Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: RAnpPWO+aMPZWnxiHa3jW84zwF5ENe0hIiTQ5WCM1ok=
Subject key identifier: 98:5B:11:5E:52:3D:10:E9:AA:4F:A9:DB:6D:6B:E0:24:10:7E:D9:3E
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 01A10692DE14830050BA2BBCBC7512FADF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 11:00:50 +0000
Manifest this update: Sun 04 Oct 2026 11:00:50 +0000
Manifest next update: Mon 05 Oct 2026 11:00:50 +0000
Files and hashes: 1: 9nMZrodBdsGgL23GxlelObATv60.roa (hash: rSWUYx/buhG+K0ScAxLaN5xf6/B7iGfzq+9e0Z2WfnQ=)
2: A3xkmt1D2tsjfBccS8FsgAFUnOQ.roa (hash: nIgl47uG67Ucbrg3x+vJSBwfTbEfiuOT6Ukb3huxJZs=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: HcxgQACz5bjaeZf8hq/kTPMB6q+WYmWw+SFj0q/+YfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:92:de:14:83:00:50:ba:2b:bc:bc:75:12:fa:df:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Oct 4 11:00:50 2026 GMT
Not After : Oct 5 11:00:50 2026 GMT
Subject: CN=985b115e523d10e9aa4fa9db6d6be024107ed93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:6f:11:f9:8d:82:bc:f4:c1:cf:47:18:d4:
22:f6:b9:31:1f:2e:63:b0:e4:b7:de:50:71:10:c1:
fe:5c:76:86:35:bb:f5:3a:e5:aa:27:d6:19:92:9a:
89:3a:53:1a:4e:92:40:98:49:e8:5f:a1:a3:52:13:
e8:04:f8:f3:ae:b9:d9:4d:ac:e6:b5:af:a8:68:19:
58:a4:e7:c3:58:7c:2f:29:30:c9:3a:4d:a2:c2:b3:
12:b5:f8:ac:0d:83:10:b4:e2:70:2e:44:67:21:ab:
83:8a:48:8e:40:9e:02:34:e9:ca:d1:33:14:54:bb:
03:82:1f:b0:dd:a0:4d:07:af:6a:66:50:82:2e:c4:
89:99:fd:5a:98:4d:18:d9:b2:31:18:57:f9:2d:5d:
0a:a0:1c:32:9f:de:ee:a8:d6:a1:38:1c:66:e8:10:
78:66:ec:9d:cb:cd:7f:33:2f:4a:bf:73:43:a1:1a:
51:d5:a4:85:d1:50:7c:f2:84:cf:b4:d6:9a:c0:89:
61:88:1b:f5:c2:71:d4:22:9a:ca:2f:94:73:42:37:
dc:00:0d:f4:59:7f:32:9c:47:8b:9e:43:83:5d:af:
11:e8:13:91:32:ee:1b:db:78:88:0e:46:e3:dc:86:
db:7b:1a:ee:75:ac:5e:21:6a:85:35:33:db:6b:6d:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5B:11:5E:52:3D:10:E9:AA:4F:A9:DB:6D:6B:E0:24:10:7E:D9:3E
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:13:1f:24:3f:15:02:04:93:ba:c6:fb:04:73:73:52:7f:a5:
75:4b:2f:83:0e:5f:c4:f1:9d:90:f7:95:56:e5:a5:63:4a:03:
ff:d0:32:73:f7:8c:6c:f4:b9:3b:5a:2c:c7:8e:2b:a9:fb:01:
34:85:75:54:f5:9c:ed:23:45:df:e8:49:58:62:b2:0e:a5:04:
2f:a3:30:32:0b:6d:bb:d6:a9:6c:3f:73:97:87:c9:da:d5:22:
1a:51:2c:76:3f:93:04:b1:82:18:59:b5:e1:bc:e4:2d:c8:68:
20:1a:08:6e:68:1b:84:49:c9:3c:04:57:2c:9b:90:5a:ac:c0:
61:10:a8:fb:62:a8:79:dc:00:6f:65:e4:6f:a6:ba:33:fe:db:
97:ac:22:9e:6c:c9:6e:7e:fb:e3:3b:ce:9e:2d:ed:c9:da:f2:
e7:cb:85:08:ed:69:37:ea:25:de:a1:ad:6a:31:d1:d1:d3:dc:
64:e3:0e:56:8a:76:84:d1:d5:9d:d1:36:57:5b:09:4b:e0:e7:
f0:58:aa:14:76:1d:4d:a3:08:b3:a7:de:93:92:f2:bb:d6:71:
82:40:d7:e0:7b:54:44:1c:2e:95:90:ef:8c:e6:1f:93:93:e6:
a1:1f:02:ed:8e:cb:8a:d7:4e:47:9e:22:81:00:27:ef:e1:10:
86:04:62:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGkt4UgwBQuiu8vHUS+t9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGZkNDUzZjVlMzVmOWM3N2QxZDcwNmU1NjUxMzhhZGY4
MjI1NmEwHhcNMjYxMDA0MTEwMDUwWhcNMjYxMDA1MTEwMDUwWjAzMTEwLwYDVQQD
Eyg5ODViMTE1ZTUyM2QxMGU5YWE0ZmE5ZGI2ZDZiZTAyNDEwN2VkOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxohvEfmNgrz0wc9HGNQi9rkxHy5j
sOS33lBxEMH+XHaGNbv1OuWqJ9YZkpqJOlMaTpJAmEnoX6GjUhPoBPjzrrnZTazm
ta+oaBlYpOfDWHwvKTDJOk2iwrMStfisDYMQtOJwLkRnIauDikiOQJ4CNOnK0TMU
VLsDgh+w3aBNB69qZlCCLsSJmf1amE0Y2bIxGFf5LV0KoBwyn97uqNahOBxm6BB4
Zuydy81/My9Kv3NDoRpR1aSF0VB88oTPtNaawIlhiBv1wnHUIprKL5RzQjfcAA30
WX8ynEeLnkODXa8R6BORMu4b23iIDkbj3IbbexrudaxeIWqFNTPba229/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhbEV5SPRDpqk+p221r4CQQftk+MB8GA1UdIwQY
MBaAFEmP1FP141+cd9HXBuVlE4rfgiVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi81NDViMDYtODU3Mi00MTJmLWE4MGYt
Mzk3OWVmMGQzMmRiLzEvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi81NDViMDYtODU3Mi00MTJmLWE4MGYtMzk3OWVmMGQzMmRi
LzEvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBMfJD8V
AgSTusb7BHNzUn+ldUsvgw5fxPGdkPeVVuWlY0oD/9Ayc/eMbPS5O1osx44rqfsB
NIV1VPWc7SNF3+hJWGKyDqUEL6MwMgttu9apbD9zl4fJ2tUiGlEsdj+TBLGCGFm1
4bzkLchoIBoIbmgbhEnJPARXLJuQWqzAYRCo+2KoedwAb2Xkb6a6M/7bl6winmzJ
bn774zvOni3tydry58uFCO1pN+ol3qGtajHR0dPcZOMOVop2hNHVndE2V1sJS+Dn
8FiqFHYdTaMIs6fek5Lyu9ZxgkDX4HtURBwulZDvjOYfk5PmoR8C7Y7LitdOR54i
gQAn7+EQhgRiOA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:51:50 2026 by rpki-client