Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
File: SyUQgOllg93f08tXQu9eQmWBFLA.mft (raw, json)
Hash identifier: MdDAk0zck+3ym65+uMhM8pSqTFrDzgZCzlOllFzXEaQ=
Subject key identifier: 70:26:D0:7A:E1:C3:40:DE:B3:BF:25:24:EE:51:E9:42:FB:66:42:6E
Authority key identifier: 4B:25:10:80:E9:65:83:DD:DF:D3:CB:57:42:EF:5E:42:65:81:14:B0
Certificate issuer: /CN=4b251080e96583dddfd3cb5742ef5e42658114b0
Certificate serial: 01A18C4168E7F104E58E362DF3FDF1F36B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
Manifest number: 0210
Signing time: Fri 30 Oct 2026 10:00:59 +0000
Manifest this update: Fri 30 Oct 2026 10:00:59 +0000
Manifest next update: Sat 31 Oct 2026 10:00:59 +0000
Files and hashes: 1: SyUQgOllg93f08tXQu9eQmWBFLA.crl (hash: IKDT4WZQoQHTCidfgmOmYDdikB+K984BfamBrhYdkX0=)
2: en2MbnssfxDmdQApF9BpXZafTB4.roa (hash: ER4VRDsyb1U6Mhi3DkYQHSd9SIwplFdtiKrG0UkksVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:68:e7:f1:04:e5:8e:36:2d:f3:fd:f1:f3:6b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b251080e96583dddfd3cb5742ef5e42658114b0
Validity
Not Before: Oct 30 10:00:59 2026 GMT
Not After : Oct 31 10:00:59 2026 GMT
Subject: CN=7026d07ae1c340deb3bf2524ee51e942fb66426e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:28:33:cb:ea:4e:02:b2:97:ed:cc:e8:83:
95:03:60:ab:7b:ef:0e:42:c7:78:7b:ee:6a:f4:59:
0c:03:0a:38:38:8c:03:93:a2:e0:76:de:2c:64:3f:
ff:b7:3d:55:82:34:24:18:bb:42:e6:83:ef:ec:7f:
9c:59:6d:c9:23:80:11:1f:49:3b:99:ee:74:83:07:
34:29:cc:ff:7d:2c:b8:71:6d:a9:41:69:89:ce:ae:
4e:67:e7:30:cc:8f:6e:85:6a:f0:a5:d7:0b:a0:23:
83:59:3c:f4:7d:23:5d:d8:5d:b1:50:20:78:b2:8b:
9e:f5:00:9f:d3:d4:50:80:6a:0c:2e:be:93:39:a9:
1c:05:e2:3b:02:c8:19:1d:74:44:7f:3b:ec:98:f9:
2f:55:3e:d5:de:a8:6b:9e:c6:b2:6b:e9:af:72:d4:
7f:58:2b:16:7a:4e:f1:79:a3:f5:e2:34:cb:f2:e3:
70:af:fd:9a:1e:7a:84:a9:af:87:99:ba:c4:67:79:
3d:01:31:a0:cb:6b:38:c5:bf:f7:db:b5:d7:d1:fc:
1a:1b:62:d3:eb:be:82:3a:36:1a:96:90:27:f1:07:
7e:5b:6b:91:5d:bc:4f:79:70:98:1a:43:9f:31:fc:
cb:60:c6:ae:51:66:06:30:38:d8:d0:29:72:8d:07:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:26:D0:7A:E1:C3:40:DE:B3:BF:25:24:EE:51:E9:42:FB:66:42:6E
X509v3 Authority Key Identifier:
keyid:4B:25:10:80:E9:65:83:DD:DF:D3:CB:57:42:EF:5E:42:65:81:14:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a3:d4:a9:1d:4c:5e:78:e5:16:39:3b:9e:af:91:75:7a:cf:
4c:94:34:ca:24:df:c9:08:3e:ee:c1:0b:6a:ba:62:d3:fe:8d:
62:a0:29:5e:4b:15:8b:d0:d9:17:f0:9a:ac:0d:11:c9:de:05:
79:fe:81:aa:5a:5f:2c:54:a2:d3:f0:c3:af:87:5e:3c:68:bc:
39:b6:4f:a1:e1:71:2d:32:24:c2:07:d8:ca:ec:d7:71:af:ec:
4c:72:a0:ca:5a:3c:63:3e:85:6e:6b:a5:2d:9f:cb:ab:3a:11:
1f:28:04:f6:d5:a4:ff:bb:a5:4d:63:bb:ea:eb:03:0a:b2:c1:
ed:7a:a0:da:5a:72:74:9c:85:79:8c:75:24:66:dc:9f:10:cc:
70:f8:51:5e:41:7b:a2:d5:b9:3a:c2:49:aa:87:8c:1a:de:00:
ca:82:1b:2d:29:bb:75:ce:d7:67:e3:e5:cb:b6:b9:b3:4d:69:
ac:21:70:c0:00:ce:6c:1b:db:3d:92:d0:39:56:d7:ee:34:c8:
2f:37:ed:bf:b6:02:9a:8b:03:70:93:ed:ad:f2:1e:94:d9:5f:
82:90:06:a3:78:4c:69:4d:e1:38:83:98:c4:87:69:43:7c:d4:
4d:99:d7:00:95:d1:1d:91:b6:7a:46:42:16:00:98:bf:20:e7:
4d:f5:c8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:05:56 2026 by rpki-client