Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
File: syznolxromOxucmrdrjS3DoNaAY.mft (raw, json)
Hash identifier: thWUxNXti65pBVaLmt/R4GvczDpMZyO/RoTeA6sP53o=
Subject key identifier: 14:AC:85:7B:68:F7:93:17:83:3F:0D:4B:01:F0:FD:FC:0B:78:9F:D2
Authority key identifier: B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
Certificate issuer: /CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Certificate serial: 019D27049C932B659A270B9825A6783B163F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
Manifest number: 0737
Signing time: Wed 25 Mar 2026 22:01:46 +0000
Manifest this update: Wed 25 Mar 2026 22:01:46 +0000
Manifest next update: Thu 26 Mar 2026 22:01:46 +0000
Files and hashes: 1: syznolxromOxucmrdrjS3DoNaAY.crl (hash: qcHmTmzJVt0Qhgk2xwzZqHrVO9+Wml9n0MlkYR63vTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9c:93:2b:65:9a:27:0b:98:25:a6:78:3b:16:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Validity
Not Before: Mar 25 22:01:46 2026 GMT
Not After : Mar 26 22:01:46 2026 GMT
Subject: CN=14ac857b68f79317833f0d4b01f0fdfc0b789fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:27:f3:14:8e:ad:c1:b3:b6:10:d0:da:a9:6a:
98:09:17:57:a0:1c:0e:c0:90:91:dc:2d:1e:da:75:
b3:7f:aa:7f:39:44:c2:28:ff:70:18:a7:28:aa:30:
e1:8f:f5:8a:f7:6c:69:ec:a8:37:24:71:98:20:85:
37:ce:65:26:99:fa:3a:b0:13:7f:ca:a0:ee:c3:49:
1d:8d:76:a3:86:a2:11:26:5d:92:5a:7b:91:72:ae:
29:01:09:28:62:47:d1:82:1c:8d:a1:09:f7:8c:d6:
e5:0f:6c:e0:87:38:26:d0:b0:97:7a:68:7c:d8:19:
1d:b1:c3:8d:f2:7a:75:fb:9b:61:08:86:ed:61:e2:
be:02:28:a5:f7:84:42:65:33:9a:5e:a9:d0:91:82:
85:1b:79:7f:b8:33:42:72:1f:04:ff:c3:4f:6f:46:
f5:54:04:08:85:b5:ff:66:c2:7d:4f:20:9b:23:4d:
ab:d0:c6:44:53:cf:a8:d2:9b:f6:b8:9b:d0:db:fa:
42:e0:71:51:dc:27:20:78:52:84:0b:4c:16:ba:c6:
ec:b7:06:80:3f:ee:76:c4:a2:67:15:30:c4:bc:bc:
e1:39:be:39:2c:1b:fc:01:10:f3:13:fd:44:ca:36:
dd:14:c0:64:ff:17:cc:f3:e4:af:82:e7:a4:f4:b5:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AC:85:7B:68:F7:93:17:83:3F:0D:4B:01:F0:FD:FC:0B:78:9F:D2
X509v3 Authority Key Identifier:
keyid:B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bf:1d:d2:1c:a5:87:cc:c9:e9:c9:91:7e:ff:f7:aa:50:e5:
49:4b:19:d5:a8:05:ca:32:0d:ba:92:87:b0:ea:fa:90:59:b9:
91:a2:b5:16:2e:13:d0:09:f7:b5:c0:0a:0e:83:68:37:5d:5f:
a2:c0:be:85:c3:58:28:3e:0c:51:9a:ec:fd:71:7b:0c:2e:24:
31:eb:cb:c9:76:91:ce:5f:32:70:b5:c5:27:43:87:89:51:70:
84:aa:71:8a:a3:52:c8:f8:d1:9c:33:06:1f:02:e0:01:a1:a3:
54:a9:de:0e:99:0e:b4:1c:08:1b:3d:15:34:04:50:11:16:9b:
79:8c:c8:77:96:ec:64:3b:86:0d:09:1b:75:af:e8:c4:f5:b8:
ce:fa:1b:c6:94:24:05:d4:f7:3f:55:3c:92:6c:0a:b7:2a:07:
3f:98:39:fd:30:7f:fe:91:b4:82:35:49:f1:64:a5:e4:1d:2f:
c3:60:f8:55:44:63:bc:24:82:da:6e:4d:28:4c:51:4a:3b:a5:
8f:16:f7:cb:6a:41:25:68:4d:57:a1:53:ae:5d:1e:f0:2d:f2:
73:52:3c:d0:f1:e6:4d:52:03:91:ab:f6:6d:91:5b:21:ff:0e:
64:0e:32:bc:2e:d1:f2:df:bc:c4:11:03:b2:d9:36:aa:a2:08:
49:0c:c2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:27 2026 by rpki-client