Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
File: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json)
Hash identifier: mTO14vyLwE5UQkMNc2GNDycgYUWa0m51rMs3AlpAQ2A=
Subject key identifier: E1:12:A7:9B:45:48:C4:E5:25:D7:6E:D5:E5:4F:DA:58:52:0B:80:29
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial: 019D2B4E3C31A01BF52FE1E6224775C7509E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
Manifest number: 1220
Signing time: Thu 26 Mar 2026 18:00:40 +0000
Manifest this update: Thu 26 Mar 2026 18:00:40 +0000
Manifest next update: Fri 27 Mar 2026 18:00:40 +0000
Files and hashes: 1: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: gAzxhm4wWwrGNiE3934cIYjPe1Ulf1gt71XiU3oHhoE=)
2: apHXF-O4Ejo7yG2aEpQp8GLTcZs.roa (hash: a/Y5u9hrVgeYy/2XjMITJ3BNw9T29U+bdFNSfBZc2ak=)
3: zCOXAUBZXqisVY6lRfztNan2LPM.roa (hash: 7/x4omP0n6ejxfgW17vqQlbqviYR3EPl/2qYMEuPiKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:3c:31:a0:1b:f5:2f:e1:e6:22:47:75:c7:50:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Validity
Not Before: Mar 26 18:00:40 2026 GMT
Not After : Mar 27 18:00:40 2026 GMT
Subject: CN=e112a79b4548c4e525d76ed5e54fda58520b8029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:f5:cb:25:f9:42:f7:44:37:9d:ff:65:e1:
48:0e:c2:1a:c9:fc:36:0f:16:e4:25:62:0d:af:ab:
4c:57:df:d0:f2:4e:d2:7e:c1:63:1a:aa:7d:b4:2d:
7f:e9:50:e4:73:95:ba:0f:98:7c:31:6f:93:3d:b3:
95:98:1b:ea:06:c2:35:bf:00:45:6e:cb:3c:0d:3b:
7e:dd:86:6a:3d:4d:bc:82:0e:13:27:01:5e:aa:19:
64:d0:e6:11:46:79:8c:9c:c3:8f:24:52:f8:43:fd:
35:df:c7:92:47:27:e0:a9:55:92:88:b8:a0:09:18:
ba:ed:06:31:af:fe:bb:d4:98:5c:22:91:5b:67:9c:
54:06:5c:d1:e0:2e:2a:d0:c0:28:7d:44:a1:de:8d:
09:28:06:64:e7:68:fa:99:c1:9f:6b:52:8a:a6:2b:
fc:67:7c:0c:71:13:21:76:00:80:9a:00:59:f3:c5:
c4:de:24:80:e9:ba:49:36:8d:e2:a2:3c:e4:f3:7d:
54:a3:d4:c1:07:9c:cc:e6:03:97:86:d3:30:2b:62:
d0:cb:62:d7:e1:ce:a2:4a:51:f9:8e:23:40:bd:24:
96:e5:05:3f:5e:c7:f8:7b:04:9b:3d:df:a6:4b:78:
bd:cb:31:f8:91:11:89:88:96:0d:c5:e3:b7:4c:4f:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:12:A7:9B:45:48:C4:E5:25:D7:6E:D5:E5:4F:DA:58:52:0B:80:29
X509v3 Authority Key Identifier:
keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c8:8a:fe:38:80:ce:03:0d:2e:38:67:32:23:a9:6c:e2:f6:
fc:75:0b:2a:99:10:f4:38:3f:25:e3:1e:de:2e:f5:23:a7:a3:
4d:44:86:b1:9d:98:cb:8f:82:22:f2:37:38:78:e8:9a:bc:b2:
07:29:1d:c9:0b:8f:3f:72:f3:4d:da:30:82:62:a7:db:7b:44:
7d:9b:73:17:f8:63:c2:0d:6a:0c:1d:3c:8a:9d:72:a9:80:c1:
32:8f:f1:68:2e:3c:f5:49:85:ee:3a:12:86:9e:91:c5:86:67:
03:20:f4:ad:93:10:c9:22:a0:9a:fc:71:e5:68:35:99:48:4f:
1a:fd:4e:63:f7:0f:23:be:0d:a1:64:4f:ca:ac:38:1e:5d:35:
ee:88:1b:99:c3:8e:21:5a:2d:0a:24:ee:0d:66:dd:a4:5c:4e:
ea:f7:41:2e:83:86:4a:05:5e:21:42:d3:54:ad:17:54:f5:1b:
3c:69:2f:3b:f8:3b:7f:02:f5:b7:97:27:15:20:e2:7d:4e:9c:
30:5f:82:e4:77:e1:d0:ba:ff:37:73:7b:d0:00:c3:59:47:16:
02:54:d5:b9:ce:cb:9b:89:6b:7a:ed:a1:72:f3:b1:ac:8e:36:
cc:de:2f:d1:60:0f:fb:40:99:6d:b2:ab:67:76:00:09:81:ae:
bb:68:0d:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTjwxoBv1L+HmIkd1x1CeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODRkMGNjNjcwM2JmOTQyYzZkYWM4OWRmZjFhN2JmNjYz
MmVhOGIwHhcNMjYwMzI2MTgwMDQwWhcNMjYwMzI3MTgwMDQwWjAzMTEwLwYDVQQD
EyhlMTEyYTc5YjQ1NDhjNGU1MjVkNzZlZDVlNTRmZGE1ODUyMGI4MDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAj1yyX5QvdEN53/ZeFIDsIayfw2
DxbkJWINr6tMV9/Q8k7SfsFjGqp9tC1/6VDkc5W6D5h8MW+TPbOVmBvqBsI1vwBF
bss8DTt+3YZqPU28gg4TJwFeqhlk0OYRRnmMnMOPJFL4Q/0138eSRyfgqVWSiLig
CRi67QYxr/671JhcIpFbZ5xUBlzR4C4q0MAofUSh3o0JKAZk52j6mcGfa1KKpiv8
Z3wMcRMhdgCAmgBZ88XE3iSA6bpJNo3iojzk831Uo9TBB5zM5gOXhtMwK2LQy2LX
4c6iSlH5jiNAvSSW5QU/Xsf4ewSbPd+mS3i9yzH4kRGJiJYNxeO3TE8hpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOESp5tFSMTlJddu1eVP2lhSC4ApMB8GA1UdIwQY
MBaAFEmE0MxnA7+ULG2sid/xp79mMuqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNTgzMTEtZTY3NC00MDVjLTk4ZjIt
MTQ3MGJjY2VlYjFiLzEvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNTgzMTEtZTY3NC00MDVjLTk4ZjItMTQ3MGJjY2VlYjFi
LzEvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgciK/jiA
zgMNLjhnMiOpbOL2/HULKpkQ9Dg/JeMe3i71I6ejTUSGsZ2Yy4+CIvI3OHjomryy
BykdyQuPP3LzTdowgmKn23tEfZtzF/hjwg1qDB08ip1yqYDBMo/xaC489UmF7joS
hp6RxYZnAyD0rZMQySKgmvxx5Wg1mUhPGv1OY/cPI74NoWRPyqw4Hl017ogbmcOO
IVotCiTuDWbdpFxO6vdBLoOGSgVeIULTVK0XVPUbPGkvO/g7fwL1t5cnFSDifU6c
MF+C5Hfh0Lr/N3N70ADDWUcWAlTVuc7Lm4lreu2hcvOxrI42zN4v0WAP+0CZbbKr
Z3YACYGuu2gNlw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:30 2026 by rpki-client