Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: bjC6+BBpExreb12HdKf/pRaqVp0toKjKCeAad1kDqEM=
Subject key identifier: 24:09:B7:F3:D9:52:C0:95:F8:8F:2D:9B:A7:76:8E:10:C3:3B:B4:D0
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 019D37C0EFFA93895D9283D0A1DC6239D658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0BB7
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: 3MFVm5Z+ZWaL5iYqNgPG+nHs80kXQGV+djfC/2kmSsg=)
2: k6dlQXV0CNNHoojLjuToM3RWJts.roa (hash: r/95kr/PA/IvIi+wnWxWmGRUKtlOA3OqudcUD32MdDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ef:fa:93:89:5d:92:83:d0:a1:dc:62:39:d6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=2409b7f3d952c095f88f2d9ba7768e10c33bb4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:f4:8f:c9:ae:27:13:eb:82:02:ed:a7:5c:
85:59:64:2f:97:2e:4c:7d:d5:e2:6b:ad:98:a8:f5:
55:16:fa:59:70:a5:79:53:2d:ff:5d:17:3f:f0:ca:
a9:05:9b:70:23:46:a0:40:ea:83:aa:52:b2:ab:19:
07:3a:33:1c:c9:43:64:02:e7:38:be:40:f6:10:fb:
31:31:89:33:e6:d6:8c:38:8a:48:b7:6e:85:37:f0:
a5:c7:b8:14:1b:b2:d7:a3:a7:45:2f:6c:2c:95:19:
cf:13:4d:fc:1a:3d:62:78:08:85:bc:b9:71:d1:7e:
9f:c3:71:06:b7:17:ca:48:43:a0:89:8d:30:ec:1c:
ad:62:5e:6f:3d:49:dc:6f:62:2d:2b:e7:33:ba:a0:
92:fa:ad:44:9e:07:85:1a:77:c8:a8:5a:b7:a6:50:
ef:d7:99:da:a2:51:51:35:26:58:6f:10:71:99:ad:
60:1a:2a:ac:ff:c8:0e:6c:16:8c:22:21:cd:28:c1:
a2:6c:d1:19:58:86:e6:3f:b6:02:7c:d9:38:29:d2:
b2:85:32:a9:cf:2a:b9:b8:4a:21:49:91:73:18:e2:
4f:ca:dc:b3:11:f7:e9:a1:22:ff:f1:58:1e:7a:48:
b2:a5:44:b7:db:9b:76:af:be:f3:90:47:11:40:9f:
fb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:09:B7:F3:D9:52:C0:95:F8:8F:2D:9B:A7:76:8E:10:C3:3B:B4:D0
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:8a:e0:a4:2d:a1:8e:e6:ad:69:4a:ad:27:91:4c:03:43:c6:
99:48:47:40:76:e4:37:93:a7:7b:2d:3e:cb:c4:14:1e:2f:ab:
43:29:21:ea:51:d2:8c:9d:67:61:8a:75:a6:02:39:f2:61:3d:
d8:23:11:1b:62:7c:45:a1:db:c8:5e:d6:00:07:e0:b1:0c:bf:
ca:bb:f2:8c:61:c9:63:41:e3:b3:4c:99:a1:59:4e:df:01:fd:
65:86:ec:17:23:47:27:af:ea:f3:a8:2e:12:36:f1:22:ab:ba:
28:ad:94:7a:f9:2f:70:95:c4:79:91:de:05:19:9d:14:e6:0d:
64:ab:13:b1:dd:fa:67:08:b7:7b:65:cf:a3:a6:be:e2:a0:78:
a2:6e:15:30:f1:9a:25:ab:e7:f0:24:38:50:83:95:cb:d3:66:
6c:a9:56:65:6e:8a:e6:2d:d0:a4:c1:aa:8b:6b:6c:58:07:6a:
f4:87:c1:c3:59:7b:81:63:ad:cd:c3:24:50:4e:bc:9a:e6:95:
78:47:de:1b:71:f5:c2:3a:34:d0:5e:4b:af:da:d4:75:6e:cf:
2b:5f:31:39:aa:96:e5:af:57:44:47:5a:7b:4e:57:fe:83:e4:
16:da:08:2d:f5:01:c8:d7:15:32:bc:c5:58:ff:26:6b:f7:63:
72:c9:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:55 2026 by rpki-client