Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: OEtTw7kXQ4EU+w/62k06pzW+bm8eeYgObtJmzt8NPz4=
Subject key identifier: 67:8D:DA:B8:EA:25:0B:0D:A1:55:58:A3:AA:10:21:F0:2C:B1:F3:2B
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 019D284E86977E9E5C24478E9B3574C63A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 04:02:07 +0000
Manifest this update: Thu 26 Mar 2026 04:02:07 +0000
Manifest next update: Fri 27 Mar 2026 04:02:07 +0000
Files and hashes: 1: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: tQlEWRUEHkM9rqd4DitGF1P5LmfBIgDHRCDvldzAA3k=)
2: VYoAIFinaQHxNkoLpaPUIWea3QQ.roa (hash: fC8G8UEbQdEhs80n+8gVQ40HDgx8OQKG34YhOp+AKow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:86:97:7e:9e:5c:24:47:8e:9b:35:74:c6:3a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Mar 26 04:02:07 2026 GMT
Not After : Mar 27 04:02:07 2026 GMT
Subject: CN=678ddab8ea250b0da15558a3aa1021f02cb1f32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:0a:63:07:e1:e7:61:ca:46:c4:04:df:35:
fa:23:53:bf:b0:77:2c:c2:92:83:9b:ed:65:cc:48:
6b:46:97:18:4c:1d:84:df:1d:2a:3d:b8:6b:f0:ba:
72:f1:27:4b:5b:71:d9:4c:af:bb:36:f6:3c:2d:a9:
ed:60:c9:0c:5e:0e:0c:b8:84:59:c9:7c:84:7f:20:
2d:fb:d1:f7:be:fb:f0:4a:34:aa:d7:1a:f9:fc:1e:
a7:5f:99:0b:c6:4b:b0:4b:e8:d6:5e:b1:2a:10:ca:
f2:48:08:d1:2e:63:78:f4:d8:ab:b7:c3:d5:0e:d2:
b6:01:9e:99:e8:0f:ac:12:62:a6:69:53:7c:dc:21:
8f:8b:fe:b7:cc:78:c3:2d:69:c1:58:4f:53:d8:b0:
f8:44:3c:ae:6c:90:cb:4a:74:10:93:38:81:2e:bf:
59:95:5e:6e:0f:f6:88:d2:62:cf:c8:d6:1c:ed:c8:
83:fc:0a:59:e1:d8:53:0d:0a:74:df:4e:b7:bb:e2:
59:74:c5:c6:a2:d4:e2:eb:dc:51:0f:31:27:c0:67:
33:03:9c:6e:8f:e5:e1:b9:8a:08:f5:6e:c5:89:62:
59:55:32:81:b5:28:db:1c:4e:c3:ec:9e:d1:e7:9f:
90:3c:84:bd:08:ac:39:0f:11:ee:5d:07:fd:08:7b:
a9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8D:DA:B8:EA:25:0B:0D:A1:55:58:A3:AA:10:21:F0:2C:B1:F3:2B
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8d:16:ff:0b:b4:0b:a4:1b:c1:5b:a6:70:f8:77:c0:e5:72:
00:09:e9:ff:fa:63:c8:e7:d0:d8:7b:fe:c9:20:42:95:29:92:
21:81:49:53:98:51:77:dd:bb:d6:d9:94:f3:43:09:8e:9c:50:
30:86:08:55:cd:78:6a:a0:05:5b:53:1e:b3:62:2c:e2:6b:29:
f6:b9:7c:41:e6:37:69:9b:ce:cb:dc:90:77:7f:d1:28:68:8e:
ce:a0:f9:4d:3f:c7:ce:68:40:a6:e7:61:43:4d:88:ff:21:25:
26:fb:63:0a:72:4d:9d:aa:eb:a0:88:4b:c9:68:fb:c9:f5:4e:
72:58:e5:d4:a5:0d:00:97:02:5d:30:2a:a9:13:9e:80:07:5a:
07:14:67:82:21:ea:c3:e2:d0:70:b8:f9:65:81:3a:e1:72:2c:
f9:49:38:35:f0:58:35:83:1b:e6:10:65:8a:35:0c:0c:65:f8:
1c:96:90:68:ad:08:b9:e7:8c:21:3f:39:7d:f1:79:ae:e9:90:
14:74:5a:60:d5:9f:e6:de:60:ec:77:42:ea:dc:5e:32:dc:34:
40:07:9a:c5:f9:cb:5e:b0:21:6a:53:2e:c1:d6:74:1c:3e:8a:
61:65:ea:a8:f8:c3:73:1e:69:89:17:cb:a5:86:4a:1f:76:9f:
e9:78:2e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:23:05 2026 by rpki-client