Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: T1ND2C+k5cR6Q8VqhXzCiVI3rdOnX6M/supkaNTkreQ=
Subject key identifier: 3A:40:3C:CE:25:04:D0:A7:0A:C5:B4:0F:34:92:7E:0D:1B:58:3A:8C
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 019EB9FCDBEF3DC3C8B3A83548A2A385E18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0C7F
Signing time: Fri 12 Jun 2026 04:00:16 +0000
Manifest this update: Fri 12 Jun 2026 04:00:16 +0000
Manifest next update: Sat 13 Jun 2026 04:00:16 +0000
Files and hashes: 1: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: PoJbDX06XWJ/jq6Jby/dWmfonbIxb1TIZ78xC8/ah38=)
2: k6dlQXV0CNNHoojLjuToM3RWJts.roa (hash: r/95kr/PA/IvIi+wnWxWmGRUKtlOA3OqudcUD32MdDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fc:db:ef:3d:c3:c8:b3:a8:35:48:a2:a3:85:e1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Jun 12 04:00:16 2026 GMT
Not After : Jun 13 04:00:16 2026 GMT
Subject: CN=3a403cce2504d0a70ac5b40f34927e0d1b583a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:ac:9b:1a:75:7a:6a:2a:2a:96:73:71:8e:
08:ac:0e:de:b0:2c:6a:c2:33:43:dc:6e:34:b4:9e:
6e:f6:eb:56:1d:ab:2b:6d:46:e6:c2:be:af:7d:c2:
de:b9:b0:67:00:8d:b0:6c:1f:fd:25:fa:ee:e1:f4:
2b:ac:27:22:c8:a4:e8:07:05:ed:cc:b8:c5:1c:0c:
8c:39:aa:ee:bb:8d:5e:a5:23:09:7b:2f:52:dc:81:
3b:34:3f:ab:35:d3:69:24:a5:93:fb:68:cf:1d:7e:
f6:6e:e5:81:53:53:85:ed:b4:97:15:ee:6e:79:3e:
57:22:21:18:99:4b:16:1e:f1:d5:f1:c8:6f:13:73:
52:9b:97:ae:60:d4:33:d9:92:13:15:33:ac:2f:39:
ff:f0:8a:43:71:36:53:50:13:3a:60:10:9c:d6:ef:
51:a3:da:ba:b2:ea:47:4e:36:6a:9a:d2:6e:9f:d7:
f4:c6:87:4d:be:ea:db:98:f5:d3:60:2d:32:f7:42:
c8:91:19:ce:92:2a:7d:ff:4a:37:3c:60:d3:85:40:
3d:c1:31:e2:ed:72:3a:1e:b8:da:ca:29:d7:3e:51:
98:36:04:81:bf:9d:4b:c7:bf:1e:37:e9:56:99:93:
63:21:5a:a2:b5:79:a8:ae:e3:76:96:34:08:81:80:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:40:3C:CE:25:04:D0:A7:0A:C5:B4:0F:34:92:7E:0D:1B:58:3A:8C
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:58:41:e2:6d:fa:35:52:3b:69:0c:8a:ee:5a:af:dd:20:dd:
8d:5f:ee:bc:03:4d:bc:16:9d:73:21:36:ff:0a:aa:20:8f:bf:
dc:cb:38:ac:ce:62:7d:9c:21:64:95:dd:48:9c:b7:68:5f:c1:
2b:03:43:5d:01:9e:f4:fd:0c:ee:41:ce:d2:9b:46:15:9e:4d:
e2:45:e8:38:28:ad:0e:fd:99:f2:e7:f7:ea:05:96:3f:f2:93:
f9:c9:06:3f:c5:1a:5f:a2:d6:a2:c4:41:23:71:0c:81:fc:73:
f1:84:1b:80:bf:59:4c:70:c0:26:3d:02:18:d9:a9:eb:5d:5b:
71:95:61:98:87:93:99:5f:7a:6d:50:ac:da:17:82:d1:7a:1d:
05:d9:3e:9d:20:ea:40:b1:66:2c:9b:27:73:23:53:3e:f3:f3:
e4:d8:da:68:21:74:fb:74:14:a1:74:b2:3e:a2:69:5a:2a:c7:
15:25:76:52:da:03:0d:78:ff:de:0a:65:e5:f3:ba:a5:bb:70:
cc:18:42:b5:50:ab:04:8d:97:7e:6c:4c:36:fb:58:ed:d9:4c:
5d:54:c8:e6:76:c5:75:47:29:73:51:01:e7:31:2b:01:3d:2c:
8f:9e:0c:87:ad:70:d7:45:a9:ea:cd:46:7e:67:af:0b:15:69:
02:dd:ae:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/NvvPcPIs6g1SKKjheGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw
NTA4YjcwHhcNMjYwNjEyMDQwMDE2WhcNMjYwNjEzMDQwMDE2WjAzMTEwLwYDVQQD
EygzYTQwM2NjZTI1MDRkMGE3MGFjNWI0MGYzNDkyN2UwZDFiNTgzYThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbasmxp1emoqKpZzcY4IrA7esCxq
wjND3G40tJ5u9utWHasrbUbmwr6vfcLeubBnAI2wbB/9Jfru4fQrrCciyKToBwXt
zLjFHAyMOaruu41epSMJey9S3IE7ND+rNdNpJKWT+2jPHX72buWBU1OF7bSXFe5u
eT5XIiEYmUsWHvHV8chvE3NSm5euYNQz2ZITFTOsLzn/8IpDcTZTUBM6YBCc1u9R
o9q6supHTjZqmtJun9f0xodNvurbmPXTYC0y90LIkRnOkip9/0o3PGDThUA9wTHi
7XI6HrjayinXPlGYNgSBv51Lx78eN+lWmZNjIVqitXmoruN2ljQIgYByuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpAPM4lBNCnCsW0DzSSfg0bWDqMMB8GA1UdIwQY
MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt
MDA0MDNiNjQwNTVhLzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh
LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVhB4m36
NVI7aQyK7lqv3SDdjV/uvANNvBadcyE2/wqqII+/3Ms4rM5ifZwhZJXdSJy3aF/B
KwNDXQGe9P0M7kHO0ptGFZ5N4kXoOCitDv2Z8uf36gWWP/KT+ckGP8UaX6LWosRB
I3EMgfxz8YQbgL9ZTHDAJj0CGNmp611bcZVhmIeTmV96bVCs2heC0XodBdk+nSDq
QLFmLJsncyNTPvPz5NjaaCF0+3QUoXSyPqJpWirHFSV2UtoDDXj/3gpl5fO6pbtw
zBhCtVCrBI2XfmxMNvtY7dlMXVTI5nbFdUcpc1EB5zErAT0sj54Mh61w10Wp6s1G
fmevCxVpAt2ujQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:25:42 2026 by rpki-client