Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
File: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json)
Hash identifier: 1Q8dlN0oPqRy4WlwU/iZSMqeDqqwUtLvDWzVNXJIpI0=
Subject key identifier: 8D:D0:4D:EF:EA:90:CD:EB:71:9A:8B:46:75:19:32:32:BB:78:B2:51
Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
Certificate issuer: /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Certificate serial: 019D382E6E90A344C0FD37AA2B75E666F686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
Manifest number: 0598
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: x3tHjx3Etq0R1plYvttA+T1/L7SVKOidYKqAVkKtUKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6e:90:a3:44:c0:fd:37:aa:2b:75:e6:66:f6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=8dd04defea90cdeb719a8b4675193232bb78b251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:cd:5c:b0:ba:21:31:1e:04:5c:7e:ac:c7:
f0:f3:dc:6e:bc:30:0f:83:1d:e3:ed:6e:b6:0c:aa:
76:a0:67:29:84:b2:c5:14:55:cf:25:8b:62:70:a6:
99:a8:ce:9e:be:4d:58:81:cb:6f:00:6c:f1:f7:86:
70:2d:ea:11:69:48:f3:3d:29:e6:c7:7d:73:95:39:
c1:c4:81:81:78:8e:04:b2:b4:0b:d8:76:56:af:06:
6c:48:fb:60:20:19:97:c1:9e:7f:0c:0b:11:1c:4c:
fe:c7:8c:08:c8:56:60:62:77:18:34:68:40:9a:4d:
aa:98:1c:dc:24:6a:b1:6a:a7:e0:3e:90:ad:ec:51:
4d:7c:c6:69:35:0c:ea:7b:90:b5:ad:c7:7c:74:35:
d5:08:bf:87:26:5d:11:a3:39:58:f7:72:40:02:02:
a0:e8:84:93:9b:2d:1c:38:22:d2:ba:ae:41:d8:18:
e5:78:23:ab:55:2c:39:29:2e:4b:9d:5d:95:f7:a6:
ef:0b:22:df:3c:88:de:69:80:93:5e:63:e5:22:77:
fb:18:83:50:6a:c1:bb:a5:af:03:a7:49:6e:db:92:
7a:35:85:85:d6:6a:7e:8b:2d:c2:95:2f:05:4a:b2:
dc:17:97:65:3a:b8:c5:81:0e:f1:dd:52:31:08:ac:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D0:4D:EF:EA:90:CD:EB:71:9A:8B:46:75:19:32:32:BB:78:B2:51
X509v3 Authority Key Identifier:
keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cd:64:8d:75:ee:c3:90:ab:dc:58:53:e4:1b:5e:cd:35:a5:
a9:68:8e:77:59:6c:15:15:06:b9:b4:4a:83:0b:f9:db:80:59:
fc:41:5c:87:6a:70:62:d6:0e:80:89:fa:5d:7d:91:70:ca:78:
f3:0c:a2:b7:3f:2d:0f:88:16:f1:bd:30:1d:83:63:38:3a:a9:
37:fe:fb:60:17:75:01:0e:6d:fc:ec:d5:e8:a9:9a:fa:7f:47:
bd:97:0c:7e:f0:09:9f:63:28:f7:12:08:1a:b0:33:b0:bd:ab:
f0:ae:92:61:38:69:f7:b5:2b:3b:b1:eb:ee:a1:f1:b0:9c:2c:
58:ee:85:4e:ab:ca:00:74:95:90:0a:b2:58:0a:18:35:58:cb:
15:c9:71:b9:2a:4e:80:79:81:cc:92:c8:a7:04:37:42:85:40:
2b:15:f5:4a:27:70:a2:27:23:e4:8f:5b:82:75:3a:ac:c3:c1:
30:38:a9:3d:96:b9:e4:bd:3f:b7:7f:de:72:6d:34:6e:01:8b:
d6:3f:50:b3:65:6e:f7:0c:8c:1b:77:a4:1b:3f:5a:c2:fb:3f:
e5:a8:f7:ee:65:f7:e3:1a:5a:98:e2:23:c4:24:07:0c:65:69:
09:83:49:fc:7f:e0:37:49:84:58:33:a5:17:c8:2e:ca:d0:a9:
f3:18:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:14 2026 by rpki-client