Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json)
Hash identifier: G/Br/n4g5o6tsPgtFi/QYRcrMjivoSpmc8kBpos1uUk=
Subject key identifier: EB:02:BF:E0:4A:8D:FA:03:29:80:33:B8:CF:F2:8E:03:C7:A6:87:42
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 019E20FF9D67B9A97D0A67ED1BEEDBC47E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
Manifest number: 1007
Signing time: Wed 13 May 2026 11:01:23 +0000
Manifest this update: Wed 13 May 2026 11:01:23 +0000
Manifest next update: Thu 14 May 2026 11:01:23 +0000
Files and hashes: 1: MKIn2GKscAnSjEe-pKawSjFxEE4.roa (hash: 8pAAduPAownYKe2M33SgXEkvP4hCHBB83tGhPyeNyTU=)
2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: Z44OkyVEn8WXGutIxTT92hLF1AM9+HkZ0iztvJicExo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:9d:67:b9:a9:7d:0a:67:ed:1b:ee:db:c4:7e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: May 13 11:01:23 2026 GMT
Not After : May 14 11:01:23 2026 GMT
Subject: CN=eb02bfe04a8dfa03298033b8cff28e03c7a68742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:ac:3c:8a:2b:00:58:28:ae:f0:fc:62:32:
73:f7:26:e0:5a:4f:27:2d:fd:a5:d9:15:40:1b:1d:
c6:41:c1:f6:07:23:bd:22:fe:47:a7:6c:75:c2:58:
2a:74:55:b5:f3:d0:f2:28:36:cc:b6:54:07:c2:71:
8e:42:71:8e:39:d4:b2:53:3c:46:af:ea:94:b2:8f:
83:f3:0d:88:f0:d8:6e:b0:f1:8e:81:c5:e6:66:d9:
eb:1e:72:b1:a8:c8:f0:19:83:71:2a:b0:2e:41:3e:
93:a3:d0:75:a2:56:a7:30:46:47:65:94:d5:37:51:
16:61:d3:e0:c5:e9:89:01:b9:d3:0f:1c:e0:8a:74:
a7:20:a5:a3:dd:2e:fe:42:db:a7:3f:80:72:34:7b:
13:82:33:ef:de:16:f1:3c:98:58:9f:38:65:c1:46:
40:24:dc:01:9b:92:e1:e9:fe:3f:2c:74:8f:17:aa:
50:41:04:1d:dd:f9:b8:65:0b:f9:2e:b0:e9:5a:02:
ac:9f:d6:8a:04:b5:6a:91:96:ed:84:c8:79:6c:f0:
a5:4c:f2:1f:b3:6f:34:6a:24:51:f5:79:cb:d7:fa:
e4:61:8d:5d:3c:1e:11:2f:19:88:52:cf:6b:d4:0c:
aa:78:c4:8d:82:2c:d0:32:37:77:33:55:01:f6:b5:
8f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:02:BF:E0:4A:8D:FA:03:29:80:33:B8:CF:F2:8E:03:C7:A6:87:42
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6c:25:99:52:f4:aa:11:97:23:75:b5:24:93:ed:83:ca:c7:
97:e8:21:7f:78:fa:2e:75:db:cb:f4:ce:ca:2e:66:44:5f:57:
63:a9:b7:de:37:ed:7c:6c:cb:57:fa:be:f0:6c:c9:33:71:94:
e1:2f:59:84:b7:e3:d9:67:fa:ae:c9:c9:78:03:4f:79:fe:ab:
2f:ac:09:c9:d2:58:84:ab:c1:f3:7a:3a:bb:af:ce:0f:c4:f0:
93:ab:b0:c7:83:27:5f:32:ca:14:8a:36:36:8d:2e:0d:9d:19:
f7:71:0c:d7:b0:83:47:13:73:ac:f7:30:11:07:9b:3f:f7:11:
04:3d:e2:81:c2:3d:03:f0:df:53:52:d4:e9:45:0e:b9:f2:05:
cd:72:f1:e3:67:fd:e2:13:40:df:71:87:ab:2e:37:ea:ca:46:
69:c8:42:fb:36:b5:b1:05:1f:09:07:8b:b2:79:6c:81:f9:ff:
6b:f6:3d:70:fa:30:e1:2d:63:72:db:83:f7:f5:ed:ca:5b:96:
52:a5:53:bc:ab:f0:63:8c:99:de:a4:1e:e0:9e:df:e3:17:ef:
d1:25:e5:b0:db:65:e2:e6:f5:a2:b4:4b:4a:3c:cb:61:fe:d2:
20:e4:0d:a0:6f:b7:1f:97:e3:20:ff:58:a2:ae:36:64:a9:b9:
f5:61:31:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:51 2026 by rpki-client