Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: 5pMsm+OQ2yidm9wL/o9azmcSht5fJ6hyGBmCm40+Q0s=
Subject key identifier: 96:3E:7F:1A:2D:51:2E:BC:9C:FA:75:E4:9C:B5:D0:BA:8E:7B:00:DF
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 019E1F109D25674648EDA91DAD85C8DCE102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 02:00:42 +0000
Manifest this update: Wed 13 May 2026 02:00:42 +0000
Manifest next update: Thu 14 May 2026 02:00:42 +0000
Files and hashes: 1: 9nMZrodBdsGgL23GxlelObATv60.roa (hash: rSWUYx/buhG+K0ScAxLaN5xf6/B7iGfzq+9e0Z2WfnQ=)
2: A3xkmt1D2tsjfBccS8FsgAFUnOQ.roa (hash: nIgl47uG67Ucbrg3x+vJSBwfTbEfiuOT6Ukb3huxJZs=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: m1Gq/c7t/Ca66HfQcqy84qR82B2QcTaH63idwgQHTJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:9d:25:67:46:48:ed:a9:1d:ad:85:c8:dc:e1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: May 13 02:00:42 2026 GMT
Not After : May 14 02:00:42 2026 GMT
Subject: CN=963e7f1a2d512ebc9cfa75e49cb5d0ba8e7b00df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:4c:34:52:06:f9:b4:f7:3e:be:68:c9:72:
f9:49:ca:d0:f5:8a:8c:69:2e:d7:3d:1a:a7:05:f0:
3e:c5:fa:5a:d5:1d:b5:78:17:f9:6b:13:b1:03:d9:
79:45:ba:81:c6:46:25:97:d4:e4:17:e8:17:4e:95:
7c:79:51:c4:e3:a9:03:82:fa:30:34:99:f6:86:06:
09:d8:b9:4c:2c:8f:c4:2f:d0:a0:66:37:c8:19:09:
e7:b3:73:91:46:a1:3b:24:31:a0:73:9f:a6:2f:4b:
e6:22:d4:d0:87:1a:2f:c6:a8:67:2e:61:68:2e:d8:
c9:db:d5:5c:41:8b:88:fb:37:a2:36:2e:50:74:5d:
b4:70:fb:b3:f5:07:fb:01:f5:73:32:23:2f:b3:0c:
be:eb:fa:dc:94:09:fa:bf:49:09:f2:58:aa:79:4c:
bc:07:8f:49:6c:91:bc:2b:af:12:b5:59:f3:a9:bb:
db:69:7b:72:0b:fc:fb:dd:12:0e:91:b4:6a:66:86:
a8:c3:fb:ac:ea:77:28:31:66:1c:d7:98:68:fd:33:
9e:68:57:3c:63:88:46:89:69:bc:42:b1:aa:d0:aa:
3d:15:ba:bc:75:f1:30:62:42:24:e5:cb:9a:40:51:
6b:9d:dd:bc:0b:a8:90:19:bd:55:cb:e1:2f:44:4a:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3E:7F:1A:2D:51:2E:BC:9C:FA:75:E4:9C:B5:D0:BA:8E:7B:00:DF
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e6:28:85:37:2e:68:01:14:fe:2a:d6:6d:4c:64:69:6a:0f:
da:8f:6c:dd:8f:75:86:84:d7:02:7e:60:f9:4b:c0:1c:b8:57:
0d:4e:b9:fb:33:62:02:cd:be:1a:53:5b:4d:5b:c0:ba:ed:e5:
d9:80:4e:ce:e7:be:08:f3:7b:b6:04:85:d3:91:6f:bb:2b:e7:
f1:83:2f:7e:be:12:bc:03:02:88:3f:c2:67:b5:51:c9:a6:06:
80:2a:2f:aa:b0:79:50:f3:d1:5a:55:97:cf:13:9e:90:5b:cd:
86:8f:f0:2d:cb:72:bb:90:9e:0b:c9:f9:15:e2:3a:1a:02:38:
a2:5d:17:e0:7e:e2:a9:90:5b:98:ca:23:52:31:9e:c5:a1:89:
72:3b:c3:11:04:d2:0c:18:9c:f4:10:4f:e6:20:8a:92:7c:aa:
6a:1d:48:0e:ef:61:09:f2:4e:32:2d:56:e3:d0:80:f4:de:03:
27:a8:10:4d:5d:d5:82:de:0e:96:3d:1f:26:ac:cb:9e:95:7a:
ee:66:2d:a3:69:31:3f:35:c7:3a:62:1f:87:e8:85:d9:7b:a1:
37:54:7a:d1:c5:11:c4:94:35:32:e3:6a:7d:33:91:e5:43:b3:
08:ca:75:7d:74:7a:f2:bb:12:59:05:25:e7:d5:b3:35:a1:6c:
64:37:1d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:51 2026 by rpki-client