Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
File: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft (raw, json)
Hash identifier: dsZx/3ZaxUUUB71nNiKC+doQKLXSH/E0GIAnWwLrTNk=
Subject key identifier: 33:49:D7:41:AD:30:D1:D7:AC:CC:B4:51:9B:86:6D:C5:C0:77:28:BD
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Certificate issuer: /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial: 01A1385BA4BFB522403B3C3803795EA6F772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
Manifest number: 1AA3
Signing time: Wed 14 Oct 2026 03:01:32 +0000
Manifest this update: Wed 14 Oct 2026 03:01:32 +0000
Manifest next update: Thu 15 Oct 2026 03:01:32 +0000
Files and hashes: 1: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl (hash: bgFVk9Y/0llp8alBp9jQMyTH6+Lhe/jYSJxu3jaWagw=)
2: coNCzvd4EKyjX0UhdzyCswUVu8c.roa (hash: wNZzIhMnJPQrWHw0reoLLRpSJGX0pJCcVwP0w1vwA5E=)
3: mGKDWCPyI5MUqtkn27jC4-87zx0.roa (hash: JD5UOH21GzZdEnZQhjT7oZLqv6/K0tGS2f9U459A/Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:5b:a4:bf:b5:22:40:3b:3c:38:03:79:5e:a6:f7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Validity
Not Before: Oct 14 03:01:32 2026 GMT
Not After : Oct 15 03:01:32 2026 GMT
Subject: CN=3349d741ad30d1d7acccb4519b866dc5c07728bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:9e:e1:45:75:ac:14:f5:22:fa:ba:b8:41:
06:ab:2f:4d:2b:68:69:47:33:a9:98:77:70:a4:5a:
07:bd:2b:3b:ac:d0:87:f3:80:34:5c:d4:87:b4:d5:
02:c5:ff:bd:44:b4:50:27:02:ca:38:54:c9:ce:50:
48:11:00:64:c2:d3:c8:42:e2:84:44:c1:53:fb:48:
55:ec:69:68:51:c0:1f:57:93:9f:2d:49:75:53:3b:
77:69:74:24:61:10:9d:80:11:24:45:b5:5c:dd:9a:
39:bd:d5:b9:cc:6d:56:62:b3:45:79:4f:87:52:de:
dd:c1:3d:b5:6d:57:02:64:29:c1:0c:9d:73:82:b1:
c0:77:88:a3:f0:71:7b:4e:25:3d:d0:d6:3e:63:04:
0e:fb:30:38:fb:00:61:bc:3e:4b:c5:af:77:a0:00:
50:c8:b9:d4:17:d1:fe:16:10:dc:a7:63:29:e1:f5:
a3:9c:8a:49:9a:bd:1e:1a:e6:20:48:00:7e:56:e8:
23:f2:bf:04:e3:1e:09:ec:98:c2:33:61:2b:28:27:
7a:c3:b5:2d:69:93:5f:26:02:48:00:24:de:c1:7d:
6c:b6:c6:96:20:0b:ed:9c:3f:e1:c4:17:a9:92:ad:
da:23:4a:ee:b6:20:e3:ce:bc:a5:48:5c:ff:54:52:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:49:D7:41:AD:30:D1:D7:AC:CC:B4:51:9B:86:6D:C5:C0:77:28:BD
X509v3 Authority Key Identifier:
keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c8:cd:81:16:01:24:1f:c6:57:3f:ff:50:86:1b:73:c0:ed:
04:6a:ec:1d:eb:df:22:67:63:d9:92:ca:be:17:eb:f0:eb:07:
29:21:0d:2f:ac:7a:84:f6:b5:8f:1c:b3:77:5c:16:8a:97:5a:
06:0d:bd:1a:fc:42:7f:8b:82:a1:27:8a:96:49:cd:23:01:54:
c3:8e:99:c8:2a:d6:54:70:0b:6f:3c:09:37:d0:e7:04:f9:df:
c6:ca:74:66:75:fc:09:8b:54:83:62:29:0e:b2:dc:3b:1d:4d:
4f:83:db:50:67:0f:8f:d9:aa:8d:d9:f9:75:d7:7c:50:7d:be:
74:77:26:cd:fc:b2:8d:2c:85:44:3d:3b:b5:c8:37:d2:92:46:
66:07:e4:98:dd:fd:d8:8e:d0:73:1d:20:2e:9b:7b:06:40:2a:
4e:94:f7:4c:79:ec:c6:a8:43:7d:1b:b9:61:4f:04:01:f4:9c:
1a:72:c5:f1:62:ac:3a:94:d8:33:37:ab:40:9c:dc:b4:c9:80:
59:4c:4a:f0:81:ca:df:00:39:18:76:2c:19:64:5c:d4:cb:1b:
7d:a2:8b:fa:42:07:a4:ee:24:07:77:8b:65:aa:ca:bd:8f:00:
4d:c6:b9:bb:ec:af:bc:29:c3:72:25:53:c8:d7:34:52:5e:08:
40:6a:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:52:54 2026 by rpki-client