Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier: LAj0a6q39WJFfNPan787o8h7sTy38ZcOGBzkki5/arI=
Subject key identifier: 9E:41:4D:88:F8:D4:31:50:B6:B2:2D:4D:8E:31:AF:95:D6:34:54:3F
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 019D382E0B719AA334E313C06AD18F2C79E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number: 13CF
Signing time: Sun 29 Mar 2026 06:00:34 +0000
Manifest this update: Sun 29 Mar 2026 06:00:34 +0000
Manifest next update: Mon 30 Mar 2026 06:00:34 +0000
Files and hashes: 1: lTiIdOCkR7HQgUlBuUv00XWG8n8.roa (hash: 5GQQkbQ8C7wWLUQ4RuOd8R+85EFkyHaFY8FEJbVGNpw=)
2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: xreeiRS+c1S0jBqbkEiXBISWW4AGgmV6sZMfzzwiuno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0b:71:9a:a3:34:e3:13:c0:6a:d1:8f:2c:79:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: Mar 29 06:00:34 2026 GMT
Not After : Mar 30 06:00:34 2026 GMT
Subject: CN=9e414d88f8d43150b6b22d4d8e31af95d634543f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:83:62:ad:8e:3a:6a:33:31:63:4d:fc:cb:
a2:33:b9:de:57:bc:ff:2b:1a:ac:ea:c0:b7:0f:78:
f8:85:ea:37:65:ea:de:b8:3f:07:93:0b:9f:6c:7b:
cc:77:3f:b0:eb:28:f8:19:56:29:26:c2:88:ed:83:
ef:6a:8a:57:f9:0b:fb:11:f7:90:e6:f6:01:7d:e4:
bb:eb:bb:cb:02:a9:a1:70:b5:12:45:71:b4:db:0b:
df:69:15:ad:78:9a:06:c2:62:5d:ad:fa:af:97:1d:
29:a5:20:36:b0:9f:c6:ad:93:26:55:12:ca:88:ed:
52:91:b2:2a:1c:27:7a:df:25:1e:d0:87:69:53:6c:
84:c1:c8:3d:90:43:8d:a7:d9:61:8c:aa:36:2a:46:
2e:c9:c1:05:77:c2:0a:1d:e1:60:6f:80:5e:c1:9b:
c2:ba:b7:5e:89:76:84:54:e7:16:46:59:7f:12:e0:
d5:06:59:c4:60:94:fb:18:a6:34:c8:15:c3:73:07:
0a:26:e4:38:fe:fe:cb:09:02:7a:73:c1:12:fa:18:
d2:46:ac:e4:44:83:e1:dc:fe:f9:bd:05:5e:dc:76:
74:39:55:d5:a5:75:ff:7e:57:2b:74:7f:d7:f5:b3:
d9:12:54:1b:a7:c0:5f:69:d6:6a:3f:37:cf:88:42:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:41:4D:88:F8:D4:31:50:B6:B2:2D:4D:8E:31:AF:95:D6:34:54:3F
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ec:e3:1b:5c:47:1b:77:b7:be:e0:2d:ca:a9:40:66:81:e8:
ac:48:17:ce:ef:ed:eb:bc:22:35:92:bb:62:c7:0c:1d:07:ae:
c1:93:c5:10:91:ff:10:32:6e:9a:60:b9:97:36:17:9c:cf:a6:
7b:26:f8:a9:18:1c:f5:a2:81:16:dc:97:29:19:d6:bd:55:d7:
00:77:56:1e:f0:63:72:67:22:b3:57:d8:d1:7c:19:20:da:8c:
a9:24:7c:a0:eb:38:54:7d:97:d8:5c:70:dd:f7:b7:c7:a0:97:
be:ef:9e:14:a4:0e:60:24:57:4d:c8:f8:b3:20:68:dc:f7:b9:
82:ec:5a:f6:09:27:8f:d4:60:67:9c:ff:7b:2a:1e:c2:dc:97:
5a:c4:3f:2d:f2:08:9d:24:ff:4b:b1:07:0f:d8:66:c5:31:2a:
4f:32:30:ef:9c:f8:ca:7f:0a:d8:8d:4f:79:dd:85:2d:a8:a6:
42:a4:55:55:2d:78:11:f6:20:e5:8c:e4:34:d5:2a:a7:f3:58:
1a:a5:cd:6d:12:6c:f1:96:c5:b9:85:48:98:f1:0d:82:64:a0:
8f:e7:19:78:fa:29:76:e8:55:da:4c:94:03:f1:68:27:d5:63:
3b:ac:d4:74:01:8a:41:0d:2c:0e:c8:12:36:bf:0f:f1:65:e9:
fb:99:9f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:49 2026 by rpki-client