Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: 26wArlFQ+OiaG4zM1ZQAHSFvrRJ7JtJnpBtfs7WQtXA=
Subject key identifier: 96:3A:75:A7:CA:C7:66:1D:1B:9A:50:77:0C:D3:27:4A:00:4E:55:BA
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 019E1FB5D2135657E63AFE237DE84F574872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 191A
Signing time: Wed 13 May 2026 05:01:09 +0000
Manifest this update: Wed 13 May 2026 05:01:09 +0000
Manifest next update: Thu 14 May 2026 05:01:09 +0000
Files and hashes: 1: 1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa (hash: 2yNm3gZsn/uIFKiYLjVHUVr0sDTSowqLDiGRvdYsMoM=)
2: BpG8igZJv8h8cPkp6g_Gbs3F_SU.roa (hash: EZCW2Mw9lZcsL5iipH/n6h6UZOB/4+vnk665tkL9CRo=)
3: PwG6kgE4pgXJJkL8ugwSTM2yxbE.roa (hash: DDzmamajStjqmhcsDYxm8w9Zc5fmsm1zJsTmwujf+jw=)
4: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: u8hydhuk6SFwmr7zkGJIv9G9dhInzAZL8al1DxaUfWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:d2:13:56:57:e6:3a:fe:23:7d:e8:4f:57:48:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: May 13 05:01:09 2026 GMT
Not After : May 14 05:01:09 2026 GMT
Subject: CN=963a75a7cac7661d1b9a50770cd3274a004e55ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c8:09:3c:0a:f0:99:8e:f9:cb:9c:6b:e3:64:
ce:b2:49:95:14:85:bd:a1:c3:5a:ef:07:b7:fb:19:
9b:17:31:6f:c3:f8:51:ac:95:cf:3a:94:06:36:02:
c6:33:dc:33:ac:7a:7d:44:c4:09:88:ad:0d:9e:16:
b4:2b:db:f9:c6:18:fe:94:67:ed:14:cb:40:3e:b5:
3d:72:58:1d:3e:f5:56:8b:3c:d7:68:b6:21:a0:f1:
46:07:8f:1c:99:39:76:9f:ee:24:46:6a:a6:77:b2:
bf:de:96:79:ac:e9:10:f5:24:dc:03:76:ca:d5:51:
de:ee:b8:e4:18:2f:9b:8a:5e:58:93:c8:6a:f9:97:
06:9f:9b:80:95:1f:02:30:49:3d:7e:71:21:86:b2:
14:22:41:25:68:77:88:41:86:85:bc:d2:4e:14:52:
9a:fc:20:2b:6e:a0:d5:e0:cb:11:2f:e0:8d:04:2b:
fc:87:fe:1b:3f:98:d4:6c:fb:ad:d6:ec:f5:d8:94:
c3:d3:ed:1d:d8:aa:02:c6:9f:02:cc:98:10:6e:b7:
38:b8:66:8c:95:1a:6c:b2:cc:ac:0e:6c:b7:b2:1f:
3b:df:88:f3:f2:02:a2:aa:9f:3b:d4:43:3d:a6:08:
e7:a5:3e:cb:96:77:32:13:b6:21:69:14:9e:ee:28:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3A:75:A7:CA:C7:66:1D:1B:9A:50:77:0C:D3:27:4A:00:4E:55:BA
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c8:b7:e4:6f:06:da:41:23:4b:d0:a8:79:47:24:ac:82:d4:
cc:19:01:77:c8:7d:d9:c6:7b:c1:1d:ba:93:3e:a4:2b:48:60:
d2:c5:c0:80:e1:96:a3:27:78:c5:a9:b2:e2:ca:9b:f8:d3:5b:
b5:3b:d3:ea:36:65:82:96:08:20:4b:5e:14:a0:1b:1b:5d:d8:
be:a6:0b:99:0e:80:3b:50:b3:c3:7d:c2:7f:36:5b:e4:85:0f:
2f:87:29:cc:8a:ed:cc:89:8e:ab:6d:47:7e:1a:5b:56:76:7b:
3a:8a:b2:f6:3f:81:e1:43:0e:ba:17:ab:8a:d9:25:ab:59:2d:
d8:de:5a:bb:9f:cf:d9:e9:6a:bf:d2:dc:de:45:c3:e5:f9:4a:
57:7d:59:9d:d6:1e:52:e1:fa:c5:d7:0e:a1:21:f1:ea:a2:85:
fe:d0:06:1f:70:89:4f:ac:d4:ae:e5:1c:d7:5c:7b:8e:81:9d:
b7:75:5f:f2:29:ac:67:ce:c2:9c:e6:8f:aa:4a:5e:c1:4a:b3:
5e:30:b3:dc:58:7f:bf:8a:0e:91:c7:c9:f2:08:20:da:2c:d5:
29:57:28:ab:96:5b:f0:54:ea:6e:45:dc:aa:ef:c6:79:76:3d:
81:a2:f9:9c:3a:19:74:8d:ea:7b:fc:1b:a7:48:75:77:51:0a:
40:e7:8f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:17:47 2026 by rpki-client