21:df:89:5f:76:e7:0c:88:30:68:9e:79:aa:30:35:
f8:40:70:78:20:1e:29:3c:df:0d:95:72:41:c5:77:f4:12:d8:
e9:3f:30:a7:d0:a5:10:5f:e5:fe:22:c1:aa:5f:63:49:45:fb:
7f:3e:a5:09:40:7a:86:a5:ae:8a:6c:44:1c:bc:da:9d:a9:b2:
38:95:d1:6c:29:75:53:8d:be:6c:26:db:d3:be:44:88:39:53:
fb:af:e6:d7:38:7d:b0:de:ea:a9:15:a5:28:6e:bf:3e:85:18:
15:26:46:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+HH7EHpDcGvjXdmrrmP17PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMjFjYjgyODkwOGY0MzA3NDllZTNhNWYyYTYyZGU1Zjgy
MmY3ZDEwHhcNMjYwNzIyMDAwMDI4WhcNMjYwNzIzMDAwMDI4WjAzMTEwLwYDVQQD
Eyg3NTQ0NzRkZDZmM2I3ZWI0N2EyNmE2Y2IxZGFmZDZmYmY5NTE1MzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgAyxnDCCos11s3hYn1m/ZgJ9QMj
VG4v/g+9+PGdpvrT/UxcUmCw96fopUKH9QM9oVL1+Q2/UgO7py6MeVGaXrbbfLVv
v0eUFniqp3pMcjI87sMXZapoe4DQEawqUjCbyW1vE9RQUOynb8fbO0ha3uejUZLN
GrVw8vUaFqkU1SQ4/df5kLUJdk3c5aujW4vL+GobtAk3R7+Uzp+M7EiKf+9G3EAL
r9ZI0fKX/EbdXOghdbSJjrBiaF23PJRCBVrfqYhFzQMV0a7Asq1C3Yreez4mAbfD
cqA9f5+a2DcoQK076U4a316z8nXVUjvvdegv32cEOL02cVzDbAJZQN24UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVEdN1vO360eiamyx2v1vv5UVNdMB8GA1UdIwQY
MBaAFLMhy4KJCPQwdJ7jpfKmLeX4IvfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYt
ODdmMzQxODg4NTYwLzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYtODdmMzQxODg4NTYw
LzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIt2lVynZ
1KPDFD32hKMVlV/eNcPSXVlWtuTzUJDQQFvg/mqFZhf/VZ+d29mTG5rSLOsRCemJ
emSb+x0rF0NLJrsJerQsZJlyMVALszRpv9BpY4zN/3D2JNo9ggg8elBhqLaTJAv7
ON+0bVJhCu0+Z3AmyeGAHQpoK7r+rx8HWh9eESKnLSOO/stSYNlNm3qfKv6hId+J
X3bnDIgwaJ55qjA1+EBweCAeKTzfDZVyQcV39BLY6T8wp9ClEF/l/iLBql9jSUX7
fz6lCUB6hqWuimxEHLzanamyOJXRbCl1U42+bCbb075EiDlT+6/m1zh9sN7qqRWl
KG6/PoUYFSZGKA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 03:05:43 2026 by rpki-client