Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: RqfhLCXQMwae1eLcmwvg2eKa/OtF2bc4kM8twp79cR8=
Subject key identifier: 38:BA:AC:19:75:85:1D:5F:69:21:E8:F9:48:17:E2:51:93:79:85:CA
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 019D2A724D4C8C2FB9578912DB66ED49D4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 189B
Signing time: Thu 26 Mar 2026 14:00:27 +0000
Manifest this update: Thu 26 Mar 2026 14:00:27 +0000
Manifest next update: Fri 27 Mar 2026 14:00:27 +0000
Files and hashes: 1: 1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa (hash: 2yNm3gZsn/uIFKiYLjVHUVr0sDTSowqLDiGRvdYsMoM=)
2: BpG8igZJv8h8cPkp6g_Gbs3F_SU.roa (hash: EZCW2Mw9lZcsL5iipH/n6h6UZOB/4+vnk665tkL9CRo=)
3: PwG6kgE4pgXJJkL8ugwSTM2yxbE.roa (hash: DDzmamajStjqmhcsDYxm8w9Zc5fmsm1zJsTmwujf+jw=)
4: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: fEma5KTzOl4Wxlo6QlYXZDNZT6ZmL4Nbq4rWJDvRjIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:4d:4c:8c:2f:b9:57:89:12:db:66:ed:49:d4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Mar 26 14:00:27 2026 GMT
Not After : Mar 27 14:00:27 2026 GMT
Subject: CN=38baac1975851d5f6921e8f94817e251937985ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:6f:46:1a:dc:ad:b2:24:60:24:5d:f5:c8:
fb:ef:6d:a9:9c:cf:8d:3a:ee:1d:40:05:9f:9e:b3:
55:9f:a9:a1:88:bd:f1:c2:d0:83:81:47:91:28:00:
52:02:50:5e:75:55:ca:48:50:7a:a8:7a:23:f9:82:
a8:1d:45:0b:d1:fb:77:64:43:f6:73:24:95:12:f7:
f0:4f:15:d6:18:99:a0:12:15:98:e4:2d:c9:e8:34:
42:3a:ee:eb:cd:67:de:a6:70:ef:91:b2:1f:36:0b:
b9:bb:b3:92:ef:90:b9:e9:b5:49:cf:24:52:7d:24:
3e:78:32:fb:50:56:ec:df:29:fb:b1:cc:b7:03:d2:
71:21:61:8f:cc:5f:a5:c0:43:53:d7:11:42:27:ed:
ce:0a:5d:eb:3d:87:c5:66:9f:d5:29:3f:bc:48:b7:
27:31:d6:0c:f6:87:c3:f0:33:dd:de:03:87:52:f8:
b6:13:fc:34:ed:b1:4c:de:28:6e:a0:41:31:54:c4:
37:9d:57:69:47:c1:98:f6:a4:9a:5e:eb:b1:d9:74:
10:29:32:62:0f:46:8f:fc:58:87:8b:21:4c:41:e9:
b5:fd:d7:35:a8:c1:a5:97:03:a9:d6:3d:63:0f:05:
1e:05:8c:c0:86:83:2e:80:9e:95:e3:a0:99:c2:07:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BA:AC:19:75:85:1D:5F:69:21:E8:F9:48:17:E2:51:93:79:85:CA
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b3:7f:58:04:68:7a:4b:e4:ee:0d:88:33:48:b6:4d:86:38:
3e:63:81:77:11:2c:fb:41:4e:3e:39:5e:75:dc:82:ad:2c:6b:
03:c5:a2:28:19:37:bc:62:32:2b:19:1a:49:d4:63:e5:f5:a8:
83:4f:cb:0a:d5:9c:c3:37:bf:be:47:e9:45:af:95:58:bc:c0:
47:b0:1a:0c:ae:a5:ec:c5:6f:07:33:f0:0e:29:9a:6a:14:37:
5a:94:6b:73:d2:86:53:44:01:36:21:44:76:6d:92:57:69:eb:
27:dd:5f:bf:00:e2:94:0b:8c:d6:24:b5:a2:9b:b7:e7:6c:37:
5e:41:50:75:34:2b:e3:c4:a1:d7:6b:05:dd:a4:23:b4:23:fd:
7d:49:e4:3a:a3:fc:9c:7b:d3:9e:98:20:62:f9:56:51:ba:e3:
2f:04:82:d1:23:5c:e7:a8:a1:e7:44:14:bc:82:8f:de:89:56:
13:f6:c9:22:b5:94:f5:e3:4c:63:fa:3e:32:43:e1:13:0a:19:
96:b0:92:ca:a6:49:b8:4c:74:2b:d9:68:9f:77:90:64:8a:08:
21:59:c5:ac:80:07:bb:87:9d:f6:26:b0:e4:4f:56:b4:fa:42:
52:6b:2e:32:10:88:6d:d7:2b:e8:d8:fe:70:d3:6f:9c:46:00:
6f:08:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:56 2026 by rpki-client