Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier: NJQ98dFMdjVn1vy30vwPwzhlFwknsyJMF8xRfqpULuU=
Subject key identifier: 1D:3D:36:CA:BB:DB:F5:07:6A:EB:0E:46:01:07:E7:8F:6E:A6:E8:C3
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 019D26CD07DFF14EFE6DD9D2A7064C5592D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number: 13C6
Signing time: Wed 25 Mar 2026 21:01:04 +0000
Manifest this update: Wed 25 Mar 2026 21:01:04 +0000
Manifest next update: Thu 26 Mar 2026 21:01:04 +0000
Files and hashes: 1: lTiIdOCkR7HQgUlBuUv00XWG8n8.roa (hash: 5GQQkbQ8C7wWLUQ4RuOd8R+85EFkyHaFY8FEJbVGNpw=)
2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: 7nw2S5GDU1j0rjsJCtyXeCt/2ET1WLfo3na3tWOl5uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:07:df:f1:4e:fe:6d:d9:d2:a7:06:4c:55:92:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: Mar 25 21:01:04 2026 GMT
Not After : Mar 26 21:01:04 2026 GMT
Subject: CN=1d3d36cabbdbf5076aeb0e460107e78f6ea6e8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:89:3c:42:ab:e8:ae:c0:27:55:d5:f3:28:
ce:9d:4f:08:56:18:99:21:c8:c9:84:7a:06:c7:57:
ea:3e:32:cf:27:1b:e5:d6:85:1d:4c:5c:ff:67:25:
db:d9:90:87:54:1c:b0:c1:b4:e9:cb:e2:64:8b:7e:
b1:1b:0f:55:6a:4c:92:d1:5a:e9:00:8e:4a:66:f5:
84:47:53:f2:29:e1:1e:13:24:ca:02:fd:06:f2:f1:
85:a7:bd:db:bb:e1:71:56:59:6f:6d:d3:0b:61:3a:
25:fc:03:38:8b:db:2f:42:d3:ca:0d:95:92:55:ab:
78:74:f3:9a:50:e3:c2:9b:b4:8d:41:53:a1:b4:4e:
30:2f:a9:96:4a:70:05:db:86:4b:a4:a6:48:23:5c:
7b:3e:df:11:ac:ab:d9:9c:f8:bf:da:a8:0a:81:f3:
55:2f:4a:da:83:c4:4d:9f:c4:2b:44:c6:7c:63:78:
6f:a7:16:35:f4:7f:d8:bf:2e:0d:02:f6:48:f6:f2:
30:e6:75:55:65:8b:d5:25:b9:fe:e3:62:d5:7b:5a:
dc:2d:dd:11:54:f3:cc:66:25:8a:91:2b:7b:1c:c7:
d4:98:c6:cc:43:22:db:f6:02:a9:48:ec:28:8b:11:
c5:a2:61:73:3b:1f:9c:3e:53:32:6f:a2:d2:3a:48:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3D:36:CA:BB:DB:F5:07:6A:EB:0E:46:01:07:E7:8F:6E:A6:E8:C3
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:50:74:57:22:96:ce:66:f8:3d:f3:ad:1d:95:8f:a4:14:7b:
b3:c2:3b:9d:c6:0a:f0:3b:ac:d7:32:c8:5a:aa:37:77:44:2f:
e4:80:3f:f6:be:b5:13:69:14:b8:f2:54:61:95:6f:e4:b7:f4:
69:a5:41:32:79:c7:ca:11:b4:3d:9b:84:70:d6:a7:c7:d4:55:
cd:3b:87:24:34:80:30:bf:d1:29:8b:31:d3:b4:14:d9:51:0f:
13:ac:f2:32:86:3d:6f:2b:8a:ec:21:ee:16:fc:3c:3c:cf:c5:
d4:52:87:ff:2c:cc:fb:93:65:86:72:cd:d6:61:b5:86:2d:e7:
08:ed:ee:57:2b:5d:16:84:c0:8e:5b:df:a1:35:42:24:bf:44:
a4:b1:be:39:cd:22:f9:c8:03:77:70:ac:f1:3a:f6:12:a7:61:
21:16:2c:2f:40:d9:ae:07:ea:24:49:3b:2b:de:d5:ee:c4:b2:
63:b4:14:e0:e8:7c:b0:2f:69:f1:58:a6:7f:94:22:42:cd:12:
3b:32:fe:51:f4:27:aa:b1:99:da:63:07:0f:89:09:43:be:22:
d2:93:a1:72:37:13:d3:23:2a:88:90:27:f8:8d:10:31:70:a3:
02:ee:07:c9:f3:d5:e9:1d:64:26:5d:6e:cf:6e:85:e0:af:b2:
b9:42:96:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:32 2026 by rpki-client