Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: bf6ecRo4P7X3twfLEj03tJ0h0HrvYiRQKt8T1toPMx8=
Subject key identifier: 03:9B:7E:5A:AE:C1:AD:79:1E:DD:08:C0:D1:3E:59:23:79:B7:BA:D3
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 01A17EBD2B349C62B6B03F2AA84FB7F8B28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0DEE
Signing time: Tue 27 Oct 2026 19:01:28 +0000
Manifest this update: Tue 27 Oct 2026 19:01:28 +0000
Manifest next update: Wed 28 Oct 2026 19:01:28 +0000
Files and hashes: 1: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: EIW11wCPDr2APA/+GtloOK86ltAhP3nGqZMLo3Vnmb8=)
2: k6dlQXV0CNNHoojLjuToM3RWJts.roa (hash: r/95kr/PA/IvIi+wnWxWmGRUKtlOA3OqudcUD32MdDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:2b:34:9c:62:b6:b0:3f:2a:a8:4f:b7:f8:b2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Oct 27 19:01:28 2026 GMT
Not After : Oct 28 19:01:28 2026 GMT
Subject: CN=039b7e5aaec1ad791edd08c0d13e592379b7bad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cf:a9:17:7e:64:82:3a:4b:98:d6:dd:e1:8f:
cd:de:7b:a5:4d:e4:77:82:e4:a4:8e:c2:c8:91:cc:
fb:e5:53:2f:05:81:5e:43:59:b9:8a:c9:ad:7f:98:
9f:93:63:54:a8:0a:2c:25:91:ed:ba:96:f9:99:e6:
15:09:ee:a5:75:9e:d5:2c:b8:73:4d:49:2a:e4:1b:
c7:30:ad:cf:75:53:7a:f6:13:ae:e1:2e:52:58:21:
fb:d5:36:b1:05:34:8b:0f:3c:27:77:2f:18:e0:0c:
9d:84:2a:7e:3c:81:33:75:8d:ea:4e:f0:d0:2f:66:
44:52:c8:3a:68:ae:fd:8e:3b:12:06:14:ec:a1:75:
72:93:5f:b5:5e:21:25:4b:17:76:54:59:04:c2:c4:
2e:ff:8b:3a:57:26:ff:28:83:73:55:5b:1b:af:e4:
17:2e:f4:3d:ba:bd:bc:11:74:70:4b:a2:ea:f6:fe:
c0:08:9a:b1:bc:3c:b6:85:1c:07:5e:f4:a3:41:cf:
85:10:a3:28:3c:88:bf:85:55:ea:ad:b7:fe:09:d6:
4c:84:6c:22:87:8e:97:e9:5a:84:76:fb:39:94:ba:
62:c3:16:4f:6c:b5:f8:45:fe:02:c4:d6:0b:36:58:
17:5f:1a:14:b6:1c:b4:70:f0:5a:cd:b3:7e:a6:69:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:7E:5A:AE:C1:AD:79:1E:DD:08:C0:D1:3E:59:23:79:B7:BA:D3
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:46:dd:60:bb:b7:92:49:5b:53:c0:10:41:bf:08:4d:26:ab:
27:ac:37:6a:46:9e:9b:2f:68:62:75:e4:ec:e1:47:f2:24:47:
e9:c5:55:f2:37:77:68:6a:00:b6:93:c8:f4:f4:d6:6d:52:57:
f6:c9:60:fd:45:34:b2:09:07:9b:ac:d6:69:5a:0d:6d:f6:ea:
7a:2c:d7:e7:ac:c0:9f:28:64:28:07:6a:8c:63:91:41:d6:d6:
83:70:e8:71:a5:06:78:2c:eb:41:d1:79:53:d2:2f:41:31:f1:
e5:3a:9e:53:ff:55:dc:cd:f8:12:c4:d0:e2:ce:6c:6e:26:33:
fa:d3:11:13:d0:38:c6:84:99:69:45:8f:36:80:39:d6:9b:66:
da:ba:f9:ef:f3:37:fb:e3:73:dc:9a:3b:99:82:cf:74:b6:44:
d5:b2:fd:85:1f:b1:0d:25:c3:f3:e8:0e:50:46:6f:17:75:4d:
cf:38:14:91:74:0b:75:bc:35:34:fa:5d:6f:fd:ea:f4:20:26:
52:ea:23:21:39:59:fd:9d:3b:b9:87:0e:1a:a3:2a:0d:91:74:
95:3b:37:9a:5c:6a:cc:57:91:8e:99:0c:75:71:cf:1e:90:db:
ee:82:94:a5:53:6c:8b:2d:e2:a2:9d:16:5a:2a:54:67:3d:35:
65:54:9e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:04:40 2026 by rpki-client