Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: RZk8bZLUwnHCasdC8DSvrS7GvRkMymKJlalybpHhzRI=
Subject key identifier: 1A:22:C7:D9:A6:F6:BA:44:88:57:31:6A:67:7A:5B:5B:AF:41:14:E0
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 019D27E05362BCDBC322C1E6CC7C6B2D9EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 0FF8
Signing time: Thu 26 Mar 2026 02:01:45 +0000
Manifest this update: Thu 26 Mar 2026 02:01:45 +0000
Manifest next update: Fri 27 Mar 2026 02:01:45 +0000
Files and hashes: 1: RtEJrYYYVSw3agdpZ8fIxDXTX1Y.roa (hash: cKYN0YkCJsDdPkx/HgK4R2mLQELTgIw1O/rAAl0yOQY=)
2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: M/BFkj1HLYAexIhMpUulFtB3Dd7pzt5pjQ4KRm/Ic34=)
3: vcurezLdovhZEJ_5__NOTZxZX0U.roa (hash: Ve+Xn7DMb8Yh8TeJ9TkE0GiZkvH6kTEGpcyw7nrpcMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:53:62:bc:db:c3:22:c1:e6:cc:7c:6b:2d:9e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Mar 26 02:01:45 2026 GMT
Not After : Mar 27 02:01:45 2026 GMT
Subject: CN=1a22c7d9a6f6ba448857316a677a5b5baf4114e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:6a:49:a5:34:70:9d:aa:1e:9f:0e:56:f4:
15:f5:37:72:fe:13:b0:ec:40:a4:60:9c:58:6f:fd:
2b:5b:81:16:ec:72:12:e5:14:af:d3:b2:32:31:17:
22:1d:f7:6c:07:91:f5:fb:7a:13:52:a4:d7:da:60:
07:f3:84:c6:92:6a:22:d1:2b:7b:5b:0b:23:51:06:
77:95:c0:03:06:7e:af:7d:85:ce:19:79:e5:7a:01:
2b:18:4a:cb:5e:f0:5c:12:82:d0:fb:c1:df:f5:68:
65:82:c5:21:49:2e:34:0f:bd:39:7d:ec:c5:61:00:
ab:07:bf:4b:b2:14:54:da:0a:88:31:01:ef:ff:a7:
ed:01:15:61:27:be:5c:07:b3:4b:22:4b:ff:34:f3:
ab:62:b0:b3:85:65:80:7c:b4:22:8a:3a:57:12:33:
46:91:65:aa:79:1d:c3:3e:ce:a9:e1:35:c4:35:71:
12:da:eb:1a:10:ee:76:00:8a:e6:59:d7:16:76:62:
1c:c2:2a:2e:f7:e7:29:a6:80:bf:63:2d:dd:3e:cd:
66:fa:58:c9:af:f2:e0:fc:a5:03:5c:05:09:fb:30:
d2:e1:ab:36:6b:97:c6:27:d2:d6:98:1e:5e:ef:8e:
aa:4b:21:20:d4:38:a6:40:26:c6:80:69:28:e7:19:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:C7:D9:A6:F6:BA:44:88:57:31:6A:67:7A:5B:5B:AF:41:14:E0
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6f:d0:4f:47:3e:c5:ee:d2:aa:30:3b:72:e1:79:f5:f0:80:
d6:9b:ad:99:57:c3:25:15:ec:01:05:bb:aa:70:f8:0d:dc:00:
dc:9a:9c:3d:79:65:22:6c:50:b6:2d:e2:99:81:cc:7c:6f:10:
e8:4d:0a:6d:37:d1:9f:2d:05:e9:b7:a3:2a:22:0d:76:ec:61:
0d:3e:78:b7:6a:99:a9:bb:b6:51:8c:65:40:df:87:ed:38:6a:
1d:cd:9e:35:61:5e:9d:39:3d:3f:50:14:43:f4:65:ab:c6:b4:
87:28:b4:2b:b5:aa:74:61:fd:fc:4b:c1:43:32:56:90:d4:af:
ca:aa:2f:ea:d0:32:8c:08:91:26:a9:91:5e:5e:59:3a:65:a4:
2f:35:31:67:37:14:6d:de:e2:11:23:b4:54:64:e0:b7:2d:96:
cf:fa:56:45:ce:0a:d4:c3:5a:f9:e3:f4:10:28:5a:ed:fc:b8:
53:e2:1f:74:a4:2c:fc:f6:30:36:88:c3:69:8b:51:95:d8:d7:
9b:d1:b7:52:ce:06:5b:dd:fb:7d:0f:36:0e:b0:96:62:1b:15:
8e:c2:99:20:60:f5:e4:18:29:4d:5b:ef:84:77:7d:3c:4b:d3:
0c:93:1e:29:d0:2c:1c:bb:93:1c:a3:ca:9c:3c:94:9e:f1:87:
7d:b7:7a:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4FNivNvDIsHmzHxrLZ7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMjNiMDZkNjBlYzNlNzZiNDkyMGIyYjY0MTQxZmEzYWY2
ZTVmYmIwHhcNMjYwMzI2MDIwMTQ1WhcNMjYwMzI3MDIwMTQ1WjAzMTEwLwYDVQQD
EygxYTIyYzdkOWE2ZjZiYTQ0ODg1NzMxNmE2NzdhNWI1YmFmNDExNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhctqSaU0cJ2qHp8OVvQV9Tdy/hOw
7ECkYJxYb/0rW4EW7HIS5RSv07IyMRciHfdsB5H1+3oTUqTX2mAH84TGkmoi0St7
WwsjUQZ3lcADBn6vfYXOGXnlegErGErLXvBcEoLQ+8Hf9WhlgsUhSS40D705fezF
YQCrB79LshRU2gqIMQHv/6ftARVhJ75cB7NLIkv/NPOrYrCzhWWAfLQiijpXEjNG
kWWqeR3DPs6p4TXENXES2usaEO52AIrmWdcWdmIcwiou9+cppoC/Yy3dPs1m+ljJ
r/Lg/KUDXAUJ+zDS4as2a5fGJ9LWmB5e746qSyEg1DimQCbGgGko5xk9BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoix9mm9rpEiFcxamd6W1uvQRTgMB8GA1UdIwQY
MBaAFEsjsG1g7D52tJILK2QUH6Ovbl+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAt
NTRmNmU1MmY1NDdiLzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAtNTRmNmU1MmY1NDdi
LzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEm/QT0c+
xe7SqjA7cuF59fCA1putmVfDJRXsAQW7qnD4DdwA3JqcPXllImxQti3imYHMfG8Q
6E0KbTfRny0F6bejKiINduxhDT54t2qZqbu2UYxlQN+H7ThqHc2eNWFenTk9P1AU
Q/Rlq8a0hyi0K7WqdGH9/EvBQzJWkNSvyqov6tAyjAiRJqmRXl5ZOmWkLzUxZzcU
bd7iESO0VGTgty2Wz/pWRc4K1MNa+eP0ECha7fy4U+IfdKQs/PYwNojDaYtRldjX
m9G3Us4GW937fQ82DrCWYhsVjsKZIGD15BgpTVvvhHd9PEvTDJMeKdAsHLuTHKPK
nDyUnvGHfbd6iw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:42 2026 by rpki-client