Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: bqpAmZuqU7Sp9NMPSTwqjkMj0yA52j9tulumUC0Z/sQ=
Subject key identifier: D5:3A:F2:31:FD:26:A1:88:9D:24:D9:A7:F7:1E:51:DC:5C:D2:AF:46
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 019DCE6358F52BB467A434CAE1BF77A707DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 10:01:50 +0000
Manifest this update: Mon 27 Apr 2026 10:01:50 +0000
Manifest next update: Tue 28 Apr 2026 10:01:50 +0000
Files and hashes: 1: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: iqlajNDS+IazyfRYOfZsm72wUE4hocn/G5nlFT9LTFA=)
2: VYoAIFinaQHxNkoLpaPUIWea3QQ.roa (hash: fC8G8UEbQdEhs80n+8gVQ40HDgx8OQKG34YhOp+AKow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:58:f5:2b:b4:67:a4:34:ca:e1:bf:77:a7:07:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Apr 27 10:01:50 2026 GMT
Not After : Apr 28 10:01:50 2026 GMT
Subject: CN=d53af231fd26a1889d24d9a7f71e51dc5cd2af46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:29:0e:84:b8:a6:09:6b:d2:1b:19:d9:f7:
c0:53:4e:5d:72:aa:bb:82:b4:ad:7d:6a:72:50:5d:
98:cb:8c:19:e2:37:e8:d3:42:ba:42:04:b0:6d:5f:
3a:52:8e:33:b3:87:66:e2:5f:8c:57:27:91:42:e1:
e0:31:c4:35:8f:39:ee:d4:88:ab:7c:9b:9d:58:0a:
2e:1b:03:99:e3:c7:58:83:48:b8:dc:f1:a2:79:e3:
19:e4:a4:bf:42:7b:8d:fb:fe:f4:90:e0:a7:57:a8:
f1:cb:13:4f:5c:0f:9c:27:8a:c6:f2:be:52:f9:a9:
d1:b9:96:a2:c7:c1:d3:b2:11:d0:47:09:4a:69:2b:
c8:a1:78:64:b0:da:c8:62:cd:fa:cb:46:66:f3:d3:
d4:f9:a3:02:0a:3b:d6:7d:0f:63:c1:d4:a6:41:b8:
d0:44:6c:df:0c:33:45:83:f6:ee:dc:8f:ff:41:4b:
d8:33:97:06:ec:24:18:42:e7:5d:5f:dd:97:a9:8d:
7b:b2:05:b4:a9:55:ce:c0:f5:d4:bb:0f:71:4c:98:
f7:8b:2a:56:25:74:e4:53:56:c1:67:00:d7:60:ec:
ff:1c:48:5f:b1:39:63:13:13:6e:76:06:09:64:08:
58:69:c4:a6:87:b2:ce:21:d7:83:f7:82:c8:ad:ea:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3A:F2:31:FD:26:A1:88:9D:24:D9:A7:F7:1E:51:DC:5C:D2:AF:46
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:54:25:2e:dd:a8:20:4b:39:69:95:6a:50:48:36:4a:90:74:
61:6b:e5:ee:6c:23:99:01:22:29:1e:60:c9:2d:2f:e4:75:96:
53:f6:ba:f6:89:75:9b:f2:f0:80:fe:f2:88:ac:c9:14:4e:c7:
7d:6a:a9:fb:2a:aa:6f:f0:d1:23:d2:0c:fa:80:1a:e0:bc:05:
f2:fb:d2:00:35:9e:2d:00:4b:69:88:0a:8d:65:16:1d:cd:c8:
17:c1:5b:ff:ce:b8:f1:d2:c3:24:d6:a5:7c:b7:6a:7e:cf:49:
0e:09:69:58:36:76:ae:3a:c3:f1:88:68:b7:e9:41:db:15:e8:
67:5c:40:31:75:e2:ad:f1:79:ff:e6:d0:81:3f:7b:6e:29:b3:
e6:01:09:05:fb:61:ce:03:31:4a:fe:3c:8e:32:f1:73:83:40:
f6:54:c5:2f:3a:7e:47:0d:00:64:2d:55:1d:8c:fd:9c:08:02:
b1:a0:bb:46:f3:b5:17:06:c0:d2:45:c8:7e:cc:e8:54:d4:42:
3a:43:1c:8e:e8:c9:c9:10:34:9c:ec:7d:f3:15:0c:0c:3b:6f:
41:8f:d6:6a:61:e5:ae:b1:15:f1:e3:f8:cf:51:d6:b7:c5:a9:
19:03:73:1d:10:70:99:36:82:7c:f2:08:a1:43:cf:1e:77:df:
eb:6f:e6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:37 2026 by rpki-client