Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
File: SYN20qIgPYbnmm1ESVq_xIkDFGU.mft (raw, json)
Hash identifier: skUtxUuID1atW7xCm2s0EO0Rjg1+NBvhLM80alDg4dY=
Subject key identifier: 38:DC:3A:72:83:BC:94:4A:88:A1:F8:B4:29:BC:F1:E6:69:A0:F3:B6
Authority key identifier: 49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65
Certificate issuer: /CN=498376d2a2203d86e79a6d44495abfc489031465
Certificate serial: 019CABD95C6FFF11F7CCB4F55E9806F77454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
Manifest number: 0F2B
Signing time: Mon 02 Mar 2026 00:01:14 +0000
Manifest this update: Mon 02 Mar 2026 00:01:14 +0000
Manifest next update: Tue 03 Mar 2026 00:01:14 +0000
Files and hashes: 1: SYN20qIgPYbnmm1ESVq_xIkDFGU.crl (hash: zeARitX0SaeMe8A8/YV+EyvBx5G+Yc56kPw2+ImnG/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5c:6f:ff:11:f7:cc:b4:f5:5e:98:06:f7:74:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498376d2a2203d86e79a6d44495abfc489031465
Validity
Not Before: Mar 2 00:01:14 2026 GMT
Not After : Mar 3 00:01:14 2026 GMT
Subject: CN=38dc3a7283bc944a88a1f8b429bcf1e669a0f3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:29:2e:f3:4e:9e:d0:4f:8d:d1:6e:9c:c6:
b2:2f:95:21:66:89:65:7a:69:ec:e4:52:21:83:12:
2b:e9:f4:78:49:89:a6:73:75:a5:f3:1a:88:11:56:
b4:ec:f5:92:79:c8:21:e7:d3:ea:e9:79:49:76:55:
c7:af:bc:4c:d0:68:24:45:a3:d8:8f:b8:45:77:77:
80:da:75:81:3a:dc:4e:ef:68:0f:46:6a:1c:1c:fd:
6c:57:40:4b:1f:21:27:cd:48:dd:89:5a:c9:48:d0:
45:0d:cd:6f:3c:14:06:d6:c5:70:a8:45:4e:8a:c1:
47:2d:6c:05:82:16:7c:ff:bf:b9:f9:f1:ac:c2:fe:
66:07:27:9b:99:6a:7f:4b:00:00:e3:d2:b4:6d:23:
af:9b:c5:04:6e:bd:3d:15:a6:d4:2e:6c:3f:a1:81:
14:11:a5:bf:8c:d4:d9:1e:6e:94:ed:6c:58:85:36:
85:5c:56:a2:ef:94:c8:f1:03:5f:bc:1e:a9:03:68:
82:e6:72:da:a9:01:3f:3f:af:de:a6:0a:a7:f0:74:
8c:15:7a:94:71:09:2a:86:8e:1f:59:99:d4:b5:ba:
92:df:23:b4:92:b8:cc:b5:c9:79:90:c2:be:35:7c:
03:b9:95:65:75:46:f1:b2:5c:28:71:6c:a6:fd:61:
40:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DC:3A:72:83:BC:94:4A:88:A1:F8:B4:29:BC:F1:E6:69:A0:F3:B6
X509v3 Authority Key Identifier:
keyid:49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0b:2b:07:47:40:69:f4:d2:c7:c9:9c:ac:0c:95:c4:fe:13:
4b:1a:9e:c1:38:1c:de:65:0a:b4:e8:81:98:ab:7b:5a:c0:0c:
6b:9a:6e:5e:c1:93:dc:aa:5d:92:77:28:8d:6b:3e:ef:ff:e9:
80:ad:2b:ff:16:57:c8:37:ab:59:fc:83:b1:da:f3:06:3b:fc:
6a:54:9d:f8:45:99:20:03:ed:8e:e9:9e:52:5a:e2:63:60:df:
37:59:a6:db:c4:a6:09:01:6f:60:78:80:5e:18:0a:0f:87:a7:
2d:eb:76:b1:7f:05:c1:7b:b4:a1:2a:42:d4:e6:25:60:2b:f7:
b4:d4:d8:2c:0a:ac:c0:26:ed:9e:a8:d3:eb:32:4f:b4:1b:50:
75:88:66:ab:9e:50:bb:f5:24:1d:d9:16:23:d6:3c:91:e0:fa:
5e:c3:6e:52:5c:c1:35:c1:a2:d3:17:bd:fc:c8:7e:36:da:13:
63:43:31:01:3b:9b:d3:da:db:08:e5:93:06:87:93:da:b8:55:
77:d5:e5:e3:3b:3e:94:56:0d:63:99:b3:9d:5e:7f:dc:ec:fe:
9e:7f:ec:ac:64:e6:e1:c9:cf:a9:54:76:54:b7:10:72:00:d0:
a5:02:7b:37:17:bf:96:63:d0:6d:9c:2e:40:a6:e5:45:70:20:
32:f6:70:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Vxv/xH3zLT1XpgG93RUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODM3NmQyYTIyMDNkODZlNzlhNmQ0NDQ5NWFiZmM0ODkw
MzE0NjUwHhcNMjYwMzAyMDAwMTE0WhcNMjYwMzAzMDAwMTE0WjAzMTEwLwYDVQQD
EygzOGRjM2E3MjgzYmM5NDRhODhhMWY4YjQyOWJjZjFlNjY5YTBmM2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqkpLvNOntBPjdFunMayL5UhZoll
emns5FIhgxIr6fR4SYmmc3Wl8xqIEVa07PWSecgh59Pq6XlJdlXHr7xM0GgkRaPY
j7hFd3eA2nWBOtxO72gPRmocHP1sV0BLHyEnzUjdiVrJSNBFDc1vPBQG1sVwqEVO
isFHLWwFghZ8/7+5+fGswv5mByebmWp/SwAA49K0bSOvm8UEbr09FabULmw/oYEU
EaW/jNTZHm6U7WxYhTaFXFai75TI8QNfvB6pA2iC5nLaqQE/P6/epgqn8HSMFXqU
cQkqho4fWZnUtbqS3yO0krjMtcl5kMK+NXwDuZVldUbxslwocWym/WFAfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjcOnKDvJRKiKH4tCm88eZpoPO2MB8GA1UdIwQY
MBaAFEmDdtKiID2G55ptRElav8SJAxRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85MjU1YmQtOGI3Zi00NmQyLTk3NzMt
ZjUwYTJhMDA2NDE0LzEvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85MjU1YmQtOGI3Zi00NmQyLTk3NzMtZjUwYTJhMDA2NDE0
LzEvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQsrB0dA
afTSx8mcrAyVxP4TSxqewTgc3mUKtOiBmKt7WsAMa5puXsGT3KpdkncojWs+7//p
gK0r/xZXyDerWfyDsdrzBjv8alSd+EWZIAPtjumeUlriY2DfN1mm28SmCQFvYHiA
XhgKD4enLet2sX8FwXu0oSpC1OYlYCv3tNTYLAqswCbtnqjT6zJPtBtQdYhmq55Q
u/UkHdkWI9Y8keD6XsNuUlzBNcGi0xe9/Mh+NtoTY0MxATub09rbCOWTBoeT2rhV
d9Xl4zs+lFYNY5mznV5/3Oz+nn/srGTm4cnPqVR2VLcQcgDQpQJ7Nxe/lmPQbZwu
QKblRXAgMvZw0g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:12 2026 by rpki-client