Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier: JXzPy/0obePRqFr3NNMf10ZXZeThRtFxQZuk7DqsFAs=
Subject key identifier: D0:44:34:01:45:96:38:9E:BA:40:CA:01:5B:5A:47:50:45:C8:1F:9E
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial: 019D2B850BF3C095FF00E28382030ADADAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number: 0466
Signing time: Thu 26 Mar 2026 19:00:32 +0000
Manifest this update: Thu 26 Mar 2026 19:00:32 +0000
Manifest next update: Fri 27 Mar 2026 19:00:32 +0000
Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: EnBS0At78ZdSmVx4Uswj9aMRKEz5t9qFAASIh1xCLi0=)
2: zqYVRlTgvHpJDmnzblzgqUd1qtQ.roa (hash: e8da42eEgoMlNnpHHSa7Q7x96Sq3pNxhBs6tD28L410=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:0b:f3:c0:95:ff:00:e2:83:82:03:0a:da:da:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
Validity
Not Before: Mar 26 19:00:32 2026 GMT
Not After : Mar 27 19:00:32 2026 GMT
Subject: CN=d04434014596389eba40ca015b5a475045c81f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:02:41:5a:f5:51:f3:c0:6e:fe:29:d3:ff:
4a:39:87:8b:df:58:03:4b:1c:4a:c2:75:b5:b8:87:
7b:a1:5f:fc:3f:91:30:0a:6d:87:4b:84:00:b6:ed:
f8:01:d2:83:ca:ba:8d:95:67:bd:eb:47:cc:c8:11:
7f:d5:a4:f6:15:3b:ae:c9:7b:0f:67:56:47:4f:e5:
f7:0f:8e:2e:64:e5:ca:a7:51:ce:98:a0:06:7f:0b:
f5:13:ca:c4:7e:96:a5:93:1d:6d:e3:cd:57:49:af:
88:ee:de:9a:c7:80:3e:02:c2:76:72:60:cd:ef:7b:
c3:d1:70:00:de:01:6c:10:3c:a5:cf:9b:46:95:43:
d6:9e:f1:62:0f:cb:e9:31:02:3b:1e:fb:cb:67:ca:
bb:15:5b:ff:b9:3d:a0:f2:fc:2e:96:c4:e7:d8:5c:
c4:37:c6:af:aa:51:4e:c3:22:1f:a4:51:82:ef:6b:
e3:81:d6:3a:1f:75:37:6c:e9:bf:85:43:ef:ea:36:
15:25:cc:74:c9:bb:fb:41:9c:04:7c:f8:78:78:8e:
b2:4e:56:bf:1c:07:a6:84:93:bd:89:53:2c:c4:75:
7e:0b:ba:c5:cb:9d:ab:cf:51:8a:a0:8d:d6:7e:bd:
2d:6d:1a:92:16:8a:f7:c7:47:46:48:35:4e:6f:b1:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:44:34:01:45:96:38:9E:BA:40:CA:01:5B:5A:47:50:45:C8:1F:9E
X509v3 Authority Key Identifier:
keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:63:8b:c7:20:6b:5a:e4:18:25:1d:5f:0b:c3:77:a3:89:30:
ad:cc:3b:7a:4c:0c:4e:58:c5:be:ea:c8:d3:a3:ce:22:94:1f:
30:31:d2:3c:6d:8c:1c:73:e6:9d:c5:1c:c0:43:48:0c:33:c3:
c4:c8:2e:32:2f:a0:82:a5:75:79:dd:81:f6:65:79:e8:4c:d8:
22:0a:38:d5:9a:54:45:d9:fd:69:55:8b:11:41:62:be:65:fe:
40:29:3b:d3:b3:87:81:cd:47:ae:05:8a:9c:32:43:1f:50:96:
ca:9f:fb:12:ea:46:7e:a7:b4:df:80:f9:0a:c7:ad:c0:05:86:
72:fe:c4:ee:2d:03:57:97:26:2e:fe:8a:59:25:a1:84:81:a7:
f2:3c:18:50:0d:cd:8d:ad:cf:8f:40:36:1e:2b:5e:c9:9e:5f:
b6:08:75:34:98:e7:c8:cf:31:f5:f0:e7:7d:16:da:b0:a7:a7:
b3:39:f5:06:4d:aa:30:e7:5d:2a:f5:f6:b9:d2:df:68:06:a3:
ad:0e:33:84:b7:92:6f:ec:cb:0e:ef:d6:0b:7b:8c:97:3c:d4:
95:d0:44:5b:b5:7d:9b:c3:82:d8:cb:e9:d0:fc:dd:51:00:bf:
8c:51:29:e7:cf:c1:3f:a6:ca:39:1a:54:a3:d4:d0:b9:05:ec:
be:62:48:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:03:19 2026 by rpki-client