Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
File: SYN20qIgPYbnmm1ESVq_xIkDFGU.mft (raw, json)
Hash identifier: E8HAlyP/A+ZJcK+7Mz+c0jvq/v19Ng9bMPoS5to/RSM=
Subject key identifier: 4E:5C:3C:A2:E1:77:3E:04:6B:60:37:DF:5D:3F:43:16:F0:CB:3C:36
Authority key identifier: 49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65
Certificate issuer: /CN=498376d2a2203d86e79a6d44495abfc489031465
Certificate serial: 019D9B50C7966F77035C52C62E1158DBD406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
Manifest number: 0FA7
Signing time: Fri 17 Apr 2026 12:00:55 +0000
Manifest this update: Fri 17 Apr 2026 12:00:55 +0000
Manifest next update: Sat 18 Apr 2026 12:00:55 +0000
Files and hashes: 1: SYN20qIgPYbnmm1ESVq_xIkDFGU.crl (hash: +QUXWF3UGH7lAT52Y/LAK69vqvU97tXEHdPxxRrVMXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c7:96:6f:77:03:5c:52:c6:2e:11:58:db:d4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498376d2a2203d86e79a6d44495abfc489031465
Validity
Not Before: Apr 17 12:00:55 2026 GMT
Not After : Apr 18 12:00:55 2026 GMT
Subject: CN=4e5c3ca2e1773e046b6037df5d3f4316f0cb3c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:c2:3b:40:50:a8:f8:7e:40:ac:ec:5b:83:
78:57:56:39:6c:73:0e:0a:26:ef:25:b1:70:97:1f:
4a:22:5e:61:f3:82:86:21:2d:76:42:c0:c8:3d:34:
e7:7c:75:b7:d8:74:0a:db:1b:d8:d9:59:fe:b8:3f:
22:fc:2c:3f:34:dd:03:e3:41:45:df:9a:9d:a9:76:
29:e5:f6:01:d3:81:f8:98:21:e2:25:07:e2:70:48:
c8:6e:03:85:59:0e:d9:8d:cd:66:e7:0d:97:87:ca:
9d:56:e2:aa:aa:50:b9:71:df:3d:2a:1c:c0:0c:1e:
34:c5:32:c4:8b:bb:4f:2f:9e:c9:51:44:24:32:61:
0c:c9:21:6b:ed:3b:7d:f4:5f:18:cf:4f:67:b5:92:
d9:24:d9:62:29:b3:a3:bc:5b:25:c2:a1:59:7a:36:
1c:16:fd:aa:44:7a:4c:cb:7e:7c:9c:f1:18:22:68:
cb:e1:cc:45:7c:8e:cf:e4:17:3f:f3:d3:38:a8:62:
0c:1b:ff:8b:61:25:14:ae:64:54:b5:53:49:67:cf:
02:2e:7d:46:f9:cb:5b:d2:62:62:d3:5b:90:08:d9:
d3:05:c2:b0:df:94:d0:c6:2c:f4:09:21:06:97:48:
61:91:14:fa:dc:ca:84:c9:3c:6f:ac:cd:5e:0b:51:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5C:3C:A2:E1:77:3E:04:6B:60:37:DF:5D:3F:43:16:F0:CB:3C:36
X509v3 Authority Key Identifier:
keyid:49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ef:bc:e3:8e:2e:8a:4d:e2:3d:1a:a1:a1:05:2a:b1:f5:5c:
dc:54:32:ea:9f:1a:ee:ec:0b:15:cf:61:46:f6:3c:ad:38:76:
b7:28:3d:97:89:7a:63:2c:0c:bd:77:e4:9d:42:5f:c5:46:17:
23:42:06:21:db:02:80:72:1c:e6:cf:60:e0:8e:14:ff:6d:3c:
b2:22:13:40:b8:ce:57:3a:dd:34:a7:a4:8e:79:98:19:ae:39:
1e:e6:ea:e9:08:6d:21:a1:5c:81:06:f0:bb:d8:da:90:45:a4:
2b:96:c8:ad:ff:41:8c:26:04:e2:64:09:52:c8:01:e7:8f:30:
aa:28:d9:83:f4:ec:5d:1d:df:8f:2d:83:ee:d6:78:c8:63:d0:
0b:2e:25:33:a7:59:ac:71:61:f9:c7:78:a2:65:55:90:fb:a3:
ff:be:4f:ec:4d:b8:6d:3f:6d:4c:6c:45:18:f9:5d:c1:06:59:
e2:cb:f5:92:ff:1c:59:ec:f7:a4:94:7f:e0:aa:63:9b:8d:79:
53:f7:e3:87:19:81:44:f0:3f:ea:bb:ce:e0:87:d4:e0:2a:1a:
68:5c:70:ed:22:ea:26:80:dc:fc:b9:d4:af:92:3c:83:2b:49:
40:d6:93:fb:17:df:66:24:14:dc:1e:21:ae:76:f1:fa:6e:c0:
64:b9:d3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:52:52 2026 by rpki-client