
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: 10ia/Y3Gbs2i00bDUsCfyNTaUc4pegRskbpgGsXIOWc=
Subject key identifier: 86:D5:E0:3A:56:14:81:B3:D9:88:E3:71:55:53:A4:DE:EE:34:DD:FE
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 019D281647FEB8A31D306B0D04CD1D91814C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0F6E
Signing time: Thu 26 Mar 2026 03:00:41 +0000
Manifest this update: Thu 26 Mar 2026 03:00:41 +0000
Manifest next update: Fri 27 Mar 2026 03:00:41 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: W3VEmly29GoPq51jCC7nXQTeBwN0PbnTLoRavMv5oCI=)
2: nle7H145kWARm3i3WSQ0jxUoyxQ.roa (hash: zhsBwF/9ucNK3MWhQYCLkOEtb7B4dCQtxNnhlmW24Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:47:fe:b8:a3:1d:30:6b:0d:04:cd:1d:91:81:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Mar 26 03:00:41 2026 GMT
Not After : Mar 27 03:00:41 2026 GMT
Subject: CN=86d5e03a561481b3d988e3715553a4deee34ddfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:16:1a:8f:54:c7:0b:05:14:25:d4:96:b1:
b3:09:9a:04:0d:d8:0e:60:49:8f:5e:ad:93:c0:06:
d2:b8:a5:8a:80:6b:84:17:14:71:b1:dd:fa:5f:72:
4b:0f:31:b1:1b:75:9d:1a:ae:58:32:1f:71:43:b0:
8e:28:db:44:26:c7:bc:91:de:a4:f1:a3:97:d0:a6:
6b:d7:64:df:0f:1f:c9:94:70:7b:3b:91:54:6d:bc:
8e:14:6f:c1:a4:87:8d:d5:5b:e1:33:32:c7:22:1e:
d2:3e:d5:6b:cc:6a:c1:7a:48:25:69:ed:93:8f:d3:
77:0d:de:b6:51:96:9e:d0:d2:9b:75:28:30:5d:4c:
08:dc:aa:14:4f:13:18:f2:91:26:4b:6d:c2:9e:34:
fe:0a:c1:86:ba:ad:98:0a:48:25:99:d8:e4:75:f8:
88:db:31:c6:98:2a:2f:42:d9:56:18:fd:63:84:19:
61:54:52:d8:80:8c:6a:ef:10:69:38:ae:a5:74:4a:
81:27:c0:b1:a2:cc:5b:06:f5:74:8e:c4:2c:f9:61:
f3:d0:04:d5:b1:4b:91:41:a6:92:d2:18:c4:65:35:
6d:07:c1:19:f8:30:95:c7:a7:40:8c:5a:2f:52:5e:
68:96:17:0a:7e:ae:bb:66:82:d4:9b:ca:b6:5d:27:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D5:E0:3A:56:14:81:B3:D9:88:E3:71:55:53:A4:DE:EE:34:DD:FE
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f3:56:eb:ea:64:b3:5e:e3:53:b3:ef:6b:20:eb:90:bc:7b:
dc:60:81:09:50:e0:37:47:e3:73:87:4b:77:cc:89:00:d4:16:
a4:f7:f1:60:11:8a:a0:c9:7f:c4:6b:c4:36:46:84:a2:33:06:
8f:ca:ed:ed:cb:43:d2:a5:99:f5:a1:71:40:bc:65:ed:dd:e9:
49:2c:07:a7:3b:18:1d:b1:f1:f9:08:ac:f1:b0:00:16:b2:c8:
47:6f:ba:26:1b:4b:d4:e8:69:67:f6:0c:13:26:d1:31:2a:a2:
4e:22:83:76:23:e8:67:95:b2:0c:c0:58:10:64:c9:50:d5:c9:
91:43:96:ea:59:bf:3c:1e:5f:4f:44:a9:fc:b6:2e:b2:e8:79:
7b:23:70:c0:c3:df:1b:11:62:7b:81:71:40:f4:61:36:cb:e1:
12:7d:bd:87:67:55:6d:53:26:c0:1d:c8:72:60:35:4f:97:0e:
fa:a3:72:ac:5f:1a:6e:cf:67:d8:d1:ef:f3:9e:4c:26:2b:06:
72:94:2f:a6:1b:24:3a:00:c0:d0:bd:a4:d3:51:47:ba:98:0f:
60:f3:70:48:57:de:67:17:30:d4:cd:45:2e:cd:1c:16:4b:94:
fa:41:40:0a:a6:ba:b6:03:6a:95:41:5a:1c:1b:7f:80:90:47:
60:15:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:07 2026 by rpki-client