Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier: GZzCn9lXdS/dqf4V14xob54fROtXVMKSBDZgLhII++c=
Subject key identifier: 2B:CA:02:44:9E:DC:87:8F:FA:27:F1:D2:3F:5E:BD:24:73:CE:6B:6E
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01A1A5929F6678B6A6FB9411D3BA25C0E8A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number: 1B87
Signing time: Wed 04 Nov 2026 08:00:11 +0000
Manifest this update: Wed 04 Nov 2026 08:00:11 +0000
Manifest next update: Thu 05 Nov 2026 08:00:11 +0000
Files and hashes: 1: 3_qq4SlxMcvwrbvfdNDYDWQ0rgU.roa (hash: 2IQDnLhNyA34O5bJzqWzi9HQ0yGGc44mUPUXNHhkzZE=)
2: 4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa (hash: Ce7KWD1zwmOm3FwKp9C1Y5E8hGZ90tuB7cIXoSzRivQ=)
3: 57_pJKO7tOgXH0MplNvXkDg8tRA.roa (hash: LO7AwILSoQbsBv8ZylAG72hZh71ZbQO1+iDt4zC/BEA=)
4: B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa (hash: UEfiOpqf/O8EypdEhRwQmImaHChHVEzYmDVlh0IbMfM=)
5: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: 1OUA5+18AVrjFD7Jxyv5HT36qXY+e2pwRriqcWO60mU=)
6: T811gJjy7XiJUFo4KQMv1DP4J0c.roa (hash: YHQ8mEYBcVSe6HvlouVuQRjPYXMMsDbydlGVeyEjDb0=)
7: YyS0FsjSPcRe5OVpS-bddQflhs0.roa (hash: BHCA82IrgZgjYdpNT21uf8Z5RHz1RwAUgryBUXbtYGs=)
8: d8kiYzlEKQLdX-UflZDxlYGnmRo.roa (hash: pIWLP+nuBmaLwVa5s824iZjtnJtxSoE6FNL2XIkxyMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:92:9f:66:78:b6:a6:fb:94:11:d3:ba:25:c0:e8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Nov 4 08:00:11 2026 GMT
Not After : Nov 5 08:00:11 2026 GMT
Subject: CN=2bca02449edc878ffa27f1d23f5ebd2473ce6b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:dd:0b:24:c7:32:51:0c:de:85:5f:08:3d:
64:47:b8:0f:77:0d:07:36:df:4a:40:e5:c9:28:14:
36:ba:04:0e:3c:87:2d:fa:42:a1:5e:d7:73:fe:cf:
b2:1b:83:13:ff:f9:0d:d6:7a:ee:9d:08:b8:c9:e5:
98:04:77:e1:90:dd:ff:41:4a:48:4c:63:30:c5:16:
a8:fa:7f:86:8d:a8:51:60:56:fd:62:25:bf:66:fc:
7f:ab:54:d6:58:bb:3b:28:25:66:ba:11:be:65:af:
88:76:9f:61:ef:f5:9c:aa:0f:19:fb:49:69:12:64:
eb:0d:a6:bc:04:45:f8:24:6a:70:dd:7c:de:5d:42:
15:2c:7a:d9:26:0c:db:a9:78:a6:e5:62:26:69:cb:
e8:39:1a:ee:2e:cd:01:0d:14:24:c8:3a:66:62:e7:
47:0e:d1:18:7b:7c:5e:31:3e:c5:ab:42:9b:e4:0c:
7a:c4:2e:42:6e:5d:1a:bb:6e:0f:02:73:9f:5d:d2:
da:37:1c:c6:e9:6d:32:1c:91:8c:f8:ad:10:c8:09:
54:c2:4a:08:4d:69:f7:62:a6:28:e4:64:04:9a:66:
52:d3:cf:b0:78:a0:52:29:a9:59:da:7f:54:82:7b:
cf:1e:7d:cb:e0:47:dc:e5:e6:52:23:b0:2b:d5:63:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CA:02:44:9E:DC:87:8F:FA:27:F1:D2:3F:5E:BD:24:73:CE:6B:6E
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c0:62:ec:8b:6d:a8:27:5d:7c:4f:91:6a:eb:fe:fc:1e:03:
50:f3:5f:08:f3:81:72:e9:a9:e3:79:c2:27:35:37:af:6a:0a:
f1:9e:da:ae:21:cb:6f:7b:64:53:4d:d9:5f:c2:eb:76:97:ac:
88:ef:57:e6:b1:09:b0:40:a5:8d:b1:79:b0:f1:30:3e:01:f0:
a5:17:74:e4:6d:41:3d:bb:f8:d7:76:c6:c6:0d:cb:44:84:85:
67:37:82:29:f7:67:61:7e:70:75:08:3d:0a:b6:99:e4:f4:ea:
1b:1b:2c:8b:d0:a3:70:27:bc:ef:7f:4c:98:ee:66:ae:11:b7:
7c:67:b9:13:6f:d4:12:eb:1d:e2:be:29:c2:e0:cf:f4:02:0e:
9e:9a:e6:ab:30:3b:29:b3:9d:4b:93:aa:61:3e:56:31:d2:b8:
ac:b3:9c:f9:a3:a6:d2:f0:43:12:24:ef:07:06:4e:c6:53:3c:
be:e2:84:81:53:75:2c:b4:14:d6:e1:45:9c:a6:e7:c3:f7:db:
62:f0:ee:bc:fe:0b:18:21:41:2d:ca:5b:9c:51:b3:05:4c:09:
65:72:dd:b6:fb:80:7a:17:7e:72:28:cc:2d:ce:f1:5d:2c:f9:
ef:c3:ee:23:1c:e5:49:8d:f2:3c:69:37:87:f3:b4:a6:23:01:
99:6e:1b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:50:16 2026 by rpki-client