Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier: KibE1Fqz+r6UNY2NzqqmFDhIMNai/B665S+urxmmWa8=
Subject key identifier: A4:16:2A:B2:DF:38:A5:B7:2F:3D:81:9D:CB:CE:4C:30:73:9D:32:E1
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial: 019D0AB1311D7D31FBB76E1E411784F0E40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number: 0455
Signing time: Fri 20 Mar 2026 10:01:17 +0000
Manifest this update: Fri 20 Mar 2026 10:01:17 +0000
Manifest next update: Sat 21 Mar 2026 10:01:17 +0000
Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: +zYQu8GiRDjGLoA8JOI7NvjbAjSom2c5Kpwhc/Jq6LM=)
2: zqYVRlTgvHpJDmnzblzgqUd1qtQ.roa (hash: e8da42eEgoMlNnpHHSa7Q7x96Sq3pNxhBs6tD28L410=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:b1:31:1d:7d:31:fb:b7:6e:1e:41:17:84:f0:e4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
Validity
Not Before: Mar 20 10:01:17 2026 GMT
Not After : Mar 21 10:01:17 2026 GMT
Subject: CN=a4162ab2df38a5b72f3d819dcbce4c30739d32e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:de:6a:0e:c4:dd:15:fa:54:d9:f0:18:e0:
8d:b1:37:10:e8:2c:22:fe:ee:99:4e:70:35:48:f3:
4c:97:46:33:ab:e5:fd:e7:c3:9b:3d:96:ae:63:bc:
ad:47:20:85:10:fd:5a:d5:4f:0b:dc:dc:da:24:f1:
d5:0c:08:fd:c4:34:b5:a1:7b:40:dc:d4:53:1b:43:
62:b3:4b:de:04:ee:bc:1d:cd:45:70:9a:05:b7:2c:
44:10:8f:60:d6:61:af:83:04:cd:0d:1d:52:59:49:
52:7a:0c:68:2a:ad:4a:50:1d:68:53:8e:45:4b:d6:
e8:72:8f:fe:72:40:f5:ba:c4:fa:b3:5e:04:9a:2b:
b8:77:4b:db:bf:16:21:6a:a3:16:4d:fd:eb:72:69:
65:3e:aa:17:18:f8:4d:31:0b:1c:0b:dc:7e:5b:bc:
6e:95:89:8a:f6:18:97:7e:a9:88:34:2d:c8:da:2d:
c7:b2:6f:ad:6e:7b:43:14:c6:d6:99:5c:73:c5:8c:
2a:82:49:9e:c8:0f:8e:65:46:66:24:8a:b8:a7:88:
41:63:b8:8f:eb:98:fd:5c:ce:8e:7d:8f:4a:24:c1:
e1:0c:04:47:13:f3:14:8b:0a:f6:40:64:54:06:67:
68:0c:4b:7a:6e:3a:bf:2e:37:ab:58:cd:dd:10:89:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:16:2A:B2:DF:38:A5:B7:2F:3D:81:9D:CB:CE:4C:30:73:9D:32:E1
X509v3 Authority Key Identifier:
keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6f:9d:11:9b:17:6f:7e:b3:8c:77:64:c8:a4:cd:ff:ea:e1:
ae:77:cc:e2:86:9b:27:18:c0:a1:89:8f:8b:c6:38:56:75:7a:
b3:f1:07:72:84:27:3e:b3:c8:7b:77:51:97:89:e0:22:6c:6b:
fe:90:40:f3:ee:73:af:34:dd:8e:18:72:49:17:a8:5c:4c:7e:
99:84:eb:78:82:32:e0:04:84:f7:4f:cf:b4:3d:e2:fd:9a:ea:
f5:ce:c1:92:33:5b:ff:67:64:ef:6e:10:85:5d:c0:e4:8a:89:
ae:e1:7c:69:29:8c:fc:d1:96:f7:60:10:12:c4:51:8b:c8:76:
fc:4a:50:ef:e4:a5:2e:a2:65:45:52:6b:3f:84:53:a1:91:bc:
96:43:c4:a2:05:c6:51:d7:b0:d1:d1:03:f8:7d:84:01:3c:18:
b4:e9:b4:c1:ed:e3:7d:ab:1c:cf:d3:41:30:50:36:80:6d:2e:
ff:e5:22:09:74:15:b8:fd:e3:93:27:57:d2:6e:c3:28:76:f6:
46:fa:d4:36:45:93:90:e6:fb:95:c0:4d:a8:35:cf:ff:5a:b7:
12:5e:3b:02:ce:f9:78:92:6c:ba:f7:90:fb:28:d3:30:f3:93:
d8:dc:9d:b0:9f:f9:7d:be:63:74:60:1c:fe:52:8d:0e:f9:da:
35:d1:13:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 21:15:05 2026 by rpki-client