Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier: lCrt/GjelU4qUP9Mj4CfgjmYnO12hkSNjY1zkcXKb4w=
Subject key identifier: 92:F0:AE:61:25:77:C0:C5:6A:CA:5A:DB:A1:A7:AC:4D:62:E5:4D:02
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 019EE28BC310CA307D30D581ACF0E16792D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number: 1A07
Signing time: Sat 20 Jun 2026 01:01:10 +0000
Manifest this update: Sat 20 Jun 2026 01:01:10 +0000
Manifest next update: Sun 21 Jun 2026 01:01:10 +0000
Files and hashes: 1: 4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa (hash: Ce7KWD1zwmOm3FwKp9C1Y5E8hGZ90tuB7cIXoSzRivQ=)
2: 57_pJKO7tOgXH0MplNvXkDg8tRA.roa (hash: LO7AwILSoQbsBv8ZylAG72hZh71ZbQO1+iDt4zC/BEA=)
3: B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa (hash: UEfiOpqf/O8EypdEhRwQmImaHChHVEzYmDVlh0IbMfM=)
4: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: M01gkq3vYPhTykEFdJKu7uhg3xOyglgrV+dm+d91CTQ=)
5: TMsha0GRszbL5uv24xLt-ZfZgKc.roa (hash: j5QxVvGBFLOVC7/0gok3R4odJR1SrmBkpeCDz/Tn8is=)
6: Y3783nUrRTFZBbngMY7aX-quJlo.roa (hash: 5p9sIZIS1RVqID7GzDJiyhaYF7TJdTLEzWd1pXiwNwY=)
7: YyS0FsjSPcRe5OVpS-bddQflhs0.roa (hash: BHCA82IrgZgjYdpNT21uf8Z5RHz1RwAUgryBUXbtYGs=)
8: aT_NF-3W3Lad21l-SRMcNJ4ndmA.roa (hash: /YnsUGWzI7HuX6dhQIDwbZFM15scYBxgtWzy8QmfJ0I=)
9: d8kiYzlEKQLdX-UflZDxlYGnmRo.roa (hash: pIWLP+nuBmaLwVa5s824iZjtnJtxSoE6FNL2XIkxyMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:8b:c3:10:ca:30:7d:30:d5:81:ac:f0:e1:67:92:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jun 20 01:01:10 2026 GMT
Not After : Jun 21 01:01:10 2026 GMT
Subject: CN=92f0ae612577c0c56aca5adba1a7ac4d62e54d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:78:96:43:f0:9d:56:c5:7f:5b:81:ca:ef:
79:22:fe:91:02:84:87:78:98:c6:9d:a5:01:fa:c0:
dc:b9:21:1e:85:fe:d7:c9:87:98:02:63:a4:37:d9:
db:42:3f:df:60:0e:fb:6a:25:65:a1:68:a9:86:12:
ca:b7:f2:a8:82:e9:37:09:33:dd:68:ba:99:f8:f3:
6e:a1:fa:1e:10:90:a9:3a:fb:3f:cc:5e:fc:eb:e8:
13:13:4f:01:d9:85:bb:df:52:db:8a:c4:e0:60:8b:
58:84:7f:df:0b:76:47:d5:00:78:cf:e2:9f:3f:35:
98:ab:f3:11:3f:24:60:34:18:f4:9c:56:59:cf:18:
2d:d1:13:b9:5a:4c:6a:dd:5a:b8:57:f3:4e:8c:16:
60:ad:a1:91:97:e5:dc:f8:4f:f2:5f:3a:e9:ce:74:
88:7f:b8:47:ec:ba:57:0c:1f:38:0c:9e:c6:cd:c4:
7b:91:74:c4:50:24:70:b9:6a:93:c8:1e:53:10:c3:
95:0b:94:d9:2f:de:74:60:2a:09:26:6e:e1:4c:af:
f8:76:72:9c:2e:ed:42:cc:5a:81:00:1b:03:8e:1d:
a7:60:fe:ef:a5:b1:30:50:53:21:3e:6a:08:75:3d:
80:00:6e:4e:9e:0a:11:ca:9d:62:5b:24:d7:c4:89:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F0:AE:61:25:77:C0:C5:6A:CA:5A:DB:A1:A7:AC:4D:62:E5:4D:02
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:85:68:bf:9b:b8:1b:9b:2d:56:21:95:6a:cb:ff:ad:aa:22:
4a:80:01:9e:85:3b:40:5e:0f:c3:c9:05:05:1e:63:1c:db:36:
fc:ef:ba:ec:36:93:62:07:db:25:67:be:bc:62:fd:45:ee:ab:
d8:7a:88:bc:0b:df:de:51:65:6f:41:42:f9:9f:78:97:91:cd:
dd:c1:54:09:a0:36:3a:80:bd:63:ca:e4:92:4d:db:01:43:77:
de:61:1d:f5:47:15:ff:ad:67:c8:7e:1d:70:ec:db:9b:8c:dd:
7c:77:2e:ac:13:0c:e1:01:1a:ea:8c:89:a8:56:d5:c3:36:3e:
17:44:cc:91:e6:a8:ac:28:61:36:5e:8d:7d:c0:ba:cb:e6:5b:
31:bf:94:fd:a0:91:21:4c:64:29:0e:af:85:03:b8:5f:86:b5:
80:cd:43:95:61:5c:6d:74:de:9e:e7:6b:dc:03:f6:cb:89:a8:
ab:08:53:50:29:a2:0d:de:2f:94:4f:8c:6e:bb:e6:ca:16:a4:
8d:af:63:d0:34:25:39:7d:78:78:65:17:b1:da:8d:a4:66:0c:
ea:47:b0:dd:94:70:52:7b:24:04:f1:8b:0a:ab:40:2f:84:6a:
95:b9:66:55:d0:b1:0f:ac:7e:fc:8d:fe:bd:8a:bc:67:c5:13:
34:fa:e1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:13:58 2026 by rpki-client