Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
File: sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json)
Hash identifier: EoVtAbgGFzVXeNUxR9LIsVK0oGTg/ZwGYWJO9o1k+6c=
Subject key identifier: C9:F6:59:C0:5B:A7:4B:7D:C2:F2:09:90:73:DE:FA:A6:50:EF:6D:A2
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial: 01A0C47BCEE397CCCF0050873BD01317D4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
Manifest number: 1370
Signing time: Mon 21 Sep 2026 15:00:43 +0000
Manifest this update: Mon 21 Sep 2026 15:00:43 +0000
Manifest next update: Tue 22 Sep 2026 15:00:43 +0000
Files and hashes: 1: 1ZD-5sWPvLvF_F5r7aK4sjXeBa8.roa (hash: 9g3E8L94O35utFKdVj/OF7X+jv2TAGMuo7bfCk2FBWk=)
2: Jgh8TRgca-Yzk4zbDo1y-y8oAjA.roa (hash: 1YiIe3dsEVG85vOw2eS5VT5pNrhUblvJwxJsfNgGFh8=)
3: kpO4RG28fYYVmBuJSIXGaHvSxU0.roa (hash: i8inyU2Y1UbsH+wXnBk66d0sVuBHQPuFEaJpwKKuPzA=)
4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: rbSjA1qXmnx28rshMMXhyR0oSj6eWYXUG4TXrQnqG9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:ce:e3:97:cc:cf:00:50:87:3b:d0:13:17:d4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Validity
Not Before: Sep 21 15:00:43 2026 GMT
Not After : Sep 22 15:00:43 2026 GMT
Subject: CN=c9f659c05ba74b7dc2f2099073defaa650ef6da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:d6:40:a6:2a:f9:73:79:95:c1:9f:30:9d:
c1:4d:e8:5f:bd:cd:88:82:e0:d4:8b:d5:8d:51:18:
d3:55:49:dd:c6:4f:11:18:d0:79:b5:65:38:1d:71:
ff:cf:76:8e:7f:d5:bd:56:ac:ad:36:77:fc:09:20:
d3:38:fc:c1:37:47:f8:aa:3d:75:37:f6:b8:c0:0d:
f6:60:d4:4b:a8:c4:c7:23:c4:d8:26:55:24:89:8f:
a2:a4:9a:cf:26:a5:b4:b6:6d:ea:c1:84:a4:4d:d7:
69:41:68:62:08:5a:c9:cc:59:7a:fd:5a:64:69:1b:
e3:71:f6:0f:09:4b:7d:4d:39:ca:36:d0:a0:13:db:
6b:80:11:15:20:a5:61:db:a7:73:94:64:66:88:2a:
79:7b:81:d5:67:21:15:6d:8f:16:14:e9:3d:e2:d3:
3e:62:d0:f4:aa:7c:07:58:7f:ab:bf:c4:d0:53:1a:
77:7a:f6:57:d7:c2:eb:92:1c:27:b5:fa:07:e0:e4:
71:9f:43:92:04:eb:c5:9a:15:d3:74:3c:81:21:96:
77:d7:50:11:b2:8a:d1:0a:eb:10:7f:75:97:69:e5:
81:27:98:28:db:df:e6:04:5d:cc:47:6d:a5:79:6b:
66:fa:2e:02:0a:ee:ec:3b:53:97:1f:f2:88:43:ca:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F6:59:C0:5B:A7:4B:7D:C2:F2:09:90:73:DE:FA:A6:50:EF:6D:A2
X509v3 Authority Key Identifier:
keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:87:92:cf:02:5b:dd:52:ee:bd:78:7d:ec:bd:29:5b:4f:36:
2c:59:73:0d:a7:8d:ee:8b:d0:e3:8d:ee:24:24:47:e6:96:ad:
e2:dd:8b:92:21:86:92:5c:ac:d8:d1:43:40:bc:d6:7a:9a:5c:
88:f1:9c:5a:47:a5:2a:29:f2:1a:6a:f4:6a:2b:15:74:7d:a6:
7d:9b:68:26:2c:9c:18:e2:9b:43:da:4d:9e:5a:ad:d1:25:1f:
32:5d:fa:3a:b0:04:56:c2:08:1c:f4:5f:7d:6b:bd:95:91:d8:
53:28:78:82:ef:76:b5:e9:71:5d:9f:3b:0b:e1:52:d1:20:19:
3a:86:2f:41:4c:8b:6c:fc:42:14:22:1c:0e:53:72:8a:02:5e:
3c:d5:e3:cd:4e:d6:e4:03:98:58:7f:eb:60:a9:5f:4f:b5:8a:
67:0a:fe:4e:c1:53:89:8a:9d:72:30:43:e5:bb:c4:a0:06:cc:
22:ad:8a:98:40:6f:21:ad:40:12:7d:eb:f0:5d:19:8a:8b:30:
6e:70:be:50:2a:70:aa:b1:04:96:94:e0:33:f7:ab:7f:e6:94:
2c:7f:c1:09:24:3d:32:d6:f5:f9:12:01:4c:ad:af:b5:32:89:
f2:83:9b:6e:cc:c3:55:fc:0d:bb:91:99:3e:67:17:ca:7b:49:
48:ab:68:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:27:22 2026 by rpki-client