
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: LqqQNzceMb0B//yDYudbGP8QpJ7RUrRBjhPmo68mIQo=
Subject key identifier: 53:9D:5C:EF:A1:9E:1B:B9:92:E5:B8:14:7F:7A:7C:BA:FA:DE:92:7C
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 019F927F7D82A63A6F876E7543C4B5EB62C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 19DA
Signing time: Fri 24 Jul 2026 05:00:56 +0000
Manifest this update: Fri 24 Jul 2026 05:00:56 +0000
Manifest next update: Sat 25 Jul 2026 05:00:56 +0000
Files and hashes: 1: 1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa (hash: 2yNm3gZsn/uIFKiYLjVHUVr0sDTSowqLDiGRvdYsMoM=)
2: BpG8igZJv8h8cPkp6g_Gbs3F_SU.roa (hash: EZCW2Mw9lZcsL5iipH/n6h6UZOB/4+vnk665tkL9CRo=)
3: PwG6kgE4pgXJJkL8ugwSTM2yxbE.roa (hash: DDzmamajStjqmhcsDYxm8w9Zc5fmsm1zJsTmwujf+jw=)
4: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: 438s8efSa2MrLb+WQVOqsfk5DRkPgtQpuVwRAV5nOaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:7d:82:a6:3a:6f:87:6e:75:43:c4:b5:eb:62:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Jul 24 05:00:56 2026 GMT
Not After : Jul 25 05:00:56 2026 GMT
Subject: CN=539d5cefa19e1bb992e5b8147f7a7cbafade927c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:86:ab:3f:1c:74:40:d2:a0:bf:53:75:8d:40:
3a:d3:da:4d:db:23:c8:83:cf:df:94:13:08:ea:ff:
48:1c:d1:66:f0:55:7a:63:fc:57:3f:95:7e:06:b3:
05:9f:ad:f0:a0:c1:58:27:60:f5:b2:05:f1:02:93:
65:ac:3b:89:07:52:8c:fd:51:ca:a9:21:5b:02:2a:
9f:86:e6:2b:51:5b:43:2f:27:55:dc:2a:5b:c8:34:
a4:08:7b:d8:6d:eb:37:dd:e6:da:cb:a8:dc:93:db:
0a:79:dd:ff:01:98:89:60:49:27:f8:fb:98:08:67:
b4:e4:7a:b5:5d:38:44:ea:bb:78:5a:de:aa:7d:ee:
3b:3a:bc:d1:73:54:8d:6d:55:90:29:37:49:a0:1b:
c3:35:23:15:ae:57:f6:36:91:eb:71:7b:3b:5f:85:
5d:18:ec:cd:e6:3b:6c:de:1f:74:5a:4e:c8:64:cd:
38:e2:e1:61:3d:55:bf:06:de:12:57:1f:f0:aa:a8:
09:f2:73:f1:2d:50:59:b7:10:5e:2f:ba:7f:7d:2c:
18:58:4b:cb:99:0e:5c:29:72:de:3b:19:97:0e:a2:
c9:fb:ff:da:cb:af:52:77:5c:56:06:fd:a1:04:76:
a7:07:4f:c5:c9:3a:02:09:88:da:fe:b9:51:ca:3e:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9D:5C:EF:A1:9E:1B:B9:92:E5:B8:14:7F:7A:7C:BA:FA:DE:92:7C
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9e:36:86:56:31:0a:7b:04:c5:c2:36:79:73:b2:96:d3:de:
4d:0b:fe:a2:55:6d:dc:35:52:4b:29:6d:5f:a3:93:0e:e5:61:
62:e4:e8:42:56:0a:12:45:88:15:53:ab:71:da:5b:8b:2e:54:
3f:fd:53:c7:11:97:13:77:cf:b6:20:4f:9e:5b:ba:0a:32:9d:
21:9b:1a:48:7f:f6:50:42:c1:5d:16:f5:bb:48:60:30:cf:b4:
22:89:0e:a6:1a:36:68:71:23:2e:31:c0:7b:37:95:3f:93:98:
6c:f5:d7:6b:38:13:6c:e9:d2:bd:00:b8:cc:0a:9a:c9:b5:8c:
d2:ff:16:28:4f:40:75:3c:2a:28:ea:8b:f6:37:56:be:11:70:
0e:60:a4:57:d7:4a:0a:fa:99:bd:1b:32:07:56:eb:d3:cc:57:
2a:b4:c1:55:b3:d7:42:0c:85:7d:76:c8:82:03:a9:97:2b:ac:
ec:f8:fe:e7:cc:76:82:1a:88:f8:29:a3:e5:6d:01:4c:c8:a1:
ae:63:df:03:15:d4:75:7e:81:f7:44:91:72:51:db:48:ec:67:
53:73:bc:52:02:72:09:35:74:4c:c3:6f:22:59:51:97:01:d5:
18:26:12:1e:67:fe:3e:03:ba:8e:7e:17:a9:3b:bc:b6:43:75:
7e:b5:97:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:42:44 2026 by rpki-client