Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File: SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier: fevMTWRjftoHMXEIU0Ew/wV4pCpRGcxwu3G1b8zZe9g=
Subject key identifier: B4:73:F2:B6:EB:A2:9A:B4:C1:5D:3B:20:C6:DA:AB:82:00:DF:B2:64
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial: 019D378911FACC99EA42A5A188CB03383EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number: 0CEB
Signing time: Sun 29 Mar 2026 03:00:22 +0000
Manifest this update: Sun 29 Mar 2026 03:00:22 +0000
Manifest next update: Mon 30 Mar 2026 03:00:22 +0000
Files and hashes: 1: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: WFNwpPXj1XdCA2K1qOudWtmf7HOvQUV5vQaAh2NQeGI=)
2: ylO6N8900P88QZefA7Dn01NvgPI.roa (hash: U+/e2PWVxHjZOQFTR/YGHyNLL4yvYXeZwDjW8HXteac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:11:fa:cc:99:ea:42:a5:a1:88:cb:03:38:3e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Validity
Not Before: Mar 29 03:00:22 2026 GMT
Not After : Mar 30 03:00:22 2026 GMT
Subject: CN=b473f2b6eba29ab4c15d3b20c6daab8200dfb264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:c0:f4:8b:8b:be:fb:b5:d8:17:ac:3a:f6:
09:79:0c:f3:a5:92:f6:9f:00:a7:f0:f5:ac:a1:96:
12:cc:e9:06:64:f2:d5:40:a7:8f:3d:85:3d:1f:17:
e4:d4:48:e6:4e:1b:32:0a:49:03:7b:79:25:ce:f9:
f4:45:35:4d:b5:a0:2e:82:c2:12:7b:19:09:85:0a:
07:76:53:da:bd:dc:f6:74:91:22:bb:22:3d:69:d0:
a8:cb:81:fe:2c:3b:c6:1b:a5:fe:d7:1f:f6:ee:8e:
2b:4d:b7:6c:46:3a:97:29:15:12:9e:85:5d:58:43:
3f:7a:33:1d:0c:13:8c:1f:d6:31:ea:e3:20:71:d5:
52:c4:71:24:3b:5c:93:b7:09:67:b1:f2:b2:7a:45:
03:28:e6:fe:44:9c:95:61:20:8e:9a:88:d2:38:01:
d2:75:58:2b:fe:27:8e:ab:47:f6:ee:2b:0f:d5:1a:
a0:3d:6d:14:9e:d5:14:b7:7d:30:e8:ab:9b:7d:1f:
6c:d7:03:bd:95:2d:34:85:d9:2e:78:3b:b2:c8:e8:
79:ec:4c:fc:fd:db:79:86:9c:a6:d6:82:39:48:84:
24:d5:22:00:2f:2e:ee:b4:da:28:28:c0:67:66:08:
dc:88:92:b9:3f:d3:86:b2:de:d1:c1:18:63:2c:0a:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:73:F2:B6:EB:A2:9A:B4:C1:5D:3B:20:C6:DA:AB:82:00:DF:B2:64
X509v3 Authority Key Identifier:
keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b5:1b:46:66:fa:6b:24:44:49:9a:b2:f2:42:b4:77:8a:f5:
8d:9a:3f:37:ef:61:b8:e5:8a:7e:09:aa:2a:1a:c7:8b:ef:93:
ef:a8:6b:21:9b:7d:e8:4d:0f:49:28:29:79:49:da:92:d9:26:
53:ee:0b:7f:0c:0c:5d:19:e0:b8:19:0e:88:36:42:7f:06:6f:
8c:cb:98:a0:a6:a2:d8:c1:c0:7c:81:3c:c2:45:53:c6:d8:35:
44:90:a1:f9:bb:2f:e4:76:42:f2:b8:a0:d6:08:35:ec:47:bb:
76:9b:52:31:6b:e2:73:02:9d:fe:81:a9:86:b3:55:85:7e:95:
ed:72:9f:3b:d5:aa:78:0f:0b:81:ee:df:8c:76:cc:8b:c7:47:
00:0e:64:9f:d5:53:12:4f:b1:38:ee:03:33:f8:35:2a:5e:3d:
99:27:11:0e:c8:31:5d:3c:f7:a3:22:3e:c2:e1:8f:eb:02:49:
0c:19:98:a1:41:02:df:0a:57:46:b2:02:7a:5a:7d:15:d8:9b:
c6:60:fd:cd:02:4a:92:3d:82:7e:28:83:91:b1:cb:a2:34:e0:
61:e6:45:ee:fa:45:b6:91:18:18:68:b5:06:16:36:7a:d2:33:
e2:80:15:c4:4e:58:31:04:a3:a9:0f:7a:bd:7d:eb:58:66:e0:
99:93:8e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:31 2026 by rpki-client