Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: soYE3A6fFFmHuhz0azB5w5H/5gxRSJahYlv/84TfxO0=
Subject key identifier: 25:0C:0C:9C:24:35:D0:9A:26:C0:80:A0:49:A8:13:30:FA:B2:E0:46
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 019F91DAB1AD6E6539C3C0AB05ACA272AD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 02:00:56 +0000
Manifest this update: Fri 24 Jul 2026 02:00:56 +0000
Manifest next update: Sat 25 Jul 2026 02:00:56 +0000
Files and hashes: 1: 9nMZrodBdsGgL23GxlelObATv60.roa (hash: rSWUYx/buhG+K0ScAxLaN5xf6/B7iGfzq+9e0Z2WfnQ=)
2: A3xkmt1D2tsjfBccS8FsgAFUnOQ.roa (hash: nIgl47uG67Ucbrg3x+vJSBwfTbEfiuOT6Ukb3huxJZs=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: OvQr/LFhWL85vLWxqhjge4Y0+1wumBtGXKyKPfPK6FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:b1:ad:6e:65:39:c3:c0:ab:05:ac:a2:72:ad:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Jul 24 02:00:56 2026 GMT
Not After : Jul 25 02:00:56 2026 GMT
Subject: CN=250c0c9c2435d09a26c080a049a81330fab2e046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:80:46:7d:dc:d7:03:29:df:b4:76:36:30:
28:30:bd:76:f1:3e:2f:4c:63:c8:11:49:62:af:01:
9b:34:8c:89:3e:24:01:d4:18:81:0b:53:20:5f:5a:
05:93:c7:58:4c:7f:bf:32:fa:f8:99:c6:da:0b:f7:
3f:82:81:40:0a:90:89:e4:87:9c:a7:ac:9f:59:40:
c7:eb:12:19:b8:0f:22:cf:4e:74:f1:0b:f0:96:8b:
9d:22:b7:a4:44:2f:24:44:06:09:44:17:58:c2:2a:
50:17:a7:71:b2:4a:14:46:a9:e9:ba:a5:86:cc:cd:
3e:f1:81:df:e9:57:6a:ef:e2:2b:3f:f7:8f:64:83:
52:89:a7:87:a8:82:54:ed:e1:88:9c:15:35:2f:cc:
54:25:b8:e0:2c:65:40:21:8f:1d:31:f4:43:dc:13:
3f:fe:28:f8:b7:38:a5:8c:1d:53:a7:5a:5c:15:6c:
6a:f8:b7:03:18:ce:bc:8e:13:ad:4a:5b:8b:e0:72:
c9:77:ed:42:2b:79:55:53:7c:9e:7f:53:3b:70:5d:
5c:cc:a2:e3:0f:83:1d:8a:4d:ee:e0:45:c0:e5:0b:
5e:6c:71:d8:b6:de:90:bf:3b:b5:17:07:f8:70:b2:
66:89:92:c4:15:1b:24:dc:19:e2:e0:83:ee:4b:63:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0C:0C:9C:24:35:D0:9A:26:C0:80:A0:49:A8:13:30:FA:B2:E0:46
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:84:69:dc:40:0f:78:8b:86:1c:00:59:ee:c6:be:3c:1d:29:
c3:49:af:c0:1a:97:19:e2:54:dc:4b:4b:28:89:3c:2d:82:cf:
40:0b:a6:70:f4:62:0c:fc:86:5d:2e:f4:44:fa:75:fd:9e:0f:
6a:ff:88:b6:16:ba:7f:c3:34:a8:17:10:29:30:65:15:7f:7b:
6f:d0:9e:86:9d:14:90:70:6d:c4:de:d7:11:bc:dc:f2:3f:2d:
ba:22:05:28:35:e9:d5:4d:a2:4f:77:61:ee:b4:f8:2e:d4:11:
69:15:be:17:3c:88:86:ba:fc:93:ef:23:6a:b1:17:70:5c:5c:
d3:b0:fa:59:0f:ba:b0:12:27:6a:36:f2:38:db:60:ab:24:4c:
6d:97:03:ea:30:0a:79:c4:ef:97:49:db:ab:fa:7b:4c:c4:ec:
c3:b2:44:15:b4:fd:71:be:80:51:fb:fb:a4:ed:08:c9:a1:70:
3b:59:60:af:f7:8c:2f:ea:2c:84:e5:f2:54:ad:83:ff:75:85:
43:4c:cc:aa:4c:31:51:01:28:c1:11:52:20:78:a4:29:3c:84:
ac:00:c0:9e:35:e3:2d:14:3e:00:b8:af:ea:d5:07:89:2e:96:
80:68:d5:56:00:db:fa:84:e0:ec:38:3e:6e:f4:79:b4:50:9d:
32:35:2a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:36 2026 by rpki-client