Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
File: SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft (raw, json)
Hash identifier: jNdEVIxBD0h5gIv+9hunCK+s60B/dlYgfI/h2Yb3N4I=
Subject key identifier: 82:A1:78:20:AA:EE:F9:CB:B4:98:D0:16:6A:14:67:05:87:AA:5B:B7
Authority key identifier: 4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
Certificate issuer: /CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Certificate serial: 019D3941920A267F621849A224C93ADE5DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
Manifest number: 17AD
Signing time: Sun 29 Mar 2026 11:01:31 +0000
Manifest this update: Sun 29 Mar 2026 11:01:31 +0000
Manifest next update: Mon 30 Mar 2026 11:01:31 +0000
Files and hashes: 1: EBsnXuG2a2uBMEsQVfF-KePJhMk.roa (hash: bjQUmEt2k6yWvLOqxU6vKmfzVfKPRv4cTmewL826UYc=)
2: PZ31ij_f35z3baYKKAZFGVEp6QY.roa (hash: Azm3iFHK2wZX1k58GaEHQq5yAK/+Odtok/+po77w/58=)
3: SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl (hash: g8K4gyEWOm11AvpyReHWj7nuxIr4zPQbOq0FGeqMW2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:92:0a:26:7f:62:18:49:a2:24:c9:3a:de:5d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Validity
Not Before: Mar 29 11:01:31 2026 GMT
Not After : Mar 30 11:01:31 2026 GMT
Subject: CN=82a17820aaeef9cbb498d0166a14670587aa5bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:cf:7e:98:57:05:4a:ad:d7:6b:32:4c:56:
31:8e:dd:d5:8d:de:d2:14:a7:65:e6:c3:38:98:09:
5f:0a:6a:20:b0:77:00:e5:39:63:93:24:25:7b:3c:
6a:4f:37:34:61:17:27:e8:7c:08:66:79:b8:24:75:
d5:9d:69:c0:0b:0d:4c:4e:27:fb:6b:37:c7:2f:d7:
62:97:b4:61:7f:88:24:42:55:55:d1:c4:f9:62:a8:
04:97:94:2a:fc:66:2f:f5:fd:76:a4:e2:6f:95:f8:
a6:d1:4b:c6:50:99:00:67:b6:44:f6:7e:6b:19:24:
7f:0b:82:79:6d:12:c4:74:4e:d7:7e:c7:5c:5e:ed:
3a:79:81:e4:b6:99:be:27:c6:b1:75:00:b5:c4:f7:
70:18:12:90:64:07:9a:76:37:f8:6c:26:f2:3a:2f:
dd:6c:32:cb:1e:27:03:19:16:b7:60:79:c0:dd:cf:
a2:26:44:98:84:c4:f1:eb:99:b1:fa:21:e9:31:ff:
18:08:3d:4e:4a:0e:3f:f4:93:1b:27:c6:f9:09:8d:
d9:d9:4d:92:2a:bb:7f:94:d9:e2:34:87:90:e6:a4:
9d:1e:3d:6f:97:2d:cd:a6:86:5f:9d:46:1d:25:d3:
b0:9b:b2:89:4f:a5:db:5c:62:6b:be:da:c6:73:89:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A1:78:20:AA:EE:F9:CB:B4:98:D0:16:6A:14:67:05:87:AA:5B:B7
X509v3 Authority Key Identifier:
keyid:4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:72:e4:79:00:ff:2a:c2:4d:e7:54:53:db:b2:30:c5:ca:8e:
1e:59:95:ce:1b:69:fb:f5:58:2f:96:8a:5f:c7:a3:3d:8e:4b:
c9:e2:50:62:69:7a:50:42:74:77:da:ce:30:d9:29:72:62:0e:
62:ab:de:b3:4d:47:8f:6c:20:81:aa:b0:1c:11:37:f2:e8:60:
a3:12:6b:f0:1d:15:ea:6a:bc:ce:8d:6a:d9:b0:37:83:21:34:
27:30:23:e6:ad:5d:a9:b0:ac:77:9a:22:07:72:d7:50:04:99:
fe:af:19:f6:50:5a:a9:1e:24:9c:1b:12:91:15:9b:2c:07:2b:
4f:d1:09:a8:1d:a8:20:c6:73:e2:1e:9e:22:d2:28:a8:e3:ac:
19:c8:a5:32:98:ac:ca:56:87:c1:89:d1:a9:47:fb:fc:92:a9:
93:32:af:6e:c9:e4:92:1c:35:cb:71:16:11:95:82:70:3d:24:
e7:85:f0:4f:51:44:45:24:e7:25:92:6b:f2:ab:b2:fe:f7:5a:
87:65:c4:b2:dc:de:2e:95:bc:ea:a4:eb:ff:3c:93:a4:84:83:
38:98:b4:86:cd:d0:c5:3e:5c:40:1c:0d:73:45:b6:be:93:ac:
0f:86:0b:8c:2b:51:b7:35:fc:4d:06:bb:66:83:0d:fe:4f:23:
88:3b:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:28 2026 by rpki-client