Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier: UTbPygDdCfHNEEfmGZESNm7SImau5BHXWIhuz7V9doE=
Subject key identifier: 65:32:58:E4:2C:E8:78:F0:D7:87:A1:B4:F1:AD:E6:59:A2:3F:17:0D
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 019FCA4A815D4A0D062E372DE6F3975EF8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number: 1A7F
Signing time: Tue 04 Aug 2026 01:01:48 +0000
Manifest this update: Tue 04 Aug 2026 01:01:48 +0000
Manifest next update: Wed 05 Aug 2026 01:01:48 +0000
Files and hashes: 1: 4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa (hash: Ce7KWD1zwmOm3FwKp9C1Y5E8hGZ90tuB7cIXoSzRivQ=)
2: 57_pJKO7tOgXH0MplNvXkDg8tRA.roa (hash: LO7AwILSoQbsBv8ZylAG72hZh71ZbQO1+iDt4zC/BEA=)
3: B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa (hash: UEfiOpqf/O8EypdEhRwQmImaHChHVEzYmDVlh0IbMfM=)
4: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: 41a5MtsTZDktIVExsoR7uRySuoSZnrcN56onRmPBAdc=)
5: TMsha0GRszbL5uv24xLt-ZfZgKc.roa (hash: j5QxVvGBFLOVC7/0gok3R4odJR1SrmBkpeCDz/Tn8is=)
6: Y3783nUrRTFZBbngMY7aX-quJlo.roa (hash: 5p9sIZIS1RVqID7GzDJiyhaYF7TJdTLEzWd1pXiwNwY=)
7: YyS0FsjSPcRe5OVpS-bddQflhs0.roa (hash: BHCA82IrgZgjYdpNT21uf8Z5RHz1RwAUgryBUXbtYGs=)
8: aT_NF-3W3Lad21l-SRMcNJ4ndmA.roa (hash: /YnsUGWzI7HuX6dhQIDwbZFM15scYBxgtWzy8QmfJ0I=)
9: d8kiYzlEKQLdX-UflZDxlYGnmRo.roa (hash: pIWLP+nuBmaLwVa5s824iZjtnJtxSoE6FNL2XIkxyMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ca:4a:81:5d:4a:0d:06:2e:37:2d:e6:f3:97:5e:f8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Aug 4 01:01:48 2026 GMT
Not After : Aug 5 01:01:48 2026 GMT
Subject: CN=653258e42ce878f0d787a1b4f1ade659a23f170d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b0:2c:15:cd:b5:98:4b:04:19:19:71:65:04:
1f:1d:27:d3:a7:79:d7:c3:aa:1f:ff:c4:67:92:f0:
52:0e:35:fb:cd:74:89:5d:83:13:a5:c1:11:c3:7b:
08:65:25:d9:0e:2c:d9:b6:36:9a:18:0a:e3:bf:50:
10:77:39:c1:58:1c:2e:56:99:be:2a:89:1a:8b:32:
f6:34:d0:7a:b7:2a:c8:a2:f8:d5:ed:6a:19:9e:ca:
29:5e:19:e4:57:04:61:e8:22:05:49:79:89:ef:a5:
e8:38:5d:d5:12:15:d7:8c:71:5b:6b:d5:c8:43:1d:
99:1e:83:0f:8d:b2:77:98:39:08:2d:64:54:5e:a0:
0b:e9:00:6e:e7:63:81:b3:23:3b:f2:74:a9:8c:5b:
be:19:a2:fe:92:c8:fb:82:78:9a:4d:16:79:e0:6e:
76:6d:67:e9:62:87:b3:f0:12:3d:1a:ab:c2:c2:f6:
3d:f3:aa:a6:df:35:a5:b6:f4:e7:46:c4:01:c8:0e:
a8:8b:25:bf:eb:a0:8d:0e:82:4c:26:b5:14:c8:7e:
79:d2:cd:08:6a:c1:a8:d8:b0:8b:e4:f2:56:6b:66:
2d:43:30:01:6f:07:92:27:88:a7:58:b9:a0:65:14:
31:45:08:cd:91:37:e5:96:99:b1:d2:d9:50:cd:ea:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:58:E4:2C:E8:78:F0:D7:87:A1:B4:F1:AD:E6:59:A2:3F:17:0D
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c4:ca:2f:b8:32:af:d2:02:32:76:6b:2e:3d:77:12:ac:19:
fc:df:42:74:35:ea:f9:4c:e0:30:20:c7:27:96:9d:fc:67:90:
3c:a4:d8:c1:0f:9f:a5:e6:28:b7:14:ca:cb:08:de:f0:fd:b9:
40:7a:a6:ab:78:f4:28:c6:0a:53:66:cd:81:9f:c6:4b:8f:91:
ea:83:27:82:4d:53:41:a3:4e:65:61:5e:ea:03:34:b3:81:9d:
1c:ba:49:aa:8f:14:3d:bf:ad:97:31:87:1d:dc:f3:e1:f8:64:
2e:20:15:50:5c:78:d3:6b:42:c5:25:52:26:ab:57:90:29:08:
dd:c9:2a:e7:74:8a:43:3d:20:45:3e:3c:de:d6:2d:5c:d5:02:
ad:28:61:65:6b:bb:c1:5e:c8:2e:39:66:32:71:35:53:6e:90:
e5:43:f1:60:72:32:a9:63:9e:8b:c3:8e:30:48:a2:de:df:9f:
34:d0:b9:a6:52:d4:47:45:46:a5:79:0b:87:50:76:e2:91:22:
6f:19:e1:92:93:63:78:f0:fa:77:8e:98:0d:90:4e:63:91:56:
7d:f7:60:72:e9:79:69:ec:6c:e3:80:b0:1f:33:62:89:a5:8b:
7c:7b:ac:cd:c9:a6:12:77:fe:6c:c0:f6:cc:65:f7:df:05:ae:
92:66:b7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:54:02 2026 by rpki-client