Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: v8nx5GXZfwbiNGsEEKIFY/Sd8CHSNHToR/K78rhfkmU=
Subject key identifier: 41:3D:92:11:3F:65:F0:E3:7D:22:6F:B6:7F:87:57:28:1E:5B:F5:D8
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 019E1D908B48AF4863DBD6B4440DA3914D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 1899
Signing time: Tue 12 May 2026 19:01:12 +0000
Manifest this update: Tue 12 May 2026 19:01:12 +0000
Manifest next update: Wed 13 May 2026 19:01:12 +0000
Files and hashes: 1: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: 26P/LXZzumKxFklmkBFHnUiCOxxL1AlDIJp2h9rpr/c=)
2: VYoAIFinaQHxNkoLpaPUIWea3QQ.roa (hash: fC8G8UEbQdEhs80n+8gVQ40HDgx8OQKG34YhOp+AKow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:8b:48:af:48:63:db:d6:b4:44:0d:a3:91:4d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: May 12 19:01:12 2026 GMT
Not After : May 13 19:01:12 2026 GMT
Subject: CN=413d92113f65f0e37d226fb67f8757281e5bf5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:35:39:89:59:9f:92:42:e0:35:1d:db:8d:
eb:fc:56:e1:27:0c:3f:5c:e6:92:9f:2d:61:7e:13:
5f:f7:94:c7:0c:d2:53:b8:76:ae:bd:cb:b7:ee:8d:
3c:95:f6:fc:3c:48:3f:58:16:fc:54:1a:2b:c2:12:
04:dc:2a:30:da:96:a9:88:e7:53:b8:55:76:2d:4d:
57:3e:3e:cd:a9:93:ca:8a:dc:d8:7a:3a:c8:8e:cb:
1b:e5:96:f5:f9:06:ac:fc:80:3c:82:44:b7:74:0e:
f0:7b:1b:14:e8:1a:7c:46:a7:66:7a:f7:1e:69:da:
9a:8a:5e:e1:30:2e:c8:4b:6f:72:a4:82:52:8a:9f:
40:65:c4:07:55:99:82:fc:2f:55:d8:4f:64:c5:4c:
bb:81:c4:e6:63:e8:a4:a0:9c:91:0d:ff:a8:8a:83:
69:7f:62:c1:2c:9b:04:63:00:14:43:37:b3:12:a0:
85:38:04:bc:ef:f5:82:b1:43:46:99:1a:eb:5c:2a:
90:a0:2e:1a:04:23:1a:27:f6:2b:90:19:33:f3:00:
47:bb:be:56:cc:b6:23:db:5d:69:5d:b2:21:49:72:
59:18:65:ae:e5:5d:76:8d:f0:01:dc:3b:53:44:fc:
69:5c:f9:cb:81:2b:b0:06:24:40:bf:22:71:bb:d9:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3D:92:11:3F:65:F0:E3:7D:22:6F:B6:7F:87:57:28:1E:5B:F5:D8
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b8:e9:e1:37:ef:7e:8a:50:4d:3a:c1:ec:da:c2:66:61:7a:
0c:53:2c:99:c4:23:f5:e1:34:6a:ec:d2:d5:36:f3:30:02:a3:
eb:44:25:2a:e0:8b:e1:e5:4c:84:e3:06:02:c4:20:19:57:dc:
7c:81:e9:6e:d1:7f:79:d8:7a:16:a8:fb:a5:f4:93:c9:b7:68:
0b:60:e2:12:55:06:59:0e:6d:c2:a2:2b:58:62:f2:60:b4:00:
71:c7:7b:2a:6a:b3:35:df:f5:d4:38:5b:3a:b3:66:0b:b8:25:
80:eb:30:65:fe:91:81:51:ea:c3:ca:01:76:50:45:5b:1a:f5:
1f:6f:80:62:ee:3e:59:03:17:bd:44:3b:af:f6:b5:77:4b:4d:
af:9c:89:c2:b0:57:40:97:32:ac:d0:8d:71:b8:52:b9:d0:3d:
69:71:94:33:8a:9c:d9:e7:a5:ed:2c:73:89:2a:b2:73:7b:8d:
9d:8d:66:dc:d1:48:ce:1f:36:0c:a8:d1:f7:8b:63:41:be:05:
51:fd:79:ae:2d:95:f1:57:29:f1:1f:ce:01:b2:46:e5:16:57:
a2:87:86:a0:01:f8:94:9d:b6:53:ab:2e:b0:c1:ff:72:14:c9:
e1:02:c0:bf:44:9f:34:22:03:e8:e2:82:52:21:b9:bb:a5:35:
e4:4f:e1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:38 2026 by rpki-client