
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier: 2CgBGJCEdXsthNIrXlWnse/QRafPswwD4eaz9j/O5mI=
Subject key identifier: C8:52:D9:29:9D:14:6D:03:98:BB:6A:DD:38:57:A7:81:F5:16:1B:FF
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 01A0D727C258C624F41D53489804C0099B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number: 15AF
Signing time: Fri 25 Sep 2026 06:01:41 +0000
Manifest this update: Fri 25 Sep 2026 06:01:41 +0000
Manifest next update: Sat 26 Sep 2026 06:01:41 +0000
Files and hashes: 1: lTiIdOCkR7HQgUlBuUv00XWG8n8.roa (hash: 5GQQkbQ8C7wWLUQ4RuOd8R+85EFkyHaFY8FEJbVGNpw=)
2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: +bGDJlZgwTiaWz8FLV3z33wKdFXgXSrW5b0VqQTSiZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:c2:58:c6:24:f4:1d:53:48:98:04:c0:09:9b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: Sep 25 06:01:41 2026 GMT
Not After : Sep 26 06:01:41 2026 GMT
Subject: CN=c852d9299d146d0398bb6add3857a781f5161bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2b:e1:3c:ce:6d:74:cd:f3:9a:df:89:03:65:
3b:cd:b7:54:cd:a9:75:e5:a9:8d:38:68:77:4b:e8:
3d:a2:24:74:64:ac:c5:98:b0:e5:af:ad:5a:d5:90:
64:69:29:18:63:f7:18:9b:1f:28:54:72:fc:d7:06:
ba:e2:c3:cb:07:b3:a6:0e:0c:1f:0a:68:7e:80:ec:
70:b8:72:c5:4f:06:e3:48:93:a4:49:47:3d:3b:6a:
9f:b3:a8:7d:7c:b6:46:fe:f4:a8:77:65:d3:98:d4:
28:db:7c:70:49:c6:b0:4e:6d:2d:ee:eb:88:ab:f9:
71:77:7a:fe:33:62:57:ab:a7:21:e8:8f:20:13:c8:
62:8c:92:27:c0:32:66:65:14:f3:4b:71:0d:7a:aa:
2f:5d:cf:3e:5d:32:04:14:0c:b1:28:07:d1:9a:c3:
7d:f1:e8:da:7a:ff:a4:6d:81:82:e1:e1:e4:40:fc:
f5:a9:ac:83:ed:b8:25:ce:b7:19:9e:ad:6b:cf:35:
ee:6a:c8:e7:93:ba:57:ef:5b:c2:33:88:2b:eb:8b:
50:b6:b8:5d:ad:41:64:55:5a:dc:34:f2:b0:01:52:
59:a4:3f:4d:88:74:d2:53:73:91:56:79:af:9d:b6:
0e:c4:de:a5:a0:02:96:93:99:d1:6b:8b:66:9c:bf:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:D9:29:9D:14:6D:03:98:BB:6A:DD:38:57:A7:81:F5:16:1B:FF
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7f:5b:7f:0d:fa:67:48:70:3e:f5:86:d1:81:61:a8:d0:c4:
24:02:70:7a:68:45:d0:4a:24:15:e0:13:f4:f7:2f:a9:8a:f5:
c8:77:28:5d:5a:1e:01:bf:c7:7b:ed:0a:fc:5d:c4:77:47:bc:
d6:59:d3:f2:ef:64:ca:30:55:bb:fd:c4:fe:46:2c:5f:9e:33:
d6:1c:99:47:39:94:e9:f0:dc:7f:d8:de:84:b2:58:8d:3b:65:
2c:49:73:c0:df:a0:b2:58:22:62:c4:24:13:99:87:0e:af:82:
60:78:9a:b3:a8:74:65:6c:08:60:27:9b:14:bf:2d:e5:0f:9e:
4a:9b:cc:8a:34:da:1f:66:b2:4a:1e:38:32:da:96:be:0f:29:
fd:cc:de:87:18:5a:a8:c0:57:53:31:56:35:b7:0c:7a:90:4e:
a9:cf:f0:42:4c:45:4a:7e:c4:c0:04:32:df:20:a9:eb:4a:2b:
61:f3:b4:58:c3:a8:3a:ee:98:73:8f:92:3d:e3:7c:fc:02:be:
e9:03:c6:05:82:0b:43:ac:a3:4e:56:7d:30:8a:75:20:ff:f1:
f9:01:57:32:9c:47:1c:ed:52:c3:77:dd:5d:c0:bd:a6:4e:bf:
25:04:e3:e6:9e:7a:67:d1:fd:be:32:07:42:0e:fa:4c:e1:d9:
02:20:94:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:25:54 2026 by rpki-client