Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier: hYITEFRLU7mwIO2wjgfsM6IUsIgO/8euupt/2QUAVyk=
Subject key identifier: E9:68:FF:15:CB:6D:B6:0A:13:2C:DF:8F:E0:88:FD:BF:1D:20:34:4C
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial: 019D38D366211EE75ACC6CF8A21C3014178E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number: 0F6F
Signing time: Sun 29 Mar 2026 09:01:11 +0000
Manifest this update: Sun 29 Mar 2026 09:01:11 +0000
Manifest next update: Mon 30 Mar 2026 09:01:11 +0000
Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: qjjU/s9NvIkz4Q2AWeIQv0GxjvReixfW6nbdoN0fnlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:66:21:1e:e7:5a:cc:6c:f8:a2:1c:30:14:17:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Validity
Not Before: Mar 29 09:01:11 2026 GMT
Not After : Mar 30 09:01:11 2026 GMT
Subject: CN=e968ff15cb6db60a132cdf8fe088fdbf1d20344c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:d9:ae:31:12:1b:cc:ab:dc:e4:42:90:d9:
d0:a4:67:4b:72:46:f8:7d:11:31:7e:bb:89:33:ee:
db:3c:83:d3:56:20:1c:6b:f8:5c:3c:00:88:09:76:
9c:43:10:fc:64:27:62:c8:6b:51:84:6e:7c:80:f2:
fd:3d:a5:77:fd:39:1b:01:6c:24:8e:0a:46:48:80:
fe:d7:3d:c9:03:bc:2c:77:4f:78:0e:d6:03:f8:66:
15:46:4a:58:d9:b7:58:f2:7d:6b:be:23:83:0e:77:
bf:17:e5:2c:9c:4e:3c:51:81:21:83:e0:a7:aa:0b:
8c:78:c7:ee:1c:d6:d6:a6:6b:b6:db:0d:02:8e:8e:
e1:ed:83:18:2d:5b:20:42:ac:38:57:40:f2:fa:f8:
c1:2b:59:7f:e5:2b:7c:90:96:8c:aa:3d:1d:9c:ec:
ba:51:28:d1:49:33:b5:75:e1:dc:cc:08:2e:75:1e:
eb:2d:7a:d8:da:70:1b:8b:56:d6:d4:c3:64:8b:a1:
e4:92:2d:b2:7a:46:e2:41:34:93:7e:20:5e:ca:22:
2f:e0:46:11:94:f8:bc:87:f4:87:28:65:5f:58:c6:
7e:8d:3b:d7:1f:4d:5d:1a:11:81:45:77:dd:94:e2:
f7:fb:1d:cb:ff:50:14:3e:6f:61:80:85:bf:7a:4a:
4c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:68:FF:15:CB:6D:B6:0A:13:2C:DF:8F:E0:88:FD:BF:1D:20:34:4C
X509v3 Authority Key Identifier:
keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:70:29:e3:31:0e:33:7a:9f:1f:83:f1:0b:e9:d6:8e:ad:9b:
f0:4a:d4:1c:e2:9d:12:d3:5b:5c:71:21:dd:12:12:2c:03:18:
6a:ab:2d:96:24:66:44:83:de:05:00:19:27:06:bd:33:f0:52:
4c:60:fd:56:c2:7b:ac:ef:65:aa:22:80:c3:22:b7:e6:52:08:
da:91:ca:5d:26:22:60:db:ba:b5:76:22:24:cf:79:d8:3c:29:
ce:ce:d2:43:0f:70:50:74:40:b3:bb:ff:96:dd:8d:b7:cf:07:
39:06:d8:ca:62:c7:6e:4c:24:35:ae:c6:36:db:ab:79:68:77:
58:9c:0b:55:ba:25:b8:40:d8:b9:0b:4d:37:0b:9c:20:44:fb:
9b:1e:9d:8d:ca:a7:20:d3:a4:d6:2f:2f:bc:1a:d4:9f:81:d0:
50:d8:df:4b:e8:4b:ee:1e:a1:18:9b:64:fc:69:8f:87:51:6e:
44:d4:ec:34:ee:d0:27:a6:1e:1a:be:10:04:99:10:23:3e:9f:
7f:e9:29:e4:99:3b:72:aa:ff:03:8e:8e:ee:b2:6e:cb:74:73:
42:dc:1e:f2:3a:c1:73:f7:b1:1d:d0:a7:65:f8:11:fa:bd:e8:
80:78:5c:d6:72:28:e4:58:15:fc:8d:0e:cd:63:89:9a:10:ef:
57:96:d9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:47 2026 by rpki-client