
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json)
Hash identifier: DWVw1QfGbCY4clKWMzLEbfSWozrzCpPtgbZJDKkS7Uw=
Subject key identifier: 96:C0:88:26:A0:73:4F:BD:AC:2A:2A:00:D4:58:20:26:DD:DA:98:B7
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 019D3940F538C450E83ED80573D3D456011C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
Manifest number: 0F8F
Signing time: Sun 29 Mar 2026 11:00:51 +0000
Manifest this update: Sun 29 Mar 2026 11:00:51 +0000
Manifest next update: Mon 30 Mar 2026 11:00:51 +0000
Files and hashes: 1: MKIn2GKscAnSjEe-pKawSjFxEE4.roa (hash: 8pAAduPAownYKe2M33SgXEkvP4hCHBB83tGhPyeNyTU=)
2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: bdWSGw9vZpdQyAwQwBM7AFCJQLgDgAQJ1tI2OXJw/hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f5:38:c4:50:e8:3e:d8:05:73:d3:d4:56:01:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: Mar 29 11:00:51 2026 GMT
Not After : Mar 30 11:00:51 2026 GMT
Subject: CN=96c08826a0734fbdac2a2a00d4582026ddda98b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:01:d4:3e:7f:7d:1e:dd:90:41:d7:3f:b2:
e9:b3:f8:34:8d:db:69:f0:3a:ab:08:61:49:61:81:
7c:97:13:1d:a6:aa:26:51:8b:93:0e:b3:0a:e4:17:
54:f2:f7:12:55:d9:cc:8c:0e:9c:a4:21:8c:ab:09:
89:6c:8a:d5:bf:81:f1:44:b8:f7:02:6b:97:51:5d:
b0:b6:67:e3:a2:f5:5b:93:5a:28:46:41:ef:5d:96:
eb:12:3a:40:c4:fd:5f:a3:10:ee:ac:9c:1e:dc:dc:
e7:e0:9f:81:68:a8:e6:ac:dc:17:b5:92:f1:39:69:
72:2b:b5:0b:8a:86:72:9f:91:4c:d2:5d:89:64:61:
68:fd:91:92:a6:c7:3d:04:3b:fb:30:76:3a:42:41:
74:73:9a:bc:d2:a1:f9:e2:02:08:ff:a7:ec:c5:7c:
41:9e:ca:5c:ad:aa:ad:d5:8b:43:3d:94:0f:a4:74:
57:7d:d1:65:e7:0f:41:83:17:6b:8e:da:59:aa:20:
64:1e:0f:9c:f1:2b:a2:6c:08:76:67:8c:28:e4:51:
9e:f0:6f:fd:c3:95:3e:71:d8:04:73:f7:ce:d0:c6:
d5:71:cd:68:76:68:98:11:47:c5:c1:f2:3b:47:fc:
34:7c:e2:b8:50:6f:26:82:38:bd:e0:25:cb:64:21:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C0:88:26:A0:73:4F:BD:AC:2A:2A:00:D4:58:20:26:DD:DA:98:B7
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0d:0e:40:45:82:26:bc:6f:cb:c9:72:df:85:b8:b5:86:9c:
6d:4f:84:11:b0:eb:3d:2a:aa:c3:08:c5:92:a8:dd:14:fd:2b:
ac:e7:e9:05:13:78:f5:ee:c5:ad:86:45:98:46:af:bf:b3:b0:
3b:f7:4d:5e:e1:4f:1c:e2:ca:ef:dc:cf:29:a3:86:10:51:2a:
82:e5:7d:02:c4:e8:78:19:36:49:cf:68:a7:96:1a:1f:63:42:
26:92:58:b1:37:4e:86:63:9d:1c:c0:c9:6e:56:56:fc:a2:88:
2a:80:0e:cd:d5:54:60:87:79:71:51:01:e5:b8:c7:02:ac:8d:
82:e5:3e:92:1f:12:ea:82:dc:7b:ef:1d:96:33:2f:3b:41:cb:
f5:e5:7f:37:3e:e7:52:5b:43:d7:d5:b4:64:11:35:24:58:c0:
66:62:fa:78:cf:9a:08:e1:77:3e:b7:42:3a:53:5c:7d:12:e9:
ab:72:e1:e2:59:77:65:c9:86:ef:1d:a1:45:4c:76:3d:9e:55:
b8:42:66:0e:ad:9c:5e:55:ed:42:b1:52:71:1d:b1:1d:33:2c:
b4:44:48:2b:eb:fd:93:7e:82:5d:44:ad:95:f5:e6:9a:53:4d:
9a:89:55:c6:a6:c8:2e:1d:8a:0d:2f:72:3a:fe:4a:78:47:4d:
01:05:18:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QPU4xFDoPtgFc9PUVgEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTNiMjYxYWRiZjc5ZWUzNmE2YTNhZGZhNjg3YTdlYzY1
ODIxMGIwHhcNMjYwMzI5MTEwMDUxWhcNMjYwMzMwMTEwMDUxWjAzMTEwLwYDVQQD
Eyg5NmMwODgyNmEwNzM0ZmJkYWMyYTJhMDBkNDU4MjAyNmRkZGE5OGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PUB1D5/fR7dkEHXP7Lps/g0jdtp
8DqrCGFJYYF8lxMdpqomUYuTDrMK5BdU8vcSVdnMjA6cpCGMqwmJbIrVv4HxRLj3
AmuXUV2wtmfjovVbk1ooRkHvXZbrEjpAxP1foxDurJwe3Nzn4J+BaKjmrNwXtZLx
OWlyK7ULioZyn5FM0l2JZGFo/ZGSpsc9BDv7MHY6QkF0c5q80qH54gII/6fsxXxB
nspcraqt1YtDPZQPpHRXfdFl5w9BgxdrjtpZqiBkHg+c8SuibAh2Z4wo5FGe8G/9
w5U+cdgEc/fO0MbVcc1odmiYEUfFwfI7R/w0fOK4UG8mgji94CXLZCHAewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbAiCagc0+9rCoqANRYICbd2pi3MB8GA1UdIwQY
MBaAFEkTsmGtv3nuNqajrfpoen7GWCELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYt
YThhMGU1NWY1ZTMxLzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYtYThhMGU1NWY1ZTMx
LzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADg0OQEWC
Jrxvy8ly34W4tYacbU+EEbDrPSqqwwjFkqjdFP0rrOfpBRN49e7FrYZFmEavv7Ow
O/dNXuFPHOLK79zPKaOGEFEqguV9AsToeBk2Sc9op5YaH2NCJpJYsTdOhmOdHMDJ
blZW/KKIKoAOzdVUYId5cVEB5bjHAqyNguU+kh8S6oLce+8dljMvO0HL9eV/Nz7n
UltD19W0ZBE1JFjAZmL6eM+aCOF3PrdCOlNcfRLpq3Lh4ll3ZcmG7x2hRUx2PZ5V
uEJmDq2cXlXtQrFScR2xHTMstERIK+v9k36CXUStlfXmmlNNmolVxqbILh2KDS9y
Ov5KeEdNAQUY7A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:57 2026 by rpki-client