Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: WFKfbvVy99NeJK9GVkwr9MqXRsn9hAiQxm0uuGcc19g=
Subject key identifier: 26:24:0C:F6:B1:6A:6C:31:0D:FB:E4:BB:CB:C0:B7:1B:3A:62:A4:C0
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 01A0C933CE87DEC63F557ACB82AD33DCEA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 19FB
Signing time: Tue 22 Sep 2026 13:00:10 +0000
Manifest this update: Tue 22 Sep 2026 13:00:10 +0000
Manifest next update: Wed 23 Sep 2026 13:00:10 +0000
Files and hashes: 1: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: zYu2zi5Jl6I7963DgvsChPIJ46dufbEOJdHKlfMQrl8=)
2: VYoAIFinaQHxNkoLpaPUIWea3QQ.roa (hash: fC8G8UEbQdEhs80n+8gVQ40HDgx8OQKG34YhOp+AKow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:33:ce:87:de:c6:3f:55:7a:cb:82:ad:33:dc:ea:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Sep 22 13:00:10 2026 GMT
Not After : Sep 23 13:00:10 2026 GMT
Subject: CN=26240cf6b16a6c310dfbe4bbcbc0b71b3a62a4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:1c:e4:c2:2b:46:39:77:82:cd:68:46:2d:
23:25:ba:6a:6e:ff:1f:e8:39:da:59:52:0e:6e:c9:
68:fd:69:ca:0f:8a:08:ee:54:66:ce:6e:5f:3f:18:
83:02:68:f6:56:65:bc:a5:0e:7e:bd:2d:13:56:44:
ec:e3:8d:d2:71:8c:24:2f:b7:81:cd:7b:51:a6:62:
27:74:e0:e7:64:5b:7d:7c:73:30:f3:4d:a5:bc:62:
32:61:e1:92:fc:9c:0c:44:61:98:c6:67:b1:a8:8e:
d1:4f:03:cc:14:e5:a6:9d:83:51:e2:42:d1:e7:82:
7c:96:dc:47:8d:d0:0e:54:23:61:a5:4f:2f:cb:2d:
4c:b5:2a:2a:72:4b:b8:28:83:81:f4:71:e1:9e:36:
b1:cf:44:71:8e:91:7a:38:62:f2:91:f0:38:02:ef:
ad:3c:c0:d3:18:90:ed:6f:0f:db:90:d1:eb:ee:b1:
8e:be:3a:4e:7c:50:bc:09:65:45:64:ea:e3:cd:de:
96:99:78:d6:76:41:c5:54:03:d4:13:ea:29:15:02:
13:14:2a:4f:d7:fa:82:ae:e0:45:a4:8f:09:95:b8:
58:0a:a4:fc:9c:85:fd:b1:09:ef:17:f5:42:30:74:
4f:7f:f1:72:8f:47:0e:7d:ee:1b:25:af:9b:0e:e2:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:0C:F6:B1:6A:6C:31:0D:FB:E4:BB:CB:C0:B7:1B:3A:62:A4:C0
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b3:a1:f0:b9:11:0f:4d:55:21:8c:93:07:72:fb:30:a4:8a:
25:76:9a:dc:f5:3c:82:72:03:23:08:e0:8c:09:12:60:88:19:
71:3c:4e:ed:31:c5:6c:9d:db:3a:8b:f0:64:a9:83:c4:1f:0a:
ae:b8:3c:ac:db:50:79:03:76:cc:bc:c8:5d:93:87:ac:d5:26:
71:58:0f:5e:2e:1b:c4:dc:55:f7:2b:58:75:5c:c5:69:2c:44:
4c:fe:74:5d:de:6c:5c:3d:dc:81:69:9c:d6:76:18:48:66:30:
f8:45:a7:7b:e5:6c:b8:a7:fe:19:a1:50:8d:6a:5a:8b:ce:8c:
5d:79:c4:d2:18:e0:a3:6f:05:ad:c0:00:f8:08:0a:91:87:8f:
3a:9e:79:d2:0c:de:f5:a5:4b:75:65:2d:0b:e1:e2:22:94:84:
19:56:df:d9:26:20:67:99:53:76:bb:dd:89:63:4f:7c:79:c5:
0f:3c:8e:55:66:7b:7e:84:63:df:ec:05:b3:3c:5e:e8:e7:02:
22:1e:97:f3:44:a4:05:07:b1:1f:86:46:6a:25:60:67:67:13:
b0:9b:c1:72:6c:80:b8:67:09:f3:07:94:07:47:f7:8a:c2:e3:
7e:84:a2:d1:d0:b8:d1:10:d3:02:74:6b:ea:60:a9:4b:cf:19:
b7:d7:24:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:43:10 2026 by rpki-client