Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
File: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json)
Hash identifier: NJ9lLvvQdFOkEJLE06lnCBeQATLRpJ5/joNgznbrj3I=
Subject key identifier: 97:27:61:EB:B3:B5:D8:41:AE:92:6D:AC:50:62:5E:21:69:1D:EB:CC
Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
Certificate issuer: /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Certificate serial: 019D28BB19F7E7D6D601222E00B250ADCAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
Manifest number: 0590
Signing time: Thu 26 Mar 2026 06:00:43 +0000
Manifest this update: Thu 26 Mar 2026 06:00:43 +0000
Manifest next update: Fri 27 Mar 2026 06:00:43 +0000
Files and hashes: 1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: 3H5J1mRIHSdTJJ7vVkSR7L7teik8dmbxjAiSmZtwosg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:19:f7:e7:d6:d6:01:22:2e:00:b2:50:ad:ca:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Validity
Not Before: Mar 26 06:00:43 2026 GMT
Not After : Mar 27 06:00:43 2026 GMT
Subject: CN=972761ebb3b5d841ae926dac50625e21691debcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:d4:88:25:69:5d:af:52:da:94:d5:ca:c8:
fe:0a:28:42:33:c1:5d:bb:68:54:ce:4b:60:8b:81:
41:64:9e:d7:8f:d7:43:a9:7e:32:93:d9:e1:ff:f3:
65:5e:f5:b7:e5:09:e0:f7:9b:7d:63:55:87:7c:bb:
63:68:5b:c6:d8:67:52:cc:4d:24:60:48:11:c8:20:
c5:1d:45:0e:a7:15:79:40:34:c7:a4:62:a7:58:b1:
72:a1:05:9b:56:eb:0d:91:d8:16:a4:c2:48:1a:94:
29:0d:3f:33:02:9c:bd:96:37:34:6d:87:82:b8:c4:
12:cc:6a:a5:a8:81:9a:37:c2:80:7c:78:2d:31:86:
65:45:29:b9:83:3a:e5:4a:05:3d:14:a4:d0:bd:fb:
3a:66:49:17:e2:c3:0f:80:ec:d4:01:04:af:7c:dc:
c5:75:c7:fd:62:b0:d0:2e:5f:69:07:f0:8c:ff:8c:
4a:d0:1f:b9:a1:e7:85:c4:63:06:61:b1:0a:82:fa:
74:59:30:fb:8b:5b:f0:9d:c7:31:b2:f1:34:ed:a1:
9b:2f:59:a7:8e:57:71:b6:27:32:77:83:10:69:f4:
6d:3f:98:57:b4:a5:11:53:b8:82:e9:42:c3:ba:85:
64:b7:c4:34:d9:c2:88:80:fd:10:36:b1:7c:84:9d:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:27:61:EB:B3:B5:D8:41:AE:92:6D:AC:50:62:5E:21:69:1D:EB:CC
X509v3 Authority Key Identifier:
keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:22:b0:17:2d:08:c9:7c:4b:e4:f1:ec:7a:63:62:10:1f:ce:
ec:8f:25:b8:0d:03:8e:f3:4e:e1:6a:b4:72:ec:8b:46:35:e9:
c5:69:61:82:d1:3d:a5:c4:06:81:6b:7a:7f:0a:91:bf:53:ab:
02:65:2c:da:96:e8:cf:27:99:31:61:2c:c4:47:ed:75:73:ac:
38:a5:59:ca:61:61:65:19:81:83:1c:45:8f:c5:ac:c9:1c:c4:
34:1f:b9:02:3a:b8:6b:82:bc:1b:c1:dd:81:90:fe:a2:03:c9:
25:39:d5:84:38:51:10:4c:32:52:fe:65:46:1e:3e:70:8c:65:
b9:ea:ef:ab:db:4d:05:d3:07:35:d8:12:87:4b:5d:0c:85:8e:
3a:5f:01:39:de:22:53:74:b2:48:a6:06:1a:60:c4:bd:b2:72:
04:af:88:48:30:be:61:26:30:0f:8b:b7:92:ed:11:e7:a5:96:
33:ec:74:35:d6:4f:46:78:14:67:e0:cb:3a:c5:f5:74:91:7d:
2c:4a:81:6b:76:24:90:d0:8d:87:a6:a1:6c:01:96:20:68:02:
c7:3d:38:e3:b8:17:2f:cc:b8:19:d2:2e:2e:34:13:30:e4:c0:
a3:90:92:b2:25:4e:59:6a:97:ae:7e:3b:57:24:3b:1e:65:3b:
a8:bd:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:01 2026 by rpki-client