Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: fdwHJ9GempZTYJeYQw4XChUnIFP4IcPqfsco5AHbPhE=
Subject key identifier: A3:6D:C3:C0:03:1E:90:21:CE:3C:B3:23:13:28:A7:8C:4E:3C:68:D0
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 01A10D02A0B021E01EECFF20FF4E01DCB0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 1A9E
Signing time: Mon 05 Oct 2026 17:00:38 +0000
Manifest this update: Mon 05 Oct 2026 17:00:38 +0000
Manifest next update: Tue 06 Oct 2026 17:00:38 +0000
Files and hashes: 1: 1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa (hash: 2yNm3gZsn/uIFKiYLjVHUVr0sDTSowqLDiGRvdYsMoM=)
2: BpG8igZJv8h8cPkp6g_Gbs3F_SU.roa (hash: EZCW2Mw9lZcsL5iipH/n6h6UZOB/4+vnk665tkL9CRo=)
3: PwG6kgE4pgXJJkL8ugwSTM2yxbE.roa (hash: DDzmamajStjqmhcsDYxm8w9Zc5fmsm1zJsTmwujf+jw=)
4: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: FvEDnCFB6EKCK9Vmnzv4U2N1tcdSZ08RXICJpk38s0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:02:a0:b0:21:e0:1e:ec:ff:20:ff:4e:01:dc:b0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Oct 5 17:00:38 2026 GMT
Not After : Oct 6 17:00:38 2026 GMT
Subject: CN=a36dc3c0031e9021ce3cb3231328a78c4e3c68d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0f:92:e1:34:59:32:ac:16:b4:46:72:fd:7e:
7c:1a:0a:67:f6:33:23:59:bd:54:42:d8:dc:54:d7:
df:dc:e2:e7:66:12:83:e7:6d:40:8c:8b:c5:0b:60:
59:67:18:fd:86:ad:46:7d:4c:f1:30:9e:9f:bd:35:
31:48:f2:8d:2b:29:eb:d3:7f:92:08:41:ef:ee:08:
a7:a3:c1:e6:ea:a8:1b:18:fa:aa:31:14:3c:20:77:
36:f0:eb:29:e2:c8:ea:25:48:26:71:08:3b:7a:ba:
29:05:22:54:12:65:0c:34:e0:e2:cb:dc:ad:d9:cd:
93:c7:03:6b:cd:76:4c:4f:7f:c6:9a:83:63:f9:2a:
02:40:03:fa:54:63:f4:02:8f:10:06:64:65:91:43:
41:06:bb:3e:a2:24:d1:0b:b4:3b:39:34:ed:03:ae:
52:84:68:4e:8c:25:cf:83:50:20:34:a1:5a:ec:9a:
86:27:a3:b2:84:9d:0b:a2:5b:c6:58:b0:2e:82:9f:
44:4a:c0:c3:9c:b2:80:cb:1c:86:35:fe:50:af:92:
fd:09:fa:8a:5f:14:b6:fe:52:a8:8c:55:0d:16:fa:
7c:b5:12:93:0b:26:11:c5:d7:af:0e:a6:76:20:f9:
eb:6f:d6:fa:bb:4b:e4:4c:4f:a4:78:4d:b6:9d:7f:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6D:C3:C0:03:1E:90:21:CE:3C:B3:23:13:28:A7:8C:4E:3C:68:D0
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e5:c7:3d:69:1f:8e:34:e1:b9:e6:60:62:10:fb:cb:32:e9:
34:e1:99:ef:cf:09:d0:e7:6f:00:70:7c:29:b6:90:1c:f1:3f:
aa:a7:f5:cb:eb:64:90:98:05:06:86:90:f4:8c:fe:39:2e:8b:
60:1d:f4:19:63:27:7c:9f:64:8f:44:16:b9:4d:ce:94:fc:f2:
64:e6:4f:bc:e0:87:6f:73:1f:50:9d:57:ba:41:0c:54:70:4d:
e8:25:ee:37:8e:2f:66:57:80:53:b3:69:ae:f6:e7:8d:c9:dc:
bf:53:22:78:45:7f:17:85:62:75:a0:b2:7b:29:5e:77:74:ac:
0a:84:8f:8a:4d:c2:97:1d:7b:5d:66:b5:09:38:5c:11:77:39:
5a:fc:95:e4:d5:64:75:38:5b:b9:64:4e:bc:d6:16:80:05:7e:
a6:ea:a7:ab:23:04:50:29:ea:2c:db:c1:99:69:35:68:19:22:
fd:d6:df:b2:c8:54:e1:34:7a:8f:c8:9c:07:ad:77:07:48:04:
91:2d:81:d8:97:b7:04:fc:9a:cf:4b:6f:ba:2f:77:d6:8e:bb:
a9:73:89:4c:c8:96:76:3f:c6:63:c3:28:80:bb:35:26:97:14:
ec:61:89:d0:17:d1:b8:59:71:45:9e:59:eb:2f:a1:fd:fe:7d:
97:fa:a8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:18:03 2026 by rpki-client