Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier: sp2aPk9NdOeWLIkaEGUKAO7qbDSg/eWnuRzJ5ASJgGU=
Subject key identifier: 1C:99:F8:6B:E0:02:06:A7:07:A8:6F:95:3C:97:76:E5:6F:66:D8:53
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial: 019D2960A0ABB846E1872694D5ECAA34D44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number: 0F67
Signing time: Thu 26 Mar 2026 09:01:31 +0000
Manifest this update: Thu 26 Mar 2026 09:01:31 +0000
Manifest next update: Fri 27 Mar 2026 09:01:31 +0000
Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: Gl5AWf3OxRjJJCEMafp3+8h2xtzB3KfMYIccpodMGrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:a0:ab:b8:46:e1:87:26:94:d5:ec:aa:34:d4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Validity
Not Before: Mar 26 09:01:31 2026 GMT
Not After : Mar 27 09:01:31 2026 GMT
Subject: CN=1c99f86be00206a707a86f953c9776e56f66d853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:d3:e5:22:78:68:b4:b5:de:33:9c:a6:b4:
09:ba:b9:fa:d1:83:91:71:10:87:c9:fe:b8:e8:11:
21:17:fd:9d:30:23:78:19:66:ee:cb:77:cc:7b:3e:
09:0f:e7:37:06:b7:0f:d0:af:be:8e:06:9f:42:fa:
32:27:1e:a6:39:a9:77:1a:08:e7:0e:a4:60:04:07:
e0:b0:a8:20:db:42:1c:d2:40:a4:5a:d9:13:7d:34:
0a:02:6f:37:30:3b:7b:fb:01:38:a5:ed:00:e4:6c:
4b:02:54:80:61:a7:08:d4:19:b8:0d:d4:5a:70:e8:
0f:fb:b5:50:01:40:d3:9a:cc:c5:06:20:00:ec:d5:
a0:fe:1b:42:a3:6e:b4:53:99:29:bb:eb:6e:63:d4:
43:a4:c3:77:ed:74:5d:33:30:d2:c0:f0:c4:cc:da:
9a:d6:82:d1:5a:75:81:57:b2:f4:70:46:84:75:d9:
c4:0a:58:c3:76:7b:3d:96:db:2a:c3:9b:ad:45:93:
c6:4d:2e:f6:3c:46:77:bb:46:04:d2:8e:e4:12:00:
f2:b6:9b:35:06:c6:56:64:c4:4f:9b:e6:89:83:9d:
29:78:62:88:31:9b:fd:11:9b:c2:e9:7b:2b:3a:58:
b3:fa:9f:91:a8:43:e4:f9:1d:8f:a6:a7:ec:3d:34:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:99:F8:6B:E0:02:06:A7:07:A8:6F:95:3C:97:76:E5:6F:66:D8:53
X509v3 Authority Key Identifier:
keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cb:4e:e9:b8:ac:8f:3e:ab:18:b6:af:1c:09:ac:7c:1f:e0:
3d:96:65:ba:10:39:e6:80:2e:4e:5e:3f:ac:7b:cf:a3:c8:3b:
c0:27:46:45:6a:f8:a2:e4:ac:1d:31:bc:81:80:30:7c:a8:af:
e0:5e:89:de:9f:b0:cf:16:68:1a:4a:9f:10:a4:04:f2:30:44:
bd:4d:83:df:28:9b:2e:3d:ca:ed:67:53:37:ad:fd:b4:ad:c1:
94:b8:09:d5:c4:50:a1:6f:37:24:82:48:f6:5c:d4:9f:78:1c:
6c:cc:98:94:7b:c8:70:b9:69:23:84:be:ef:02:de:2c:29:b0:
5a:72:4d:ac:2c:d5:46:31:9b:c4:40:d8:8e:10:2d:d1:54:ea:
e2:d5:46:23:d0:63:bf:9b:06:35:a1:71:e1:4e:89:4f:ee:1b:
d6:23:72:0e:85:23:10:09:10:9d:6d:54:83:ce:99:fc:9a:8e:
4a:02:d3:b6:85:3d:43:70:17:9a:2d:81:b1:59:ad:b3:fd:7a:
2c:1e:3d:5f:09:29:33:7b:ed:e2:30:fa:4a:c6:fc:13:d8:70:
19:b0:c4:92:03:d9:97:a0:eb:9b:30:c1:f9:1f:55:19:a4:71:
a9:8e:c4:a1:07:8a:2b:6d:6c:56:e2:53:63:9a:1c:1e:17:46:
65:d4:e7:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYKCruEbhhyaU1eyqNNRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGYxM2U3YTViYWY2YWU5ZjUxZDI2OWY1OWY2NGQ0Njg0
OTY0MWUwHhcNMjYwMzI2MDkwMTMxWhcNMjYwMzI3MDkwMTMxWjAzMTEwLwYDVQQD
EygxYzk5Zjg2YmUwMDIwNmE3MDdhODZmOTUzYzk3NzZlNTZmNjZkODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8TT5SJ4aLS13jOcprQJurn60YOR
cRCHyf646BEhF/2dMCN4GWbuy3fMez4JD+c3BrcP0K++jgafQvoyJx6mOal3Ggjn
DqRgBAfgsKgg20Ic0kCkWtkTfTQKAm83MDt7+wE4pe0A5GxLAlSAYacI1Bm4DdRa
cOgP+7VQAUDTmszFBiAA7NWg/htCo260U5kpu+tuY9RDpMN37XRdMzDSwPDEzNqa
1oLRWnWBV7L0cEaEddnECljDdns9ltsqw5utRZPGTS72PEZ3u0YE0o7kEgDytps1
BsZWZMRPm+aJg50peGKIMZv9EZvC6XsrOliz+p+RqEPk+R2PpqfsPTS/nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByZ+GvgAganB6hvlTyXduVvZthTMB8GA1UdIwQY
MBaAFEmPE+eluvaun1HSafWfZNRoSWQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYt
Y2UxYjQyMjRlYzQ5LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYtY2UxYjQyMjRlYzQ5
LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbstO6bis
jz6rGLavHAmsfB/gPZZluhA55oAuTl4/rHvPo8g7wCdGRWr4ouSsHTG8gYAwfKiv
4F6J3p+wzxZoGkqfEKQE8jBEvU2D3yibLj3K7WdTN639tK3BlLgJ1cRQoW83JIJI
9lzUn3gcbMyYlHvIcLlpI4S+7wLeLCmwWnJNrCzVRjGbxEDYjhAt0VTq4tVGI9Bj
v5sGNaFx4U6JT+4b1iNyDoUjEAkQnW1Ug86Z/JqOSgLTtoU9Q3AXmi2BsVmts/16
LB49XwkpM3vt4jD6Ssb8E9hwGbDEkgPZl6DrmzDB+R9VGaRxqY7EoQeKK21sVuJT
Y5ocHhdGZdTn+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:33 2026 by rpki-client