Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
File: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json)
Hash identifier: psWW6kdmcG+Cebdr4FLG6/WQKarpw2SkkqcMgGSuy14=
Subject key identifier: 31:84:56:2A:78:31:AE:4E:B1:B0:19:18:90:DD:45:8F:51:77:7F:A4
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial: 019D38D383C27A044934B3553C1AA32CEE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
Manifest number: 1227
Signing time: Sun 29 Mar 2026 09:01:18 +0000
Manifest this update: Sun 29 Mar 2026 09:01:18 +0000
Manifest next update: Mon 30 Mar 2026 09:01:18 +0000
Files and hashes: 1: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: CEq1fLWGhZWqsca42+LxhRocOgfkIwqePHMVmrqfF4A=)
2: apHXF-O4Ejo7yG2aEpQp8GLTcZs.roa (hash: a/Y5u9hrVgeYy/2XjMITJ3BNw9T29U+bdFNSfBZc2ak=)
3: zCOXAUBZXqisVY6lRfztNan2LPM.roa (hash: 7/x4omP0n6ejxfgW17vqQlbqviYR3EPl/2qYMEuPiKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:83:c2:7a:04:49:34:b3:55:3c:1a:a3:2c:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Validity
Not Before: Mar 29 09:01:18 2026 GMT
Not After : Mar 30 09:01:18 2026 GMT
Subject: CN=3184562a7831ae4eb1b0191890dd458f51777fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a0:32:7d:0e:47:d4:80:25:2e:d6:52:c6:a2:
94:29:ec:80:ea:43:f6:0d:a2:ed:ee:0c:12:7a:aa:
4b:c1:32:aa:90:4c:03:32:a9:d4:07:ac:f5:78:9e:
63:5f:c7:dc:da:28:20:35:04:00:a0:0a:6f:55:b8:
01:36:9f:fb:4f:35:60:09:4a:5b:0e:d9:51:19:ab:
7c:46:ee:70:be:c9:6a:70:d9:4d:f0:7f:fa:ff:61:
2d:47:16:bb:70:1e:86:0e:07:10:97:6a:5b:4d:34:
3f:e5:bc:95:62:29:ba:d9:da:7c:c3:17:4c:e1:bd:
c1:2b:2e:e0:12:37:5e:0e:22:cd:eb:14:23:2d:47:
72:79:8e:eb:48:c0:15:2c:39:1e:fa:d9:50:e4:3e:
13:ec:ce:d9:69:c5:c4:1d:77:29:92:56:a4:e8:f1:
1f:b3:ba:2e:ef:12:a5:a6:75:c8:1b:96:f0:44:22:
2f:ff:5c:86:df:54:f9:2b:a1:1c:37:9b:5d:5f:ba:
7c:02:89:2b:c6:ed:ee:b9:3a:8f:4a:b0:f2:46:e4:
a6:68:b5:e5:a6:83:b5:b7:d5:12:27:00:57:29:7c:
51:c6:0e:a7:b0:ea:c2:da:3a:5b:ae:58:e0:ed:32:
86:75:9d:9e:ba:3a:7a:b4:76:d4:f4:61:bd:65:20:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:84:56:2A:78:31:AE:4E:B1:B0:19:18:90:DD:45:8F:51:77:7F:A4
X509v3 Authority Key Identifier:
keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fd:bf:f8:30:0d:99:17:53:71:5c:98:cb:a0:7f:d1:cf:0b:
9a:eb:27:24:72:aa:35:19:f1:06:22:9a:f2:f1:32:86:63:d8:
fa:84:53:35:30:24:20:39:94:48:a2:6b:bf:2d:6d:3e:f8:b7:
85:5b:41:43:18:8a:02:ba:d7:b3:25:83:a0:7d:1c:34:61:24:
65:81:ff:3d:01:0f:d6:92:02:a2:d8:26:50:a7:1f:f3:68:fc:
b3:1e:ee:17:15:2a:10:60:19:ed:75:69:d2:eb:c3:d1:65:e6:
51:8c:2a:f8:76:e5:f0:9e:35:f5:2f:9a:82:b4:6e:e3:8f:fc:
c9:1c:72:03:9b:d2:52:78:fc:5b:5a:02:e4:bb:1e:24:5e:04:
5e:d4:88:de:4a:82:ea:ad:81:a9:da:6e:70:31:70:c2:78:73:
9f:4f:68:be:83:ba:13:95:29:b5:b6:32:82:e2:de:fd:8d:9d:
ef:de:07:70:6d:cc:ff:03:37:2c:0f:f8:c4:80:a8:b0:fd:35:
27:38:52:45:e4:92:a7:91:9d:39:c5:f0:2c:e4:9f:f4:3b:be:
0e:bd:81:43:ed:8d:f7:80:95:ad:1e:f9:a1:4a:ea:98:b9:1e:
a5:b5:59:ab:6f:ae:2d:79:03:f3:91:20:01:35:18:63:e5:0c:
32:c8:c2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:39 2026 by rpki-client