Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: QQRY1nfKaze4+wxG4p3klecRqx4kkBVxGUXPKpQPufs=
Subject key identifier: DD:AB:EE:58:4B:F3:9F:BC:8A:16:44:36:60:BC:2F:C3:65:28:0C:4F
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 019D284E6D120EAA4F7A326D1DB00A41ED4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0BAF
Signing time: Thu 26 Mar 2026 04:02:01 +0000
Manifest this update: Thu 26 Mar 2026 04:02:01 +0000
Manifest next update: Fri 27 Mar 2026 04:02:01 +0000
Files and hashes: 1: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: A+g2EYYWqUtk3ZNAahvC+QbCLEXBXNxNhSxejuIYNDg=)
2: k6dlQXV0CNNHoojLjuToM3RWJts.roa (hash: r/95kr/PA/IvIi+wnWxWmGRUKtlOA3OqudcUD32MdDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:6d:12:0e:aa:4f:7a:32:6d:1d:b0:0a:41:ed:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Mar 26 04:02:01 2026 GMT
Not After : Mar 27 04:02:01 2026 GMT
Subject: CN=ddabee584bf39fbc8a16443660bc2fc365280c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:41:0c:7c:4c:41:80:02:c9:52:ea:8e:90:
79:a1:00:a2:85:22:c6:43:b8:7a:84:39:e4:61:da:
f2:c2:4f:8e:29:c2:f1:d1:35:df:b9:fc:ed:4d:79:
9c:72:dc:5b:c8:4f:65:c8:c9:16:48:fb:00:4f:6e:
22:b0:21:11:97:f8:7a:c1:07:99:66:9e:13:3e:04:
68:06:de:64:e4:c8:06:7a:be:af:3c:a8:48:4a:97:
83:58:d6:6a:f1:c0:32:77:31:b0:24:f8:67:a6:7e:
f7:34:b8:79:84:d2:bf:41:63:ea:31:7b:c9:84:d6:
52:85:a1:9e:eb:b2:7c:53:e3:f4:13:91:92:d7:c9:
40:6c:c8:1c:af:ba:e5:56:91:17:10:14:e1:82:33:
07:cb:d9:7a:22:6f:e0:87:a5:7c:0f:9b:76:bb:74:
82:d0:00:f4:3e:2a:8a:59:6f:c0:d8:e7:6c:c2:7c:
ba:8d:d8:09:f9:37:eb:32:51:47:c2:2c:dc:e1:e9:
c0:3b:f3:61:44:e0:a4:7f:bf:c7:5e:60:29:e1:bf:
af:dc:e0:b4:9f:ba:ef:19:66:85:4c:28:37:3e:be:
7d:13:e6:71:ca:35:be:15:82:85:41:c4:de:ab:2e:
16:4b:95:98:50:99:d0:86:1b:69:c1:bb:4f:13:7d:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:EE:58:4B:F3:9F:BC:8A:16:44:36:60:BC:2F:C3:65:28:0C:4F
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:29:e0:d6:e0:82:53:0a:71:fd:c3:82:01:37:e1:88:d4:c4:
c7:cf:07:7a:0a:ff:b5:7d:72:e2:e0:d1:d4:81:ff:f0:f9:0a:
38:8d:d7:dd:2e:35:22:06:77:3c:96:94:a1:81:70:44:bf:a9:
d6:e8:ef:a7:09:90:61:5f:dc:b2:72:29:c1:86:b6:1e:b1:9a:
ff:34:29:f5:67:fa:53:20:83:99:ba:4d:bd:54:b9:f3:ba:31:
f2:6d:97:6f:8a:50:b4:f1:6e:f4:34:18:3f:4e:a4:df:0f:8b:
94:d9:0f:2a:7f:cf:e3:87:79:d7:ac:3d:28:bd:82:5d:25:c8:
99:6b:9b:59:ba:08:da:0b:c1:d3:17:a6:6e:a1:c6:02:ec:ab:
61:cd:b2:32:45:77:84:d4:b2:d7:6a:4c:20:b0:c9:9d:5f:90:
af:36:9c:ea:b8:76:2f:7f:fa:85:c0:9c:ba:69:2d:01:da:f0:
4f:1e:90:9b:85:b7:97:41:00:87:38:06:4e:91:75:bc:c9:dd:
76:42:fb:55:30:e8:65:00:32:94:d2:4d:97:72:b3:89:ef:ce:
5b:b4:e5:c0:ed:65:ef:dd:a6:61:c9:22:38:aa:24:83:ec:cd:
87:c2:1a:7e:b3:d3:5d:79:30:2d:25:a0:b3:c9:e9:55:62:5f:
50:fb:2b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:56 2026 by rpki-client