Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: rkqJjWhguwpZR8b1oQSLrYQlq/NRPIyCT087Fh7KixQ=
Subject key identifier: 50:D7:8C:D3:A8:4C:1C:AF:41:E3:EB:81:74:FB:75:46:3A:E6:21:C7
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 019E2AA70F361187678708CE29F10F4ECB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 190E
Signing time: Fri 15 May 2026 08:00:51 +0000
Manifest this update: Fri 15 May 2026 08:00:51 +0000
Manifest next update: Sat 16 May 2026 08:00:51 +0000
Files and hashes: 1: 9nMZrodBdsGgL23GxlelObATv60.roa (hash: rSWUYx/buhG+K0ScAxLaN5xf6/B7iGfzq+9e0Z2WfnQ=)
2: A3xkmt1D2tsjfBccS8FsgAFUnOQ.roa (hash: nIgl47uG67Ucbrg3x+vJSBwfTbEfiuOT6Ukb3huxJZs=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: TX4K/GTIa0Dktxric/Cnh11P+GrYgTu9YZLkK7TTZbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:0f:36:11:87:67:87:08:ce:29:f1:0f:4e:cb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: May 15 08:00:51 2026 GMT
Not After : May 16 08:00:51 2026 GMT
Subject: CN=50d78cd3a84c1caf41e3eb8174fb75463ae621c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:27:9e:5f:4f:42:6f:c2:5b:f1:a1:fb:3e:
b4:bb:05:78:e8:62:e0:ac:4a:eb:f4:e5:2d:ab:d7:
ac:93:b0:a4:42:7a:d7:53:9b:40:bf:ea:e0:80:09:
5d:c1:82:03:ae:37:b3:05:88:99:bb:6d:fd:22:06:
0e:c7:ac:f7:35:12:5f:a9:ac:72:ff:9b:3d:41:c1:
2b:fa:d1:c5:ca:41:df:3a:1e:13:66:3f:bb:02:93:
27:81:6b:13:db:b0:77:23:c4:18:39:a9:cf:4c:93:
4c:81:bd:26:9c:bf:61:6e:43:1c:d1:d8:54:cd:ab:
2a:1a:ab:67:0b:f7:75:e5:2a:e8:bf:e8:b4:48:87:
e7:c1:c6:2a:4e:05:f1:55:20:63:9a:89:72:e4:75:
0f:b3:95:ab:66:40:f0:e5:bc:d8:d4:88:54:50:19:
5a:5d:59:1c:93:b6:a0:44:a4:eb:c2:9a:c3:5d:79:
a8:3f:5e:0d:f4:e2:71:e2:8c:03:ae:5d:f5:52:1f:
92:ea:02:5b:3f:8a:66:0f:c6:45:d8:6e:2a:5c:e2:
40:72:fb:ef:a2:0e:cd:4e:90:df:9b:10:d4:c6:7d:
23:b9:1c:2d:f6:98:f4:f4:d3:04:cf:09:37:44:22:
62:59:98:4c:48:7e:ab:33:4d:fe:fb:52:21:6d:98:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D7:8C:D3:A8:4C:1C:AF:41:E3:EB:81:74:FB:75:46:3A:E6:21:C7
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b8:56:cd:b8:05:39:53:0f:e3:94:3c:39:35:75:fb:23:be:
27:ab:7d:6c:fc:1c:3c:0c:84:94:9b:61:f0:28:a5:13:53:3c:
0e:0c:dd:21:09:3d:a9:3b:ea:f4:19:8d:c9:7b:11:f0:87:65:
fa:37:94:f1:40:73:a4:d2:3e:a8:ae:9c:e1:92:2d:49:33:03:
21:dc:4b:51:98:ea:80:9b:71:ff:fe:88:bf:24:0c:0b:c9:32:
20:06:9c:1a:19:be:ec:79:30:ee:9a:4b:49:ac:82:9b:b1:e1:
97:53:43:7b:65:9b:a6:78:87:89:eb:49:49:8d:8b:5a:5c:04:
3a:cd:fe:aa:bb:77:e3:28:c8:5f:57:b4:f0:a9:f6:d1:d8:16:
06:15:9f:c7:7c:59:1b:2b:d2:d9:34:a7:ca:79:13:ca:e7:3f:
e6:67:c9:fa:36:73:80:fa:bf:52:e6:db:d2:e3:c3:f4:c4:05:
db:40:bd:3e:01:e9:f2:f8:e6:44:31:0a:95:f2:5a:7d:94:e6:
f9:81:4a:36:e3:2c:eb:81:9d:8f:74:39:62:4c:f9:ed:be:e5:
c3:81:ad:b0:47:a2:31:15:01:80:10:3b:22:cb:84:34:ae:b8:
f4:55:1a:3e:4b:c0:58:f3:e0:84:9a:8b:37:e6:f5:51:ff:90:
a5:4e:6f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qpw82EYdnhwjOKfEPTssMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGZkNDUzZjVlMzVmOWM3N2QxZDcwNmU1NjUxMzhhZGY4
MjI1NmEwHhcNMjYwNTE1MDgwMDUxWhcNMjYwNTE2MDgwMDUxWjAzMTEwLwYDVQQD
Eyg1MGQ3OGNkM2E4NGMxY2FmNDFlM2ViODE3NGZiNzU0NjNhZTYyMWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGEnnl9PQm/CW/Gh+z60uwV46GLg
rErr9OUtq9esk7CkQnrXU5tAv+rggAldwYIDrjezBYiZu239IgYOx6z3NRJfqaxy
/5s9QcEr+tHFykHfOh4TZj+7ApMngWsT27B3I8QYOanPTJNMgb0mnL9hbkMc0dhU
zasqGqtnC/d15Srov+i0SIfnwcYqTgXxVSBjmoly5HUPs5WrZkDw5bzY1IhUUBla
XVkck7agRKTrwprDXXmoP14N9OJx4owDrl31Uh+S6gJbP4pmD8ZF2G4qXOJAcvvv
og7NTpDfmxDUxn0juRwt9pj09NMEzwk3RCJiWZhMSH6rM03++1IhbZigUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDXjNOoTByvQePrgXT7dUY65iHHMB8GA1UdIwQY
MBaAFEmP1FP141+cd9HXBuVlE4rfgiVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi81NDViMDYtODU3Mi00MTJmLWE4MGYt
Mzk3OWVmMGQzMmRiLzEvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi81NDViMDYtODU3Mi00MTJmLWE4MGYtMzk3OWVmMGQzMmRi
LzEvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrhWzbgF
OVMP45Q8OTV1+yO+J6t9bPwcPAyElJth8CilE1M8DgzdIQk9qTvq9BmNyXsR8Idl
+jeU8UBzpNI+qK6c4ZItSTMDIdxLUZjqgJtx//6IvyQMC8kyIAacGhm+7Hkw7ppL
SayCm7Hhl1NDe2WbpniHietJSY2LWlwEOs3+qrt34yjIX1e08Kn20dgWBhWfx3xZ
GyvS2TSnynkTyuc/5mfJ+jZzgPq/Uubb0uPD9MQF20C9PgHp8vjmRDEKlfJafZTm
+YFKNuMs64Gdj3Q5Ykz57b7lw4GtsEeiMRUBgBA7IsuENK649FUaPkvAWPPghJqL
N+b1Uf+QpU5vOg==
-----END CERTIFICATE-----
Generated at Fri May 15 14:40:22 2026 by rpki-client