Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: sXFEgO9LmBhiiN9fUGHGzCqTZqGXcgFwR7DlE7H2PrA=
Subject key identifier: 9E:F9:9A:9E:53:4B:F9:4C:E4:0A:C3:7F:A0:E2:F7:BC:13:0C:DE:28
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 019FA3AA0421EA5CA1D0659FC911BF84BEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0CF8
Signing time: Mon 27 Jul 2026 13:00:56 +0000
Manifest this update: Mon 27 Jul 2026 13:00:56 +0000
Manifest next update: Tue 28 Jul 2026 13:00:56 +0000
Files and hashes: 1: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: m4q2iukLx5D82GGU0TNqW8MZ9eiYYA0AnYA8N5J0Mtk=)
2: k6dlQXV0CNNHoojLjuToM3RWJts.roa (hash: r/95kr/PA/IvIi+wnWxWmGRUKtlOA3OqudcUD32MdDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:aa:04:21:ea:5c:a1:d0:65:9f:c9:11:bf:84:be:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Jul 27 13:00:56 2026 GMT
Not After : Jul 28 13:00:56 2026 GMT
Subject: CN=9ef99a9e534bf94ce40ac37fa0e2f7bc130cde28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2b:77:cf:97:3e:dc:42:ba:55:a3:34:3a:f1:
25:74:7d:fd:cb:9e:34:f0:bc:cd:a8:07:f9:19:e8:
ef:cc:fd:7a:5d:8c:2a:cb:a5:54:37:3d:b7:7a:e0:
36:34:a4:51:4c:9d:a4:7c:12:cf:89:4b:0e:0b:0a:
72:27:9e:db:48:d1:57:fb:3d:09:0d:fc:9e:6a:ce:
e4:70:7f:34:5a:9f:d3:e3:05:3a:f3:c5:90:fb:5f:
96:36:9a:d9:6b:3e:37:86:8f:1d:e6:3e:18:f3:ef:
ac:ab:52:8c:03:03:15:5a:7e:70:18:e5:ac:a3:63:
ea:7c:75:05:46:d0:52:b6:6b:43:d4:c6:ce:a0:7b:
6c:5b:13:6d:42:94:f2:4e:94:2f:f8:c0:81:9f:fb:
4a:00:d7:dd:85:51:2e:29:0a:cf:8a:3b:0e:aa:e3:
56:1f:c8:58:b4:1a:74:ea:01:de:46:61:f7:57:7a:
41:a0:64:9f:a3:b6:69:af:63:71:5f:c9:33:66:5f:
b8:a1:51:30:4f:d7:6c:42:8d:30:01:99:c9:ab:dd:
38:9a:95:93:00:90:64:0a:d5:0d:53:b7:db:89:d1:
2d:09:b8:30:eb:5b:30:e0:04:71:fe:26:1d:8b:05:
b0:d1:ab:40:29:c2:26:fe:58:19:df:21:6d:eb:94:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F9:9A:9E:53:4B:F9:4C:E4:0A:C3:7F:A0:E2:F7:BC:13:0C:DE:28
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fe:72:4e:48:3d:1f:1f:f8:e1:53:75:5e:80:4f:02:d5:e7:
56:62:ce:d8:e0:42:09:d0:86:87:3d:f8:8c:46:80:cf:e5:30:
7c:4b:de:fd:3c:53:b2:f9:e2:4f:d7:6f:88:23:dd:71:63:fa:
29:b9:86:e1:ac:4d:69:d4:0e:95:6f:b8:b7:1f:24:17:a8:b6:
97:1b:36:29:f4:d4:8d:42:27:7b:f5:18:b0:86:7c:ee:a8:92:
b0:ae:e5:30:52:8b:76:c0:50:c7:3f:51:f2:ee:e1:0f:97:fa:
e2:80:e7:71:7a:26:13:eb:5b:05:0a:a7:1a:de:b9:9b:fd:6d:
a7:dd:7c:fc:0f:ab:db:12:4f:74:95:62:4b:e7:18:56:f0:60:
fa:7a:be:73:c3:d1:a4:59:8b:03:2f:66:23:08:0f:c3:0f:ed:
ca:31:69:de:a5:6f:a3:97:3d:e4:ad:87:28:7c:ac:ce:58:df:
75:49:34:1b:1d:e4:5f:d8:70:33:ff:95:b7:14:58:74:97:2d:
b4:56:a8:0d:76:93:d6:d8:ab:a4:f6:c9:1d:f8:3a:6b:97:70:
44:f1:67:53:39:5f:6a:2f:c3:ab:af:80:73:99:63:4d:1c:a6:
21:41:01:3e:f6:c6:e0:28:47:57:8f:1a:2d:13:44:33:27:c4:
cd:a4:d4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:03:37 2026 by rpki-client