Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: f2aRLXtCJ0Wx8Q8PKoR5czW7o0xpKyAjZBW0+CmoyIk=
Subject key identifier: F3:ED:B9:F5:CE:56:92:E4:65:2A:E9:AB:33:AE:D7:C0:B4:0A:51:92
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 01A08B67F11C31EB35CE76E466B549BAB499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0D70
Signing time: Thu 10 Sep 2026 13:00:39 +0000
Manifest this update: Thu 10 Sep 2026 13:00:39 +0000
Manifest next update: Fri 11 Sep 2026 13:00:39 +0000
Files and hashes: 1: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: Rc0oY6Wru5rnPFhdKjgKLy73/a+H08Dr6wz3ke38Dgk=)
2: k6dlQXV0CNNHoojLjuToM3RWJts.roa (hash: r/95kr/PA/IvIi+wnWxWmGRUKtlOA3OqudcUD32MdDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:f1:1c:31:eb:35:ce:76:e4:66:b5:49:ba:b4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Sep 10 13:00:39 2026 GMT
Not After : Sep 11 13:00:39 2026 GMT
Subject: CN=f3edb9f5ce5692e4652ae9ab33aed7c0b40a5192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:a7:c1:51:6d:29:a1:e1:f9:79:3e:4c:95:
59:30:fb:29:ad:64:7a:67:a3:77:9b:fc:aa:85:4e:
b9:a8:48:76:1b:ae:e2:d4:04:6f:af:0e:ea:08:a6:
1b:92:ef:be:08:5a:69:86:03:20:fe:ce:c7:c1:b9:
5e:40:23:a7:54:9f:00:81:9c:d1:8d:e0:57:25:d4:
9c:ba:8f:1c:bf:e5:5a:dc:3e:b7:7f:5a:49:30:f5:
cd:2b:f5:a4:e8:97:fc:17:1c:35:c3:fb:11:20:7b:
cb:62:eb:dc:b4:91:6d:61:63:46:0b:e8:25:c6:55:
ec:d1:a1:eb:05:84:24:70:68:eb:f8:c3:cf:fc:f0:
f1:c7:bf:e2:44:46:5c:d6:0d:a7:7e:bb:9c:7d:8a:
72:fe:ed:00:a9:99:ef:b3:f9:18:b9:dd:7d:2c:c3:
8f:b7:7b:cc:56:8f:c8:45:b5:02:fe:d8:a2:05:e0:
1b:8f:55:05:bd:65:44:8e:e4:75:a4:a5:d8:51:2b:
ad:03:ef:31:66:54:65:e6:b6:bb:89:d4:48:d4:b9:
6c:7c:72:e0:b5:ee:37:04:4d:ce:6e:3c:cc:40:1f:
55:b4:a6:f7:14:f3:a8:f3:7f:b2:d7:05:64:43:21:
06:e0:7c:6b:05:ff:9d:80:c8:ba:50:9d:78:09:5d:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:ED:B9:F5:CE:56:92:E4:65:2A:E9:AB:33:AE:D7:C0:B4:0A:51:92
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:e0:05:53:f6:5b:6d:82:dd:37:2b:d7:93:65:1f:96:05:f5:
ca:c3:49:62:4c:45:9d:3c:b9:c9:2a:44:23:2e:e2:4c:a2:6d:
48:8e:41:e8:ab:66:33:68:77:09:4e:23:a6:d5:be:a6:0b:67:
d8:6f:c4:9e:37:ef:02:cc:26:ff:8e:e3:d0:db:a5:86:b4:d0:
88:d7:db:ee:d9:81:39:f3:85:ba:57:cb:bb:36:39:ea:89:a9:
1d:f4:14:26:ad:a1:70:16:b5:bd:39:9d:53:34:68:45:5b:bc:
44:15:44:e0:10:e2:54:ca:46:24:6b:0f:cc:76:14:c1:cf:eb:
a6:bb:b4:da:90:1c:6b:07:23:43:ad:a0:47:8c:15:b8:9d:b1:
cd:ee:71:f5:8f:63:25:cd:de:c5:4e:2f:7b:fd:f7:f8:b7:f6:
97:3b:2c:33:be:76:b2:e2:e7:9e:32:eb:2a:c5:46:bf:f9:a7:
5c:28:10:a8:02:c1:ae:f9:5f:f6:b9:ba:e5:d0:c3:10:d7:6a:
e8:44:31:39:0e:87:25:4a:83:3e:a6:74:7e:ce:0d:93:f6:30:
1c:22:21:16:04:35:36:d0:6e:16:9d:7b:a6:9f:98:86:c7:a4:
3a:d6:97:77:59:df:18:80:13:d1:9c:02:2a:ce:84:a2:b4:94:
9c:6b:4e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:09:00 2026 by rpki-client