
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File: SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier: 2LwF1NT8NO9E9dQVR+MzMfa77r1278MJrMZviN0BIxs=
Subject key identifier: E8:4C:47:50:97:C7:44:B8:E5:40:00:72:01:69:F3:0D:F1:28:AF:76
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial: 01A0EB53B47C4F0DB0E44808478431E1A5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number: 0ED7
Signing time: Tue 29 Sep 2026 04:02:06 +0000
Manifest this update: Tue 29 Sep 2026 04:02:06 +0000
Manifest next update: Wed 30 Sep 2026 04:02:06 +0000
Files and hashes: 1: 2gRf7iiTdlk7BWzjnH0vNLkZWnM.roa (hash: yip4EzAVv8q4u5/gAmnGeaN3GxWOVD6s/OQWmx+Z/JE=)
2: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: 1FDddiTfyfr+vlayDjhCTLHJequnX5U5aNOTcNnaakU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:b4:7c:4f:0d:b0:e4:48:08:47:84:31:e1:a5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Validity
Not Before: Sep 29 04:02:06 2026 GMT
Not After : Sep 30 04:02:06 2026 GMT
Subject: CN=e84c475097c744b8e54000720169f30df128af76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:7f:ce:62:98:41:7e:fd:27:de:6f:d4:cf:
6d:a3:97:36:f4:89:85:52:b2:c6:b6:00:27:83:2a:
25:94:19:60:01:2b:75:5a:ea:3e:09:38:38:b4:fe:
49:19:9c:20:bf:97:3b:74:72:e7:85:53:3d:0c:ad:
15:cf:f7:2e:c4:c4:d1:00:b2:9d:c4:02:3c:f7:9c:
d0:96:d2:ef:3a:2e:d7:5d:36:4a:6e:de:89:1e:f4:
38:97:49:9f:77:e8:41:25:4c:2a:aa:60:6e:18:0b:
15:41:a4:6d:22:58:2f:2a:ce:22:a8:4c:e7:d0:bf:
2a:f6:32:68:4e:38:5c:fb:e3:1f:e9:18:d9:b5:ba:
37:4f:aa:3f:f7:df:5f:12:28:29:aa:51:78:a8:39:
11:1f:e8:4a:3b:5d:06:a2:ac:63:4e:a6:d7:15:bf:
95:b4:59:f1:b5:78:51:0c:67:c0:7f:cd:f1:6c:7d:
2c:a3:d6:15:ca:a6:7a:b0:90:74:eb:b6:65:5c:5e:
8c:95:6b:4d:ca:f5:de:5c:8e:b8:f8:b4:2a:a2:90:
aa:84:1e:a9:15:bc:a0:06:2f:5f:06:a1:ef:40:fa:
0a:44:2a:5f:07:88:c3:29:a2:c7:e9:dd:b3:59:af:
ec:c5:29:d0:61:cc:0d:7e:10:a1:d8:91:e7:84:8a:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4C:47:50:97:C7:44:B8:E5:40:00:72:01:69:F3:0D:F1:28:AF:76
X509v3 Authority Key Identifier:
keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e2:16:a4:ef:3e:04:fc:c5:5d:63:55:2c:68:b7:8e:9c:15:
63:07:2a:1a:38:4d:89:99:d7:12:36:4e:40:b9:d7:17:e4:74:
07:e6:d6:db:a0:10:b7:1a:3b:f2:bc:18:e9:ee:26:9b:d8:b7:
de:f6:d5:6c:52:91:1e:45:bd:20:ba:09:c6:39:5d:be:48:83:
d7:73:69:d7:41:a8:26:a0:e7:99:26:45:1b:5a:8c:23:9f:12:
88:fc:db:ee:7e:78:a5:ca:52:cf:c8:f0:a1:f5:3d:fe:29:ab:
e9:b3:a0:d8:b1:f8:30:c1:7e:a5:3b:a8:71:e1:51:8f:64:e1:
6f:53:60:90:5a:e8:c8:e0:29:d1:a4:06:97:16:0d:ee:5a:74:
98:1e:da:ad:25:ce:9d:d2:7c:d2:57:9b:dc:4f:e5:e9:9b:ce:
fc:66:0e:6c:cf:c0:19:1a:54:ea:7d:4a:7c:cf:c7:af:38:c9:
44:91:f8:fa:0d:28:d0:7c:e2:52:a9:49:f6:35:3d:4a:42:45:
17:ea:76:db:45:79:37:e6:98:aa:8e:90:2b:86:64:eb:ad:cf:
27:cc:07:45:30:9f:7b:c5:70:26:8d:a4:ab:e1:a1:9b:0d:3f:
aa:75:73:79:15:35:db:66:43:f6:dd:96:b1:19:11:c8:70:91:
5a:3c:46:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:41:41 2026 by rpki-client