Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: WPndvYzOZS3HjJ3o72m/WshXPgeIiQxQSDtHG058lSY=
Subject key identifier: D0:32:ED:78:3A:C6:47:D6:6B:7F:5C:5C:46:6D:D1:44:8F:6D:E1:3D
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 019CE4B625D0A852A81F977C232EA5B7C3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 17F7
Signing time: Fri 13 Mar 2026 01:01:08 +0000
Manifest this update: Fri 13 Mar 2026 01:01:08 +0000
Manifest next update: Sat 14 Mar 2026 01:01:08 +0000
Files and hashes: 1: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: 1m1Sjn80A04muGIfWrPasSLfA79ROXV7gwdAxmXIxu4=)
2: VYoAIFinaQHxNkoLpaPUIWea3QQ.roa (hash: fC8G8UEbQdEhs80n+8gVQ40HDgx8OQKG34YhOp+AKow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b6:25:d0:a8:52:a8:1f:97:7c:23:2e:a5:b7:c3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Mar 13 01:01:08 2026 GMT
Not After : Mar 14 01:01:08 2026 GMT
Subject: CN=d032ed783ac647d66b7f5c5c466dd1448f6de13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:76:16:7e:43:31:4e:5f:6b:40:53:cc:77:aa:
de:4c:56:85:b8:4d:b2:0d:e4:e8:31:06:f6:86:5d:
24:b6:f7:68:98:17:57:31:0e:01:25:ed:0b:7f:84:
95:a5:27:8f:4f:c9:79:8a:3b:49:15:07:e7:42:10:
c5:b4:9a:2c:c5:53:37:82:04:ee:2e:b7:90:20:57:
b0:4a:c8:f4:e7:a6:4b:97:f0:01:c2:92:df:79:51:
bc:d4:34:51:f9:a3:a3:fd:ed:73:11:9b:a6:3a:82:
b7:ee:1f:32:4f:b0:8e:81:c1:ea:f6:3b:19:bb:24:
2a:58:e7:92:05:68:2d:89:06:9d:34:2d:ae:be:ae:
35:6a:5d:67:98:7c:43:3b:5f:0c:52:46:35:4d:17:
52:3b:a4:ea:8a:ce:65:1a:8d:f5:d5:96:3b:88:15:
d8:09:28:e7:c7:2a:5d:58:be:c3:22:42:cb:b3:33:
73:f3:0a:a3:46:f3:a6:e9:d7:d9:bf:27:ea:9d:7e:
a0:ec:17:d9:a3:38:a7:0c:45:9c:3a:11:6a:86:d5:
89:ce:fe:d7:72:14:b3:68:e5:a6:60:f6:b5:fe:dc:
d9:9f:2d:b7:d5:a6:94:70:e4:5a:95:1c:89:6c:e5:
9f:81:81:56:14:f1:84:35:c2:b8:a5:01:45:84:4b:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:32:ED:78:3A:C6:47:D6:6B:7F:5C:5C:46:6D:D1:44:8F:6D:E1:3D
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:05:29:ad:95:24:02:2f:1b:23:73:07:0c:c2:cc:c4:f8:04:
06:2f:12:3a:32:f3:81:4c:69:0d:a4:17:9f:53:e0:30:14:5f:
c5:41:02:30:70:6e:5f:8d:d2:db:62:0b:1e:8c:73:01:ea:72:
9b:51:b2:07:60:53:98:6d:2a:98:7f:a7:66:4d:42:a0:07:61:
7f:8a:d1:80:cb:d6:92:9e:db:96:bf:09:70:1f:d0:a5:8c:c8:
8b:18:e8:33:92:9c:67:79:d0:0a:cb:97:e6:3f:9b:95:bc:a4:
21:cf:09:f2:aa:b2:6b:31:0b:83:42:dc:5b:93:b6:ad:86:af:
3b:bb:85:92:0b:6b:c0:dd:66:37:97:c7:4c:42:58:df:cf:b7:
da:59:3e:cb:d1:97:24:0a:49:8a:e3:3d:1d:41:19:aa:3d:e5:
69:60:e9:30:4d:30:d3:09:4f:79:3d:c3:cc:ab:71:38:55:5d:
ca:2c:94:a8:8c:c2:54:dd:6e:7a:96:cd:fc:04:dc:79:e7:7e:
53:1d:8e:64:b7:e1:a7:ca:31:ca:e7:a2:06:35:19:a0:4a:0a:
91:aa:ef:20:ed:c9:41:b0:a6:c1:66:79:2b:e6:4c:40:74:ab:
b9:42:ac:95:c9:42:84:91:8d:ee:99:bf:fe:4a:8c:71:02:df:
f7:ae:74:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktiXQqFKoH5d8Iy6lt8PYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMmI2ZDJhNWQ0MTMwNTYwZjYxNzk2M2Q5ZmJjOTM0NDJk
YzFjY2QwHhcNMjYwMzEzMDEwMTA4WhcNMjYwMzE0MDEwMTA4WjAzMTEwLwYDVQQD
EyhkMDMyZWQ3ODNhYzY0N2Q2NmI3ZjVjNWM0NjZkZDE0NDhmNmRlMTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HYWfkMxTl9rQFPMd6reTFaFuE2y
DeToMQb2hl0ktvdomBdXMQ4BJe0Lf4SVpSePT8l5ijtJFQfnQhDFtJosxVM3ggTu
LreQIFewSsj056ZLl/ABwpLfeVG81DRR+aOj/e1zEZumOoK37h8yT7COgcHq9jsZ
uyQqWOeSBWgtiQadNC2uvq41al1nmHxDO18MUkY1TRdSO6Tqis5lGo311ZY7iBXY
CSjnxypdWL7DIkLLszNz8wqjRvOm6dfZvyfqnX6g7BfZozinDEWcOhFqhtWJzv7X
chSzaOWmYPa1/tzZny231aaUcORalRyJbOWfgYFWFPGENcK4pQFFhEvOcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAy7Xg6xkfWa39cXEZt0USPbeE9MB8GA1UdIwQY
MBaAFEsrbSpdQTBWD2F5Y9n7yTRC3BzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MGVmNDEtMzFmNC00MjBkLWJhZGMt
YzU3NDE1ODUwMmM4LzEvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS80MGVmNDEtMzFmNC00MjBkLWJhZGMtYzU3NDE1ODUwMmM4
LzEvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAUprZUk
Ai8bI3MHDMLMxPgEBi8SOjLzgUxpDaQXn1PgMBRfxUECMHBuX43S22ILHoxzAepy
m1GyB2BTmG0qmH+nZk1CoAdhf4rRgMvWkp7blr8JcB/QpYzIixjoM5KcZ3nQCsuX
5j+blbykIc8J8qqyazELg0LcW5O2rYavO7uFkgtrwN1mN5fHTEJY38+32lk+y9GX
JApJiuM9HUEZqj3laWDpME0w0wlPeT3DzKtxOFVdyiyUqIzCVN1uepbN/ATceed+
Ux2OZLfhp8oxyueiBjUZoEoKkarvIO3JQbCmwWZ5K+ZMQHSruUKslclChJGN7pm/
/kqMcQLf9650qg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:27 2026 by rpki-client