Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: 7/5ac8qxzYZS48Rr5C+dM45o/WfecQQUZpqAWfYHht0=
Subject key identifier: 7E:45:06:F1:41:45:E3:6A:C0:8A:52:53:65:00:F5:21:61:34:A7:F8
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 01A180AB04224725A8BB9AC36EA3E4C3FD24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 1A5A
Signing time: Wed 28 Oct 2026 04:00:53 +0000
Manifest this update: Wed 28 Oct 2026 04:00:53 +0000
Manifest next update: Thu 29 Oct 2026 04:00:53 +0000
Files and hashes: 1: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: DVOrChLOGrAMf7w1Uno4NLRBQx0WV1Y2G4KeaT+chWc=)
2: VYoAIFinaQHxNkoLpaPUIWea3QQ.roa (hash: fC8G8UEbQdEhs80n+8gVQ40HDgx8OQKG34YhOp+AKow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:04:22:47:25:a8:bb:9a:c3:6e:a3:e4:c3:fd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Oct 28 04:00:53 2026 GMT
Not After : Oct 29 04:00:53 2026 GMT
Subject: CN=7e4506f14145e36ac08a52536500f5216134a7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:ed:24:50:52:cf:52:ce:17:f2:75:20:8f:
97:5d:26:7e:33:74:c3:d6:4a:fe:cf:83:86:04:58:
9e:41:4e:0b:a8:94:ec:9a:b1:b1:fd:01:e6:62:6b:
ae:fb:be:2c:4e:5e:cc:6b:ff:89:eb:50:97:69:d9:
89:3c:ae:52:51:c2:59:d7:a8:81:b2:84:62:44:e8:
8a:13:93:f2:a9:cd:82:90:6a:bf:c4:ed:fa:59:49:
d6:0b:b8:b1:42:64:3c:cf:68:a3:72:c5:88:7b:df:
85:45:7e:b2:87:bb:14:de:66:75:20:4a:f5:54:92:
a9:14:53:66:46:30:19:65:d2:a3:2f:b6:13:05:da:
b6:07:e2:4b:a7:66:82:93:0f:ef:39:47:05:7a:57:
b2:3e:7f:8b:58:13:8d:18:7a:18:56:ea:a9:25:16:
f0:ca:68:6e:2c:ce:3d:fc:c1:97:ce:3a:47:8e:30:
b5:67:c2:22:06:e6:7e:70:e7:fd:f4:a5:d0:dc:03:
be:e0:6c:55:bf:0e:4e:a8:e3:f5:25:cb:d6:31:21:
29:eb:b3:ca:36:d1:aa:fc:9b:aa:a8:c7:f2:bb:de:
49:8e:84:7b:d7:29:f2:90:3f:a5:cf:77:37:2c:aa:
02:35:82:ca:06:f9:ff:21:e8:ba:00:5b:75:5f:e3:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:45:06:F1:41:45:E3:6A:C0:8A:52:53:65:00:F5:21:61:34:A7:F8
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1b:b2:d3:96:37:dd:9e:45:4c:aa:a6:1b:2f:81:f2:e9:80:
4c:e1:fb:10:1a:89:fb:9d:49:7b:81:fc:c9:64:ac:61:56:67:
7f:ee:b1:40:55:ef:8a:a3:da:68:28:3a:0b:4c:44:d7:b7:d4:
12:af:1f:f4:ee:c9:56:ad:7d:bd:66:55:94:af:33:2c:16:f5:
49:56:60:fe:e0:23:cf:9a:76:60:48:ba:81:13:01:b1:cd:85:
89:4f:14:ab:5d:94:c1:26:d5:91:f7:24:c2:9c:59:9b:a3:c9:
f2:f2:f4:9e:6f:cc:82:5e:24:28:56:dd:42:c5:8f:db:84:99:
13:0a:c1:d3:5d:dd:ef:4e:5a:40:4a:6c:b4:0e:c6:4a:47:c6:
f9:ef:4b:32:39:f2:80:82:6e:2d:91:12:c6:b6:5a:e8:d2:95:
6c:65:75:04:1a:b4:21:92:82:b3:53:c4:d4:47:05:6c:e1:77:
ce:17:56:28:ab:b6:6a:a5:80:86:47:f0:f4:34:13:a2:ee:89:
b1:c2:8e:82:a8:c3:6a:af:32:b2:ce:d1:47:1a:b5:54:e3:38:
3e:63:00:4b:eb:23:be:61:d9:6d:b9:1a:d0:dd:0d:8e:4a:a0:
45:c0:b7:cd:5b:d2:0b:19:df:b1:24:5f:5f:0d:66:ea:c7:8a:
90:7e:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:06:48 2026 by rpki-client