Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: gJPMhaQSh1ZObHEGrY0H0NrGUFJxbfHOF/Qfrnaom1U=
Subject key identifier: FD:79:58:28:49:97:FD:35:10:07:1D:E5:A3:98:AC:1F:26:24:93:E8
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 019F943670AAB1B13CDB6AC88C674B307179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0CF0
Signing time: Fri 24 Jul 2026 13:00:23 +0000
Manifest this update: Fri 24 Jul 2026 13:00:23 +0000
Manifest next update: Sat 25 Jul 2026 13:00:23 +0000
Files and hashes: 1: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: PwlzMIH2TsZfKHjdshijK7aSyqAOVZhte4h/4fO0/8I=)
2: k6dlQXV0CNNHoojLjuToM3RWJts.roa (hash: r/95kr/PA/IvIi+wnWxWmGRUKtlOA3OqudcUD32MdDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:70:aa:b1:b1:3c:db:6a:c8:8c:67:4b:30:71:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Jul 24 13:00:23 2026 GMT
Not After : Jul 25 13:00:23 2026 GMT
Subject: CN=fd7958284997fd3510071de5a398ac1f262493e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:82:c6:15:10:ee:70:e5:d7:4f:6a:25:7d:
e8:d8:dd:af:db:58:0d:4a:1c:ac:0d:3c:7d:a9:76:
23:b5:b4:34:ee:35:b6:57:2c:3f:3d:7c:58:41:aa:
38:fd:ed:ad:a4:17:55:09:ec:98:6c:7b:76:12:da:
4d:20:3b:97:58:ff:2f:f5:64:57:4f:84:e0:0c:1f:
42:00:54:89:35:93:4a:2c:71:a5:7f:d6:4c:a4:a1:
de:91:9b:3b:94:92:b0:f5:17:6b:d9:24:ef:45:f3:
6d:85:76:0b:50:15:dc:72:7e:a4:41:b5:9f:52:f3:
dd:cd:ca:7b:d2:1e:2f:01:30:ac:7b:89:04:be:14:
75:25:d6:fb:08:93:c0:b0:ba:6e:0c:fe:7d:0e:c7:
00:9c:0b:6b:96:d8:e3:17:00:66:99:69:5a:21:7b:
ec:01:23:3f:78:5b:c5:d1:40:cb:1b:93:b2:92:b5:
5e:e4:eb:49:fd:53:99:5a:a3:f1:3c:70:bc:94:dc:
af:dc:39:0d:67:24:4e:c5:d4:fb:8e:3b:44:54:a8:
0d:ac:88:e5:50:a5:21:d5:b3:b9:41:be:96:8b:65:
fb:6d:fc:8a:08:0d:40:38:bf:f3:c9:52:0f:f2:fe:
ec:12:84:f6:21:53:d6:fc:22:19:4f:33:59:5d:25:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:79:58:28:49:97:FD:35:10:07:1D:E5:A3:98:AC:1F:26:24:93:E8
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:0b:12:d8:8f:03:32:a8:d0:ed:9d:b4:30:26:33:b0:d9:48:
14:bc:ca:79:72:e8:c5:b7:99:81:7c:70:7c:5e:12:4d:88:89:
5f:58:03:1d:3c:e6:76:a2:d3:00:b8:b5:d7:8f:e3:62:a4:77:
2a:21:ce:1e:31:18:2e:f2:cb:f7:7d:19:7d:28:ea:5a:71:b9:
7e:70:06:b8:7e:d7:e4:fb:1a:57:2d:7a:36:9c:58:d2:b2:fd:
fc:b3:d5:a3:1d:7c:bb:20:74:b2:dc:40:4d:2f:db:96:ed:80:
67:40:59:46:72:ef:03:4c:64:f3:13:d9:52:88:ce:a7:2e:19:
73:c0:47:53:b1:21:34:57:e6:d2:52:4c:3d:9e:ea:dd:7c:8b:
d7:33:85:75:86:51:53:81:ea:ba:cc:57:3e:8d:1a:43:7d:dd:
78:93:7f:90:2a:1b:32:f1:7e:37:95:f1:95:5f:b6:5f:23:d5:
24:a7:a1:e2:2d:fe:76:a2:f8:25:e6:84:c8:cd:b0:45:3a:4f:
c2:9c:88:3c:6c:21:56:7c:27:48:43:01:6b:f9:d9:a6:0e:fd:
28:50:58:92:82:58:9a:d2:4e:a1:f4:ea:b3:57:6f:5e:f7:36:
a7:b0:9c:2d:47:7e:f9:7b:f8:a1:45:d5:a1:49:00:37:4e:a2:
2e:9a:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:25 2026 by rpki-client