Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: iAz/dOm0ArpfUFslbjNgvXKsrb+X9ZzfOwq+bZ083jw=
Subject key identifier: 08:BF:EA:B7:2F:BA:7B:17:F8:79:20:93:47:D8:B8:47:FE:79:F1:FA
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 019FA3AA34A5334A845E3027B6094A997831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 1963
Signing time: Mon 27 Jul 2026 13:01:08 +0000
Manifest this update: Mon 27 Jul 2026 13:01:08 +0000
Manifest next update: Tue 28 Jul 2026 13:01:08 +0000
Files and hashes: 1: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: AJfeEwmHrvuW1C8oirdS07vF59GyG4E5U/ae3uoTf8U=)
2: VYoAIFinaQHxNkoLpaPUIWea3QQ.roa (hash: fC8G8UEbQdEhs80n+8gVQ40HDgx8OQKG34YhOp+AKow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:aa:34:a5:33:4a:84:5e:30:27:b6:09:4a:99:78:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Jul 27 13:01:08 2026 GMT
Not After : Jul 28 13:01:08 2026 GMT
Subject: CN=08bfeab72fba7b17f879209347d8b847fe79f1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:51:af:11:1c:5a:a5:9a:c1:8b:31:da:63:
b4:d4:7c:ae:c7:ff:7b:8c:82:50:3e:c6:fc:4b:44:
33:7a:18:91:56:e0:69:9b:3b:1e:8f:5d:e3:f0:0a:
b8:18:68:f7:9c:14:da:c7:28:9b:00:49:9c:70:12:
87:d4:56:36:58:1b:d9:6d:13:78:7b:69:23:dd:07:
fb:fd:1b:62:8c:83:02:e0:66:d7:e3:0a:10:55:5d:
93:3a:4c:d4:89:70:9d:32:f9:5f:b9:29:f7:70:54:
d2:f0:6a:66:37:81:92:91:48:e4:31:10:96:be:dd:
b6:f3:1b:9b:20:b1:26:da:b4:39:3f:3a:3b:89:80:
82:d1:9c:6a:6e:01:ef:40:ac:1e:bf:87:92:4b:ed:
90:fe:6e:9d:92:15:d3:f0:c8:d8:7d:5e:be:4c:e6:
7b:90:1e:a0:dd:56:a1:cc:56:12:17:b0:a6:12:8a:
cf:74:c5:e3:5f:45:99:9d:8a:87:ef:8b:74:6f:55:
4e:c7:69:fc:38:cd:b9:e5:f3:65:40:c7:b7:ac:a5:
c7:b1:4d:f9:53:c2:f7:9d:ae:65:3d:85:c4:b1:b3:
8c:81:63:b2:0d:b2:6f:bd:f5:26:69:aa:d7:03:54:
a1:41:45:8a:54:44:75:01:94:9f:70:e6:0a:3a:2e:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BF:EA:B7:2F:BA:7B:17:F8:79:20:93:47:D8:B8:47:FE:79:F1:FA
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:17:b2:7e:5f:ec:57:42:1b:1d:65:2a:63:ef:83:ea:1c:35:
eb:1a:19:dc:50:6a:33:9c:f4:12:03:39:a2:28:a2:e3:86:eb:
f4:0c:d0:4b:9c:e0:0d:e7:e8:14:b7:c1:50:ff:67:85:4c:0b:
71:0d:ce:dc:62:50:92:f5:11:11:a3:af:b3:51:d9:d4:96:a5:
b9:ac:e5:6f:bc:83:8e:23:7c:3a:e5:94:bf:a4:46:53:25:a1:
23:54:0e:f8:43:5b:de:4b:7c:ca:95:0d:23:00:d7:3f:f6:ad:
ee:db:67:02:ce:7a:bc:4d:0f:22:6f:5c:52:e1:00:27:2e:a8:
7c:fe:c7:07:6b:ae:e8:df:e8:45:55:43:ee:67:6d:f1:39:f9:
79:8e:f4:6c:8b:5a:ad:f2:bc:f8:43:e1:3e:6b:1c:8e:33:14:
fe:c7:e1:6e:f2:ca:0d:28:50:fc:bb:cd:29:71:88:d7:d6:cd:
b2:df:8f:62:70:1b:35:f1:4c:1b:57:ee:77:c5:2c:44:c1:4e:
85:08:b3:bf:7e:2d:84:e0:c9:73:33:cb:9e:ad:d1:63:cd:70:
30:b6:f2:98:72:d2:02:e8:2b:e4:08:c5:54:61:0d:da:c9:c4:
eb:a0:1d:a7:56:db:69:70:9b:70:84:e3:12:0e:36:0b:09:7f:
01:e5:c6:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jqjSlM0qEXjAntglKmXgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMmI2ZDJhNWQ0MTMwNTYwZjYxNzk2M2Q5ZmJjOTM0NDJk
YzFjY2QwHhcNMjYwNzI3MTMwMTA4WhcNMjYwNzI4MTMwMTA4WjAzMTEwLwYDVQQD
EygwOGJmZWFiNzJmYmE3YjE3Zjg3OTIwOTM0N2Q4Yjg0N2ZlNzlmMWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplRRrxEcWqWawYsx2mO01Hyux/97
jIJQPsb8S0QzehiRVuBpmzsej13j8Aq4GGj3nBTaxyibAEmccBKH1FY2WBvZbRN4
e2kj3Qf7/RtijIMC4GbX4woQVV2TOkzUiXCdMvlfuSn3cFTS8GpmN4GSkUjkMRCW
vt228xubILEm2rQ5Pzo7iYCC0ZxqbgHvQKwev4eSS+2Q/m6dkhXT8MjYfV6+TOZ7
kB6g3VahzFYSF7CmEorPdMXjX0WZnYqH74t0b1VOx2n8OM255fNlQMe3rKXHsU35
U8L3na5lPYXEsbOMgWOyDbJvvfUmaarXA1ShQUWKVER1AZSfcOYKOi5MKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAi/6rcvunsX+Hkgk0fYuEf+efH6MB8GA1UdIwQY
MBaAFEsrbSpdQTBWD2F5Y9n7yTRC3BzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MGVmNDEtMzFmNC00MjBkLWJhZGMt
YzU3NDE1ODUwMmM4LzEvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS80MGVmNDEtMzFmNC00MjBkLWJhZGMtYzU3NDE1ODUwMmM4
LzEvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBeyfl/s
V0IbHWUqY++D6hw16xoZ3FBqM5z0EgM5oiii44br9AzQS5zgDefoFLfBUP9nhUwL
cQ3O3GJQkvUREaOvs1HZ1Jaluazlb7yDjiN8OuWUv6RGUyWhI1QO+ENb3kt8ypUN
IwDXP/at7ttnAs56vE0PIm9cUuEAJy6ofP7HB2uu6N/oRVVD7mdt8Tn5eY70bIta
rfK8+EPhPmscjjMU/sfhbvLKDShQ/LvNKXGI19bNst+PYnAbNfFMG1fud8UsRMFO
hQizv34thODJczPLnq3RY81wMLbymHLSAugr5AjFVGEN2snE66Adp1bbaXCbcITj
Eg42Cwl/AeXG0A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:23 2026 by rpki-client