Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier: J0OrsoCiC1RUM7b4EfhZdYPMEY5r5A3r91peWt9bv0o=
Subject key identifier: 17:B5:19:2B:30:9D:D8:FB:D5:90:A8:E6:9D:89:73:63:88:6B:F5:E4
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01A0D34B08E2E04FFACCF27D43980D428E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number: 1B18
Signing time: Thu 24 Sep 2026 12:01:45 +0000
Manifest this update: Thu 24 Sep 2026 12:01:45 +0000
Manifest next update: Fri 25 Sep 2026 12:01:45 +0000
Files and hashes: 1: 1-Eg5Gq7MYAa6DrhE6ydl6yFozOE.roa (hash: rMOXwD7ZrFZGr6TjCHoSbGglS/P8lelprsl/pLm/oCg=)
2: 4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa (hash: Ce7KWD1zwmOm3FwKp9C1Y5E8hGZ90tuB7cIXoSzRivQ=)
3: 57_pJKO7tOgXH0MplNvXkDg8tRA.roa (hash: LO7AwILSoQbsBv8ZylAG72hZh71ZbQO1+iDt4zC/BEA=)
4: B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa (hash: UEfiOpqf/O8EypdEhRwQmImaHChHVEzYmDVlh0IbMfM=)
5: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: zoAg/yNQwKsIaXMyojYsoYEpiWFBgWgcPwm8ByC9lLY=)
6: T811gJjy7XiJUFo4KQMv1DP4J0c.roa (hash: YHQ8mEYBcVSe6HvlouVuQRjPYXMMsDbydlGVeyEjDb0=)
7: YyS0FsjSPcRe5OVpS-bddQflhs0.roa (hash: BHCA82IrgZgjYdpNT21uf8Z5RHz1RwAUgryBUXbtYGs=)
8: d8kiYzlEKQLdX-UflZDxlYGnmRo.roa (hash: pIWLP+nuBmaLwVa5s824iZjtnJtxSoE6FNL2XIkxyMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:08:e2:e0:4f:fa:cc:f2:7d:43:98:0d:42:8e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Sep 24 12:01:45 2026 GMT
Not After : Sep 25 12:01:45 2026 GMT
Subject: CN=17b5192b309dd8fbd590a8e69d897363886bf5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:fe:ab:9a:40:8b:00:a6:a7:8f:af:51:55:
4b:1a:4a:df:4e:92:e0:aa:c9:79:42:80:7d:5b:1d:
88:8b:72:34:98:5c:2b:4b:17:30:9a:f5:a2:53:f0:
0c:04:c6:40:56:7d:ef:09:84:cb:39:bd:00:9d:88:
85:ce:8a:23:a7:a4:d2:14:b3:d0:2c:72:d5:ad:38:
af:ac:b0:9b:07:d0:b6:1b:70:7d:79:36:4b:30:ca:
62:9b:90:4c:fb:65:1e:90:84:d1:8d:0f:56:3d:58:
7b:2d:cb:4d:7a:7f:90:24:08:cc:ba:69:0f:59:e6:
e0:f5:f4:78:a0:83:32:f1:9d:6e:58:14:86:d1:4a:
70:23:cc:8f:01:8f:79:82:8e:59:a4:05:2d:c9:f7:
36:20:3a:0b:9d:86:91:5f:eb:ae:aa:2b:07:dd:77:
21:fc:62:61:0a:7f:92:1c:1e:07:cb:40:6f:c7:29:
73:32:a8:bd:7e:a5:bb:79:40:2c:c6:7d:88:34:d7:
86:03:a3:c7:0b:e1:d3:1f:51:ca:d8:db:6c:61:bc:
2d:05:1c:78:98:6d:8e:c7:79:4c:2a:e9:d7:8c:78:
d2:85:23:4c:d0:01:86:66:28:f8:5e:63:36:79:30:
06:c2:1e:d4:e1:2e:f0:14:56:cd:db:b2:3a:dd:db:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B5:19:2B:30:9D:D8:FB:D5:90:A8:E6:9D:89:73:63:88:6B:F5:E4
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:36:7a:bd:33:b2:0f:d7:9d:2e:b7:c5:26:e7:71:39:3e:ce:
7e:cf:76:bb:da:ee:82:4b:83:1d:9e:52:c2:1d:43:87:e2:b2:
09:bc:13:6e:ff:99:ea:96:c7:8b:12:b2:d9:eb:6c:49:03:9c:
a1:d0:3d:81:c7:67:e0:b2:8d:07:8c:f0:5a:0d:db:24:7e:04:
73:0e:a0:1f:5f:78:63:18:4c:ec:a4:61:53:4e:50:73:a7:70:
21:41:53:09:6f:50:62:04:fe:14:b8:0c:46:39:38:00:93:e0:
4a:18:ff:7c:bd:56:70:7e:d3:04:7a:30:07:5a:10:bf:b4:73:
94:69:95:95:cd:0a:55:98:a4:d5:ae:63:9e:bf:c7:c2:7e:46:
9d:fa:08:5e:1d:89:46:99:1d:19:75:ef:6a:5b:8a:c0:15:68:
f1:d5:f9:bf:63:52:00:ca:89:74:e4:eb:8b:5d:1c:af:1b:6e:
f0:7d:dc:d6:14:e0:72:90:da:ca:ed:bc:a6:a6:e2:26:47:4a:
28:93:28:5f:c6:b0:6c:db:af:7a:d0:50:e8:3f:bf:3e:7d:71:
41:a8:7a:83:c8:51:2d:d5:fe:b2:d9:59:b6:61:2f:76:e5:4b:
94:1e:84:18:e5:c7:0c:ae:a3:5a:df:63:0a:05:84:33:3c:c5:
8a:e3:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:28:34 2026 by rpki-client