Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
File: Sy7AqbnmDoZSFoymnZI58nMHw3I.mft (raw, json)
Hash identifier: AwbeQE5zRqLKr6m7aFQ20NBthikiGG2oF86kbMdEg4c=
Subject key identifier: 36:54:BC:0F:16:38:EF:12:61:E9:94:3B:AF:E6:D5:3A:4C:73:CA:BC
Authority key identifier: 4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
Certificate issuer: /CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Certificate serial: 01A17E4F74179DF92F8D374739B76C46A676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
Manifest number: 1A2B
Signing time: Tue 27 Oct 2026 17:01:38 +0000
Manifest this update: Tue 27 Oct 2026 17:01:38 +0000
Manifest next update: Wed 28 Oct 2026 17:01:38 +0000
Files and hashes: 1: ED5p1B1IxAZmQOzt6AanfGEwViA.roa (hash: Vgy/saespTYCm8/+U6m7bOHGz/WxK5i8EHUgIoHte9o=)
2: Sy7AqbnmDoZSFoymnZI58nMHw3I.crl (hash: LjzmNh9Qu0rvkZwz2ioUh2peU4ZKcrQPT5SmXpG6Yko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:74:17:9d:f9:2f:8d:37:47:39:b7:6c:46:a6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Validity
Not Before: Oct 27 17:01:38 2026 GMT
Not After : Oct 28 17:01:38 2026 GMT
Subject: CN=3654bc0f1638ef1261e9943bafe6d53a4c73cabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:08:84:e9:24:7b:ea:86:f7:4b:9a:07:32:
ad:15:28:46:bb:9e:1f:10:66:dc:ce:35:69:06:2e:
49:dc:f3:3d:4c:36:04:d4:57:92:cc:c4:e8:1d:9c:
9f:cc:76:40:51:98:37:b6:1b:a7:83:60:8c:2d:b1:
79:60:fc:bd:35:55:e4:a6:9a:3e:c5:21:9c:3c:44:
72:67:07:d4:1e:ab:59:d0:18:9f:1d:b1:c4:7f:35:
78:63:43:43:d5:c9:fa:fb:0c:de:2f:09:da:8b:f6:
ea:93:37:b7:78:c2:59:f4:ee:e3:e1:98:f7:e4:b8:
09:43:ae:63:44:c3:e4:b0:5a:3d:aa:be:5a:a9:59:
1b:a0:a4:34:97:57:c6:a0:c0:c3:d5:4a:83:a9:db:
de:78:f6:41:ea:30:48:13:bc:c7:6d:4b:ac:c2:78:
84:09:e5:33:3e:09:e1:5b:a3:b5:27:d8:b2:0f:5a:
da:dc:09:25:db:a1:cd:ee:e4:85:8e:dc:ab:19:ea:
66:bf:c6:f8:f4:24:9d:7a:01:e7:9d:ee:56:d8:b5:
00:62:4e:7f:a8:46:b7:7e:3b:ca:c7:21:b2:98:b5:
6b:9b:dd:7a:14:1a:03:ba:3c:4c:4e:d1:3e:35:02:
50:a6:6e:4d:14:1e:41:56:92:4f:3e:4f:89:d6:a5:
d3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:54:BC:0F:16:38:EF:12:61:E9:94:3B:AF:E6:D5:3A:4C:73:CA:BC
X509v3 Authority Key Identifier:
keyid:4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8c:45:43:41:b1:75:6a:93:3f:a1:b6:07:3e:37:ab:f5:64:
7c:74:e0:42:36:42:f2:7a:ba:37:21:af:05:b8:f2:59:c2:2d:
2c:19:2e:b4:98:af:0a:43:72:f8:9a:15:7a:7b:f7:da:12:60:
e3:38:46:9e:43:70:af:71:e0:72:ee:a0:7c:af:67:1c:d7:ae:
85:8c:2f:c9:34:bf:4a:cc:b0:9e:6b:1b:74:01:e7:46:2f:85:
2a:d5:48:7c:a6:8a:35:11:48:8b:e7:c7:6d:21:21:aa:6c:ba:
21:cd:6b:59:6f:76:09:ae:66:a0:63:d7:ad:39:9f:56:ea:8b:
59:be:3e:28:36:b6:32:70:42:43:ff:56:4e:42:74:54:9b:d6:
8f:6e:ca:d8:e8:18:ed:a9:9c:45:5c:f5:83:90:51:ee:41:30:
99:2b:d2:05:e7:f2:e2:1a:d4:45:f2:33:22:0f:7b:e9:6b:2c:
a6:96:92:49:f7:68:07:89:d5:3e:21:99:f2:0f:f9:5e:f6:55:
d6:39:e3:84:d5:e8:2f:7e:60:f1:f3:87:d2:ae:38:c0:43:67:
18:00:31:80:98:86:f8:60:2c:e7:8e:81:d8:9d:d9:bb:e4:4a:
43:a9:84:77:c6:a0:48:1c:29:16:d1:17:f2:ce:4c:77:9a:3f:
84:53:cd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:29:44 2026 by rpki-client