Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier: 8gh6lKnInTgYeGejnvEAT8pwLCZECmF2LI5MQnsTiQ8=
Subject key identifier: 42:FF:2C:B9:5F:5E:F6:CD:D0:3E:6C:34:8C:D0:DB:D1:1D:23:BD:EF
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01A0B53F50921ED83E35AC5843791F801ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number: 1B04
Signing time: Fri 18 Sep 2026 16:00:20 +0000
Manifest this update: Fri 18 Sep 2026 16:00:20 +0000
Manifest next update: Sat 19 Sep 2026 16:00:20 +0000
Files and hashes: 1: 4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa (hash: Ce7KWD1zwmOm3FwKp9C1Y5E8hGZ90tuB7cIXoSzRivQ=)
2: 57_pJKO7tOgXH0MplNvXkDg8tRA.roa (hash: LO7AwILSoQbsBv8ZylAG72hZh71ZbQO1+iDt4zC/BEA=)
3: B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa (hash: UEfiOpqf/O8EypdEhRwQmImaHChHVEzYmDVlh0IbMfM=)
4: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: D1anUA/OYrCygjc9b4eRSLR+TF3qcYLWC0ATWDxZhsQ=)
5: T811gJjy7XiJUFo4KQMv1DP4J0c.roa (hash: YHQ8mEYBcVSe6HvlouVuQRjPYXMMsDbydlGVeyEjDb0=)
6: YyS0FsjSPcRe5OVpS-bddQflhs0.roa (hash: BHCA82IrgZgjYdpNT21uf8Z5RHz1RwAUgryBUXbtYGs=)
7: d8kiYzlEKQLdX-UflZDxlYGnmRo.roa (hash: pIWLP+nuBmaLwVa5s824iZjtnJtxSoE6FNL2XIkxyMI=)
8: yqN0xKfAH7qKFVOx2aVnjCBtVmo.roa (hash: X7+Gaciug9aEUNCqF8h/vZvlmt0m/2l616YnXrP2nh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:3f:50:92:1e:d8:3e:35:ac:58:43:79:1f:80:1e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Sep 18 16:00:20 2026 GMT
Not After : Sep 19 16:00:20 2026 GMT
Subject: CN=42ff2cb95f5ef6cdd03e6c348cd0dbd11d23bdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:ce:2e:dd:b8:af:35:1b:aa:78:e3:d1:b7:
f3:26:ef:f8:ea:a4:7f:df:64:66:21:64:3e:30:ae:
02:4d:3e:d9:69:be:e8:c8:38:3f:7e:9f:83:2c:79:
3f:e6:bf:f1:36:dd:80:27:07:f3:94:c6:0e:da:55:
de:33:11:a5:89:02:78:b5:4a:f5:8d:5d:09:fc:20:
99:cc:d2:5c:35:7b:e9:40:45:3b:b7:c7:3f:9e:f1:
76:9a:44:e6:f8:f9:d7:33:57:96:e9:b3:16:35:60:
48:08:44:f0:81:44:2e:79:e8:d5:3b:e1:67:f6:cf:
35:90:ee:21:97:cc:8d:2c:c8:64:1b:58:03:6a:eb:
e8:4f:64:86:73:a0:28:7a:c8:74:f7:f8:7d:9a:c1:
ad:59:e5:06:3a:7a:93:6d:8f:d0:73:34:03:4c:78:
6f:6a:bc:69:e4:a4:36:73:5c:b2:c6:da:9f:e1:bf:
c7:82:73:31:e8:7a:f7:29:f6:cd:02:ed:87:3c:83:
1f:76:b2:af:d7:c3:98:3f:e0:f7:d8:74:e4:a0:af:
41:17:ed:b5:a2:6f:2e:8e:91:58:69:40:a9:d0:e5:
51:d7:5d:36:74:55:6a:31:13:98:00:46:6e:0a:68:
