Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: jU3I89k8fzUDFj6n0BjigYtgdXRGH5L/jcwBLX9euuk=
Subject key identifier: 5B:FD:76:B0:44:5E:34:E0:6D:22:6D:70:5B:CA:F3:21:55:6A:7B:67
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 019D39418163A265C8223A24C4F055414F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 1001
Signing time: Sun 29 Mar 2026 11:01:27 +0000
Manifest this update: Sun 29 Mar 2026 11:01:27 +0000
Manifest next update: Mon 30 Mar 2026 11:01:27 +0000
Files and hashes: 1: RtEJrYYYVSw3agdpZ8fIxDXTX1Y.roa (hash: cKYN0YkCJsDdPkx/HgK4R2mLQELTgIw1O/rAAl0yOQY=)
2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: lYZ9JccEU+9JX3ykG1wwLEgbtSjmHkBmUw356DOFq4k=)
3: vcurezLdovhZEJ_5__NOTZxZX0U.roa (hash: Ve+Xn7DMb8Yh8TeJ9TkE0GiZkvH6kTEGpcyw7nrpcMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:81:63:a2:65:c8:22:3a:24:c4:f0:55:41:4f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Mar 29 11:01:27 2026 GMT
Not After : Mar 30 11:01:27 2026 GMT
Subject: CN=5bfd76b0445e34e06d226d705bcaf321556a7b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:e5:a0:2d:1e:4f:d0:68:7c:09:c3:c1:85:
bf:96:e0:19:75:c5:b0:e1:cc:b9:0b:ad:6e:2c:10:
b3:50:c0:ec:77:e1:91:09:20:cd:8d:d0:26:9a:80:
36:72:da:da:d2:0e:55:71:cb:96:eb:f3:36:21:bf:
61:aa:23:1a:7a:e8:d2:a1:66:27:78:00:62:11:19:
a2:be:e1:f8:36:a1:6b:b9:fa:e6:47:7e:9f:e8:66:
b7:90:27:45:10:ce:17:09:25:be:46:ec:5a:b5:c8:
5d:7b:45:29:05:62:0a:9a:99:41:af:26:0d:d6:3a:
2f:f6:31:57:1d:3e:74:01:ba:dd:2e:31:f6:ec:2e:
6d:a4:32:e8:be:dc:41:2a:19:7b:94:2d:02:2c:d1:
01:58:ab:a9:79:bc:c4:56:01:0d:12:3e:c6:70:7c:
0e:12:cb:10:fe:8f:22:f2:30:c3:f4:ef:a0:ea:e2:
b2:c3:af:00:d1:dc:44:89:05:18:2c:97:9e:89:bb:
91:c0:1c:b5:9c:94:e7:81:42:09:58:57:e8:54:78:
d1:60:4a:24:9e:0d:0e:07:e3:16:a7:cb:84:88:a8:
60:97:15:0a:51:cc:09:d0:57:20:96:d6:a2:bd:ee:
a0:a3:d3:fe:5c:26:bd:28:62:8e:ac:75:d2:65:1f:
62:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FD:76:B0:44:5E:34:E0:6D:22:6D:70:5B:CA:F3:21:55:6A:7B:67
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e2:dc:a8:f9:22:b0:71:04:fc:47:39:8a:d4:43:b7:6f:8f:
79:1a:34:d6:0f:a1:2f:97:27:2d:6e:45:e0:70:f5:ba:06:0f:
ac:3b:14:b5:f2:da:80:79:64:d0:2a:db:78:92:cb:4d:2c:ce:
9e:db:c1:f5:13:3d:46:d8:b5:40:95:24:06:6d:8e:8a:ff:3a:
5e:10:44:3c:69:3f:ab:a5:b2:95:44:43:c6:b0:ec:d8:33:19:
39:8b:94:47:e5:bb:c7:69:b3:fa:0d:de:d5:40:98:d0:19:e2:
75:a1:bd:19:d2:43:b5:ec:7c:67:d7:fa:8e:94:bc:03:99:02:
60:f3:fc:3d:2c:a8:1e:f2:ac:23:4d:6e:17:6b:1e:80:87:d3:
f9:5c:31:ed:3c:bc:07:e1:42:eb:ef:b2:6b:d0:75:09:30:e9:
26:5e:32:03:a6:da:de:ce:a1:37:6a:2e:7a:25:6a:ee:95:0b:
f6:46:1d:52:09:35:32:df:23:4d:42:33:c2:10:16:cb:ff:63:
05:c9:8d:55:15:5a:2b:42:3a:93:82:68:3b:06:20:f4:f4:fd:
55:d2:9d:66:9f:bc:4c:b8:a6:59:09:c5:79:99:65:93:ce:88:
d2:0f:95:ed:bd:4f:b1:7a:d8:75:5e:47:eb:58:c5:95:c8:f4:
5f:c8:f9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:30 2026 by rpki-client