Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
File: SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft (raw, json)
Hash identifier: dxd3S7tnA18QTzXO5qB2OF955zHjLabgyntEAW/GBEg=
Subject key identifier: 28:0B:52:87:5E:33:16:75:16:AD:43:27:A9:73:38:BC:ED:84:B3:80
Authority key identifier: 4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93
Certificate issuer: /CN=4b27f327e528689d450c1d4a6346f540e7754093
Certificate serial: 019D38D315E0A2972DAB2349B9B90B2F51F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
Manifest number: 11E1
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl (hash: VzyQNpEnb8UbWWLxOPP/L43wQKEhz70s3R+Z8G03CnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:15:e0:a2:97:2d:ab:23:49:b9:b9:0b:2f:51:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b27f327e528689d450c1d4a6346f540e7754093
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=280b52875e33167516ad4327a97338bced84b380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:f3:e9:9a:53:47:78:65:45:0a:ac:f0:54:
0f:ac:40:87:21:a7:19:7a:89:5a:d1:53:9e:e1:43:
7b:5f:ef:b4:cb:c2:4f:10:b1:57:9f:33:82:77:a8:
ea:a6:a1:21:fe:cb:ac:64:8f:cd:67:48:87:03:ca:
ce:6a:9c:7f:62:69:0a:c7:1d:f4:49:dc:58:c3:bf:
34:1a:cf:fd:60:37:29:ae:a9:30:81:de:89:8c:fe:
71:67:68:46:e5:d4:26:79:aa:c9:a5:62:d0:bf:e4:
8f:b3:f9:85:34:d6:40:ae:1c:3f:ba:2c:d0:2f:9d:
79:54:71:4b:34:cc:fd:09:e3:79:1d:fe:ea:7a:8e:
3f:fc:05:e1:9e:1d:86:5a:55:23:c9:11:ac:23:ac:
b9:73:8b:fc:6e:d8:cc:f4:9b:31:cf:98:68:95:dc:
e7:a8:98:2b:51:7b:ae:8c:bc:41:b5:10:a9:75:40:
54:b1:6c:f6:52:e8:49:38:12:35:49:d5:b3:6d:31:
d6:74:07:88:ef:21:e1:cb:b8:44:1d:b6:27:d6:97:
36:f9:f4:90:14:9f:6f:b7:42:e4:c0:3b:5c:51:53:
e7:ba:31:1a:5b:8b:ea:79:28:74:fb:d4:a4:bb:d1:
68:19:d6:05:cc:4d:eb:b2:22:c8:13:31:ed:ba:ce:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0B:52:87:5E:33:16:75:16:AD:43:27:A9:73:38:BC:ED:84:B3:80
X509v3 Authority Key Identifier:
keyid:4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a8:97:8f:73:58:e1:b3:83:f3:a8:e0:d9:b3:bc:bf:c0:ed:
0d:af:41:49:6e:6f:70:2c:df:c1:ea:99:30:45:4b:ad:b4:8b:
7d:5c:c1:28:a9:0d:ee:f3:07:3e:51:17:d8:bc:30:83:36:70:
75:41:67:04:c3:84:c6:0f:fd:56:a5:15:f0:92:20:5c:32:47:
5f:9e:5d:87:dc:95:1e:77:08:77:8e:4a:e5:a0:4b:56:6d:ee:
91:e7:73:f3:23:95:e6:39:63:0a:08:ed:7d:aa:bc:29:b0:e3:
36:87:ac:c3:ce:98:ff:bd:64:57:ac:01:03:c8:4f:2d:b5:1c:
bf:f1:7a:eb:23:c8:d1:cb:07:c6:c0:03:f9:20:d5:7a:65:d0:
a9:3b:84:15:56:25:3c:44:2d:0d:1a:d6:16:53:cb:91:d1:c5:
43:cf:29:71:78:7b:cd:d6:26:79:4d:1d:01:68:8e:14:b0:1f:
0b:b7:e8:54:00:e6:2c:a4:bb:fa:30:47:9e:cf:da:da:35:c7:
86:33:14:f4:5d:0b:93:d3:e3:ca:61:e7:68:f6:5d:20:f3:b5:
2a:47:d0:6e:88:56:dd:47:5c:1d:68:51:b4:bf:16:16:12:1c:
59:56:97:2c:72:af:c9:df:1f:0c:4d:4a:db:b1:d3:9a:29:09:
05:1c:33:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040xXgopctqyNJubkLL1HwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMjdmMzI3ZTUyODY4OWQ0NTBjMWQ0YTYzNDZmNTQwZTc3
NTQwOTMwHhcNMjYwMzI5MDkwMDUwWhcNMjYwMzMwMDkwMDUwWjAzMTEwLwYDVQQD
EygyODBiNTI4NzVlMzMxNjc1MTZhZDQzMjdhOTczMzhiY2VkODRiMzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkTz6ZpTR3hlRQqs8FQPrECHIacZ
eola0VOe4UN7X++0y8JPELFXnzOCd6jqpqEh/susZI/NZ0iHA8rOapx/YmkKxx30
SdxYw780Gs/9YDcprqkwgd6JjP5xZ2hG5dQmearJpWLQv+SPs/mFNNZArhw/uizQ
L515VHFLNMz9CeN5Hf7qeo4//AXhnh2GWlUjyRGsI6y5c4v8btjM9Jsxz5holdzn
qJgrUXuujLxBtRCpdUBUsWz2UuhJOBI1SdWzbTHWdAeI7yHhy7hEHbYn1pc2+fSQ
FJ9vt0LkwDtcUVPnujEaW4vqeSh0+9Sku9FoGdYFzE3rsiLIEzHtus5jnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgLUodeMxZ1Fq1DJ6lzOLzthLOAMB8GA1UdIwQY
MBaAFEsn8yflKGidRQwdSmNG9UDndUCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3lmekotVW9hSjFGREIxS1kwYjFRT2QxUUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lYTAyYjktZDJmMC00YjIzLTgyNzAt
OWRlMWNkMWFmMzU2LzEvU3lmekotVW9hSjFGREIxS1kwYjFRT2QxUUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lYTAyYjktZDJmMC00YjIzLTgyNzAtOWRlMWNkMWFmMzU2
LzEvU3lmekotVW9hSjFGREIxS1kwYjFRT2QxUUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqiXj3NY
4bOD86jg2bO8v8DtDa9BSW5vcCzfweqZMEVLrbSLfVzBKKkN7vMHPlEX2LwwgzZw
dUFnBMOExg/9VqUV8JIgXDJHX55dh9yVHncId45K5aBLVm3ukedz8yOV5jljCgjt
faq8KbDjNoesw86Y/71kV6wBA8hPLbUcv/F66yPI0csHxsAD+SDVemXQqTuEFVYl
PEQtDRrWFlPLkdHFQ88pcXh7zdYmeU0dAWiOFLAfC7foVADmLKS7+jBHns/a2jXH
hjMU9F0Lk9PjymHnaPZdIPO1KkfQbohW3UdcHWhRtL8WFhIcWVaXLHKvyd8fDE1K
27HTmikJBRwzJA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:21 2026 by rpki-client