Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
File: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft (raw, json)
Hash identifier: C0LBz99zfB6lPDdcpGq+qtkipTD9+//APwEROzKNJl8=
Subject key identifier: 59:ED:AC:DB:C4:B7:7E:F4:84:FD:63:D9:E5:36:C2:CC:D3:A8:5A:05
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Certificate issuer: /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial: 019D2960E3AC3408D4E6F9FB3D67CB2A561B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:01:48 +0000
Manifest this update: Thu 26 Mar 2026 09:01:48 +0000
Manifest next update: Fri 27 Mar 2026 09:01:48 +0000
Files and hashes: 1: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl (hash: 7a4Wfd2BghJmTA7eEZzlf+DqCB05x5A9I4HdEHJL70Q=)
2: coNCzvd4EKyjX0UhdzyCswUVu8c.roa (hash: wNZzIhMnJPQrWHw0reoLLRpSJGX0pJCcVwP0w1vwA5E=)
3: mGKDWCPyI5MUqtkn27jC4-87zx0.roa (hash: JD5UOH21GzZdEnZQhjT7oZLqv6/K0tGS2f9U459A/Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:e3:ac:34:08:d4:e6:f9:fb:3d:67:cb:2a:56:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Validity
Not Before: Mar 26 09:01:48 2026 GMT
Not After : Mar 27 09:01:48 2026 GMT
Subject: CN=59edacdbc4b77ef484fd63d9e536c2ccd3a85a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:28:c2:65:8d:c0:b5:55:13:fc:ca:65:8e:
e9:f5:3e:e8:6f:83:65:0a:0d:0c:e4:41:0a:16:a7:
b8:23:9e:2b:79:40:9a:81:73:2b:ad:37:8c:ff:bd:
93:6c:27:d4:bd:a4:1c:6e:46:5f:ec:cd:66:eb:09:
fb:22:30:9c:b6:d7:ba:82:1d:04:b3:be:c1:8f:c0:
f6:c3:6d:41:0f:14:34:cf:16:34:79:86:c6:49:f4:
9e:85:cb:d2:7c:ed:23:8f:51:d8:74:b1:39:e4:ff:
23:42:55:f0:78:5d:44:dc:d1:0d:4e:c7:6d:66:c6:
14:91:08:dc:ee:19:34:c3:28:a7:de:b9:c9:64:ec:
6e:9a:c4:c4:9b:f8:70:e0:3d:eb:f3:14:6e:78:f2:
74:b3:f2:8b:c7:27:88:94:63:61:b4:38:d9:ff:7d:
e0:4b:de:8e:08:4b:ff:80:68:3e:17:d6:3d:bf:e8:
43:75:93:62:62:e2:f3:0c:bd:e4:ca:65:49:a0:5b:
e8:b8:7e:92:33:e7:71:a2:91:7a:7d:aa:f7:8e:8c:
d4:95:0b:96:03:c5:b9:18:ec:14:9a:a3:0d:d3:66:
7e:f1:e8:83:42:b7:13:76:af:d6:b8:82:69:9c:35:
95:39:5f:bd:64:d2:d5:ea:5f:69:38:da:44:48:79:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:ED:AC:DB:C4:B7:7E:F4:84:FD:63:D9:E5:36:C2:CC:D3:A8:5A:05
X509v3 Authority Key Identifier:
keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0f:e9:77:f5:65:e1:4d:48:ca:ee:14:e1:7f:5a:91:ae:c8:
91:e2:9c:1e:0d:3d:da:3a:cb:d9:d8:22:1f:1e:e4:cc:d4:b1:
62:19:d3:ce:43:89:27:d4:bc:27:e0:a6:9c:e4:d9:6f:b3:fe:
56:00:ef:b5:7b:9b:f5:4a:89:f8:b7:74:d4:92:0b:12:f9:a1:
e4:7f:ff:46:e0:56:9b:67:64:f1:55:b2:3f:d7:d3:88:a4:a6:
42:24:f2:69:6d:a7:47:8f:84:95:e5:68:ce:48:8d:4c:dd:11:
62:45:38:c8:6b:1b:3a:d5:a4:d9:ec:4d:58:9f:73:d0:02:08:
fc:27:75:a1:c6:06:7f:11:fb:c4:28:ab:28:e9:8d:9a:ed:3e:
f4:04:ad:54:24:9a:97:53:a8:5e:99:30:8e:33:4e:c9:0e:1b:
b8:39:02:4a:f9:df:69:0e:7f:60:c8:50:52:b7:70:3f:c0:25:
83:5f:e0:ec:c2:af:c3:22:e7:a1:3b:13:a0:50:d6:2e:af:39:
4e:5c:d4:04:da:04:ca:3f:da:73:e6:fb:b4:4c:fd:95:f7:ad:
b7:5f:c0:7d:d1:55:0e:37:9d:5f:eb:0c:2d:12:c6:56:b3:7f:
c7:fe:bf:20:04:6c:f9:17:a8:d3:21:18:a3:23:45:a8:d1:f5:
6f:10:24:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:32 2026 by rpki-client