
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier: 7/KB6Zo+ekGipBVxkj/hDZqdIc2XX9uX48KEJD39v7Y=
Subject key identifier: F8:A1:99:F7:90:66:88:27:AC:AC:68:EF:7B:BD:A2:2C:7E:01:CB:0C
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 019E1DFE2CF2CD541ED42EB1A7CA34DD7F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number: 1446
Signing time: Tue 12 May 2026 21:00:57 +0000
Manifest this update: Tue 12 May 2026 21:00:57 +0000
Manifest next update: Wed 13 May 2026 21:00:57 +0000
Files and hashes: 1: lTiIdOCkR7HQgUlBuUv00XWG8n8.roa (hash: 5GQQkbQ8C7wWLUQ4RuOd8R+85EFkyHaFY8FEJbVGNpw=)
2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: aonMec1e0uBiSP6NzOEbYZEIAzLTIUAA3lyk4qFOqnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:2c:f2:cd:54:1e:d4:2e:b1:a7:ca:34:dd:7f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: May 12 21:00:57 2026 GMT
Not After : May 13 21:00:57 2026 GMT
Subject: CN=f8a199f790668827acac68ef7bbda22c7e01cb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:f2:55:ef:68:dc:1a:73:fc:57:a1:c4:40:
7c:22:17:74:0f:57:31:05:ab:99:cb:4e:14:1f:57:
93:19:3f:50:39:7a:6f:57:2d:08:e1:7b:28:44:1d:
4e:54:03:3a:11:c2:d6:6e:6f:b2:69:29:4c:d3:40:
10:7e:5e:5e:aa:73:12:d2:bf:6c:4a:dd:2f:94:e7:
77:26:1b:22:c7:f7:49:9d:02:83:9f:3e:17:df:7c:
87:91:27:8d:b8:7e:91:2a:63:b3:8c:01:d7:36:e5:
ce:b4:86:63:b9:09:64:f3:60:15:8d:4b:89:59:ae:
5d:e0:e7:8e:14:3c:2c:59:4f:74:88:e7:06:ff:9c:
a3:cd:25:1d:9f:fc:54:5f:f9:ad:70:c6:41:54:05:
e3:97:1c:b6:48:65:d2:ab:74:13:1d:83:80:a3:9f:
48:a3:34:f5:82:8e:70:57:05:32:5d:25:14:d2:a4:
a7:91:e3:45:85:f6:68:f5:ea:ea:85:46:09:7f:47:
3e:32:28:38:38:2b:e3:5f:ca:92:97:ff:ff:62:de:
f4:98:09:99:3e:13:29:93:d9:9a:91:91:cf:52:4b:
57:5c:a3:7f:43:9f:ac:ad:e4:38:ad:9c:db:10:54:
27:00:93:36:61:4a:53:39:65:e5:cf:b6:eb:5f:55:
44:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A1:99:F7:90:66:88:27:AC:AC:68:EF:7B:BD:A2:2C:7E:01:CB:0C
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f5:c4:bb:02:d9:14:06:5d:a1:76:b9:1a:ec:1b:e8:84:c8:
11:5f:31:6f:b2:a1:6a:c5:0e:51:4e:68:b6:3b:03:94:a8:02:
9a:d7:09:d0:10:b4:7e:07:74:7c:2d:d6:48:fd:9e:96:31:71:
c2:66:f1:d1:d7:23:06:6b:9a:ab:d9:01:53:30:46:69:a7:54:
90:e4:6b:0a:c8:e8:2f:b8:e9:1f:01:66:68:50:d3:dd:eb:f9:
91:d2:1c:c4:ac:93:18:06:7e:db:c8:93:b2:23:a1:92:d4:72:
39:53:07:1f:85:57:33:d9:00:17:29:83:41:99:bc:81:ec:85:
3e:a2:96:35:29:ba:7e:5f:77:e7:81:a9:fb:a6:70:f8:8c:d0:
73:a7:1d:56:13:e1:bc:a9:48:f3:b6:3d:ca:81:f9:b0:f5:6c:
94:fe:38:f6:1f:ed:90:37:58:67:f9:f4:0d:cb:4f:8d:30:5d:
38:e6:fe:35:70:6a:87:22:98:4a:24:de:b5:e4:34:33:9e:47:
7b:9e:54:40:dc:c6:a7:66:0c:ba:08:69:4f:df:5d:9a:c5:58:
c9:e7:55:45:df:e8:52:e0:c1:f8:db:75:b3:0f:46:a7:a4:26:
60:25:3a:85:7f:d1:75:d7:6c:8b:a2:be:44:be:62:f6:6f:7f:
64:a9:af:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/izyzVQe1C6xp8o03X8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMjFjYjgyODkwOGY0MzA3NDllZTNhNWYyYTYyZGU1Zjgy
MmY3ZDEwHhcNMjYwNTEyMjEwMDU3WhcNMjYwNTEzMjEwMDU3WjAzMTEwLwYDVQQD
EyhmOGExOTlmNzkwNjY4ODI3YWNhYzY4ZWY3YmJkYTIyYzdlMDFjYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvXyVe9o3Bpz/FehxEB8Ihd0D1cx
BauZy04UH1eTGT9QOXpvVy0I4XsoRB1OVAM6EcLWbm+yaSlM00AQfl5eqnMS0r9s
St0vlOd3Jhsix/dJnQKDnz4X33yHkSeNuH6RKmOzjAHXNuXOtIZjuQlk82AVjUuJ
Wa5d4OeOFDwsWU90iOcG/5yjzSUdn/xUX/mtcMZBVAXjlxy2SGXSq3QTHYOAo59I
ozT1go5wVwUyXSUU0qSnkeNFhfZo9erqhUYJf0c+Mig4OCvjX8qSl///Yt70mAmZ
PhMpk9makZHPUktXXKN/Q5+sreQ4rZzbEFQnAJM2YUpTOWXlz7brX1VEiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPihmfeQZognrKxo73u9oix+AcsMMB8GA1UdIwQY
MBaAFLMhy4KJCPQwdJ7jpfKmLeX4IvfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYt
ODdmMzQxODg4NTYwLzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYtODdmMzQxODg4NTYw
LzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/XEuwLZ
FAZdoXa5Guwb6ITIEV8xb7KhasUOUU5otjsDlKgCmtcJ0BC0fgd0fC3WSP2eljFx
wmbx0dcjBmuaq9kBUzBGaadUkORrCsjoL7jpHwFmaFDT3ev5kdIcxKyTGAZ+28iT
siOhktRyOVMHH4VXM9kAFymDQZm8geyFPqKWNSm6fl9354Gp+6Zw+IzQc6cdVhPh
vKlI87Y9yoH5sPVslP449h/tkDdYZ/n0DctPjTBdOOb+NXBqhyKYSiTeteQ0M55H
e55UQNzGp2YMughpT99dmsVYyedVRd/oUuDB+Nt1sw9Gp6QmYCU6hX/Rdddsi6K+
RL5i9m9/ZKmvmg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:33:16 2026 by rpki-client