Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier: qENc9UUIna+DryKDiJNT812943m4cJLf8AC5Tm4i3w8=
Subject key identifier: 62:66:7B:B9:41:60:A9:36:4C:EC:EA:AA:F0:8F:98:ED:C0:BC:BA:6B
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01A1D9B81D3170332E7EC1CD9249D0F088E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number: 1BA2
Signing time: Sat 14 Nov 2026 11:01:24 +0000
Manifest this update: Sat 14 Nov 2026 11:01:24 +0000
Manifest next update: Sun 15 Nov 2026 11:01:24 +0000
Files and hashes: 1: 3_qq4SlxMcvwrbvfdNDYDWQ0rgU.roa (hash: 2IQDnLhNyA34O5bJzqWzi9HQ0yGGc44mUPUXNHhkzZE=)
2: 4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa (hash: Ce7KWD1zwmOm3FwKp9C1Y5E8hGZ90tuB7cIXoSzRivQ=)
3: 57_pJKO7tOgXH0MplNvXkDg8tRA.roa (hash: LO7AwILSoQbsBv8ZylAG72hZh71ZbQO1+iDt4zC/BEA=)
4: B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa (hash: UEfiOpqf/O8EypdEhRwQmImaHChHVEzYmDVlh0IbMfM=)
5: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: XI6rjjcel/17jGtZARsPf9VN0A7Reux0CgBBTEVS+8g=)
6: T811gJjy7XiJUFo4KQMv1DP4J0c.roa (hash: YHQ8mEYBcVSe6HvlouVuQRjPYXMMsDbydlGVeyEjDb0=)
7: YyS0FsjSPcRe5OVpS-bddQflhs0.roa (hash: BHCA82IrgZgjYdpNT21uf8Z5RHz1RwAUgryBUXbtYGs=)
8: d8kiYzlEKQLdX-UflZDxlYGnmRo.roa (hash: pIWLP+nuBmaLwVa5s824iZjtnJtxSoE6FNL2XIkxyMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:b8:1d:31:70:33:2e:7e:c1:cd:92:49:d0:f0:88:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Nov 14 11:01:24 2026 GMT
Not After : Nov 15 11:01:24 2026 GMT
Subject: CN=62667bb94160a9364ceceaaaf08f98edc0bcba6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:91:69:b5:cd:14:c5:bc:33:08:3c:92:81:
a3:4e:da:07:f8:bd:92:71:b3:ee:3a:4d:c6:cf:d0:
0c:6c:12:26:21:54:e4:28:79:a5:6e:69:39:68:69:
21:c0:51:63:a1:ab:71:2f:e7:7a:19:aa:7e:ae:2f:
15:fa:92:76:37:31:6e:f9:b7:5c:49:8f:d5:c2:38:
20:9f:a1:2b:ed:30:86:5a:21:c8:bd:88:8e:1e:20:
fc:07:1f:c8:ed:21:e2:08:18:1b:0e:03:0c:33:68:
90:c6:2c:78:60:9d:71:2f:2a:9f:8d:2b:08:63:eb:
3f:1e:96:23:03:68:17:d0:6f:e4:8a:73:8d:c4:88:
86:a1:eb:5d:5b:af:fe:92:16:bc:7c:5b:56:54:3b:
fa:8a:81:02:03:ad:71:17:5e:4a:5b:2e:4c:38:6c:
c7:d2:0a:3d:0a:9d:e9:9f:2d:b3:55:b2:27:38:df:
77:ad:e8:f9:95:c2:d2:72:a0:39:d3:90:af:a1:b6:
bb:39:5c:d6:08:f0:da:fc:88:f1:31:22:0a:4f:08:
28:1e:97:86:8a:c0:e7:61:4e:3c:95:62:5c:98:62:
92:16:a9:c3:aa:15:96:8d:62:fa:2d:4f:ec:97:b9:
40:cd:1b:87:5b:b4:78:a5:7c:75:27:ee:62:e3:8c:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:66:7B:B9:41:60:A9:36:4C:EC:EA:AA:F0:8F:98:ED:C0:BC:BA:6B
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:41:78:9c:a9:d2:17:3b:36:fa:2f:e3:94:5e:2e:7d:93:5d:
0f:2d:2c:de:ed:99:bb:21:47:7d:74:6d:53:4b:c0:57:4d:bb:
9f:3b:ac:bf:a4:92:b4:9c:4f:74:69:ce:10:d2:a1:e0:a3:58:
5c:db:96:05:67:bf:1c:6d:67:77:61:17:e0:50:27:4f:df:30:
75:4a:99:d5:fb:d8:81:f3:64:6c:76:c1:3d:9f:b8:43:d0:d9:
90:36:f0:32:8b:5d:fb:e4:73:bd:25:d9:4c:c7:2d:1b:fe:cc:
8a:45:7b:9d:8b:38:db:e2:17:7b:cd:82:25:be:39:72:59:01:
5b:a5:ac:ad:d8:cd:e8:b3:01:7d:16:87:06:ab:7b:63:e6:82:
53:ae:02:3c:ad:85:d0:e1:73:c0:7e:b1:ef:7a:71:81:f0:44:
18:d1:12:d0:0b:43:0f:e8:da:5c:a7:83:8c:e0:33:ed:0c:3d:
68:c6:a5:ae:5c:fe:19:69:27:54:36:5b:23:74:00:39:af:cc:
4a:20:48:b3:d9:35:26:ef:f9:21:19:51:c4:e8:b9:f3:6f:84:
5f:e4:75:2f:ee:f9:94:ae:b5:9f:17:f6:bd:12:ab:82:60:2a:
83:80:be:9d:c8:c8:28:76:d7:d7:88:01:17:a4:71:58:7a:21:
48:e2:88:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:53:13 2026 by rpki-client