82:90:63:26:60:40:d1:68:af:db:62:f4:0c:bc:3f:
f5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FF:2C:B9:5F:5E:F6:CD:D0:3E:6C:34:8C:D0:DB:D1:1D:23:BD:EF
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:aa:d9:f5:82:4d:7e:85:0a:a1:5e:77:43:b6:0e:ff:d8:2e:
fc:ce:7b:f9:9f:a6:13:2f:ba:8d:cb:ab:69:f5:27:21:ee:0c:
ec:ea:95:cf:28:e1:ea:96:4d:d1:41:5e:ec:cc:be:1a:82:8b:
64:f8:e3:f0:19:95:4e:34:10:10:da:b8:a9:36:19:3f:20:86:
eb:65:52:3f:77:93:bc:b4:4c:b0:36:52:ea:85:a4:4c:f1:ce:
17:15:03:b2:39:04:ac:5d:89:ca:05:60:b1:df:fe:2b:45:9e:
9d:07:87:2e:84:14:28:fc:10:c0:2e:a0:3d:1e:df:65:1e:1e:
da:07:10:cb:03:ce:2d:6b:f5:f8:5d:5f:8c:a5:34:49:89:a7:
84:75:63:96:14:63:f6:52:9b:6c:1d:59:b7:2b:56:0e:26:85:
3f:39:05:41:43:2b:76:b5:84:2a:37:95:8a:c0:6b:25:a0:1e:
52:15:fd:73:21:13:dd:3f:c5:33:5c:c2:c8:6f:fd:a4:82:4a:
14:2b:aa:75:7f:c1:e4:02:da:96:2d:a4:e0:04:f8:46:c7:f3:
4d:b5:be:a0:73:63:b8:7d:c0:1f:ec:ff:97:8c:78:c7:03:9f:
76:ad:8d:6c:17:d2:82:70:dc:4b:76:5d:75:8e:d3:e3:2b:0f:
d6:5f:b9:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC1P1CSHtg+NaxYQ3kfgB7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx
ZTZiMTcwHhcNMjYwOTE4MTYwMDIwWhcNMjYwOTE5MTYwMDIwWjAzMTEwLwYDVQQD
Eyg0MmZmMmNiOTVmNWVmNmNkZDAzZTZjMzQ4Y2QwZGJkMTFkMjNiZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtDOLt24rzUbqnjj0bfzJu/46qR/
32RmIWQ+MK4CTT7Zab7oyDg/fp+DLHk/5r/xNt2AJwfzlMYO2lXeMxGliQJ4tUr1
jV0J/CCZzNJcNXvpQEU7t8c/nvF2mkTm+PnXM1eW6bMWNWBICETwgUQueejVO+Fn
9s81kO4hl8yNLMhkG1gDauvoT2SGc6Aoesh09/h9msGtWeUGOnqTbY/QczQDTHhv
arxp5KQ2c1yyxtqf4b/HgnMx6Hr3KfbNAu2HPIMfdrKv18OYP+D32HTkoK9BF+21
om8ujpFYaUCp0OVR1102dFVqMROYAEZuCmiCkGMmYEDRaK/bYvQMvD/1GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL/LLlfXvbN0D5sNIzQ29EdI73vMB8GA1UdIwQY
MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt
OWU4OTVkMGVmOGQyLzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy
LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqrZ9YJN
foUKoV53Q7YO/9gu/M57+Z+mEy+6jcurafUnIe4M7OqVzyjh6pZN0UFe7My+GoKL
ZPjj8BmVTjQQENq4qTYZPyCG62VSP3eTvLRMsDZS6oWkTPHOFxUDsjkErF2JygVg
sd/+K0WenQeHLoQUKPwQwC6gPR7fZR4e2gcQywPOLWv1+F1fjKU0SYmnhHVjlhRj
9lKbbB1ZtytWDiaFPzkFQUMrdrWEKjeVisBrJaAeUhX9cyET3T/FM1zCyG/9pIJK
FCuqdX/B5ALali2k4AT4RsfzTbW+oHNjuH3AH+z/l4x4xwOfdq2NbBfSgnDcS3Zd
dY7T4ysP1l+5PQ==
-----END CERTIFICATE-----
Generated at Fri Sep 18 19:10:24 2026 by rpki-client