
Error: rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier: mSZ0zqSZJQne+U6TT0rVm0cR2z+AWFXKeuBVXbZ8p6A=
Subject key identifier: 22:77:9F:25:BC:26:84:C8:C0:4B:25:3E:2C:0E:01:C6:DB:21:3F:3B
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial: 7D063F040554798FA23B01C4EACE1E28B2C695EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number: 072B
Signing time: Tue 22 Sep 2026 06:34:36 +0000
Manifest this update: Tue 22 Sep 2026 06:29:36 +0000
Manifest next update: Wed 23 Sep 2026 09:11:36 +0000
Files and hashes: 1: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: 0Rm7k7BK66Gt3+0cyYDI/VoRoSysXBPZrU7PyKPXK2o=)
2: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: uK0Qd/USy59AqNTwWN3wPV3irBo5HSGqpruSyYVoTWs=)
3: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: /6JYnu74FnlMKLeMyxGRy9zINdjsl5pRxawy91gInjc=)
4: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: wZK8GKavAyHxdXi2NXubIUtrqAxE1wgx7MB4jomVNVo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:06:3f:04:05:54:79:8f:a2:3b:01:c4:ea:ce:1e:28:b2:c6:95:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
Validity
Not Before: Sep 22 06:29:36 2026 GMT
Not After : Sep 23 09:11:36 2026 GMT
Subject: CN=22779F25BC2684C8C04B253E2C0E01C6DB213F3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:ed:71:a1:59:7b:c8:2f:50:80:76:6f:d7:
8f:6f:b6:1c:5b:33:aa:09:05:89:80:07:8e:35:ad:
60:e9:47:1b:f5:61:e6:ac:ce:6d:9d:ad:b7:23:18:
00:9f:fc:e3:b0:d2:5d:d2:47:0a:5b:52:9f:e3:46:
9c:b7:7a:2d:9e:c1:88:aa:f8:4b:61:f3:c0:8f:85:
1f:b9:b4:9a:ed:70:2a:66:7e:61:33:39:3f:6f:57:
7e:59:b9:59:0a:f6:1f:38:b8:bf:d4:18:37:30:48:
b6:18:ef:e1:ff:98:b3:62:61:64:bb:f2:27:ab:da:
93:14:bf:cb:6b:e8:53:5f:92:39:bd:c5:0d:83:b6:
27:03:79:10:92:67:8e:90:9e:22:fc:41:76:9d:ee:
26:9a:85:90:96:8a:27:cd:f0:aa:11:e3:62:bc:7b:
1b:4a:6f:b3:97:c4:73:72:72:bc:96:04:dc:76:98:
83:3f:78:41:ce:8b:1f:f6:3e:58:81:eb:3c:96:43:
d9:bd:82:25:b8:db:ab:69:19:8e:12:f3:04:6a:ee:
85:25:df:29:ba:4a:b4:8a:9e:a8:ab:61:70:24:7f:
d5:54:54:8e:16:6f:7e:22:66:26:ad:d9:05:ba:c1:
1e:2a:4f:3c:84:47:2f:e2:a6:05:0d:c4:77:99:c3:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:77:9F:25:BC:26:84:C8:C0:4B:25:3E:2C:0E:01:C6:DB:21:3F:3B
X509v3 Authority Key Identifier:
keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fc:33:b4:15:17:96:f7:f7:c8:d3:5f:4e:61:87:c7:79:34:
1a:d7:30:65:0a:5f:54:5a:ba:48:13:55:a2:0b:8f:b2:fb:17:
0c:53:16:6a:97:8a:3d:20:ec:e7:b2:1e:32:b8:d5:6b:99:67:
5b:b2:1d:e9:1d:ee:37:07:71:4e:f4:df:22:c2:16:4f:97:28:
de:05:ee:c2:72:c7:01:b8:aa:b7:bd:0a:6e:56:37:88:17:9d:
74:5d:61:9c:bb:59:74:ad:20:33:99:5e:6d:a4:1b:4f:1b:ff:
05:b4:3c:a3:3d:cc:ec:d8:12:53:f9:61:27:06:ad:14:7a:8b:
6e:97:ec:c7:0d:9d:8b:76:74:cb:41:42:36:e5:58:5c:6d:f0:
dc:de:b3:76:e7:a4:9a:5d:e6:47:49:26:9f:fa:3c:ea:17:6b:
7f:cb:12:ca:e5:eb:70:5c:6f:77:1b:65:b7:ce:4e:fa:79:49:
a0:11:de:a7:5a:9e:58:e1:aa:65:99:88:4a:ed:76:32:25:73:
aa:ed:40:3b:c7:af:b3:b3:6e:d7:1a:d8:d8:99:cf:95:54:6c:
35:e1:e3:b1:38:56:de:10:92:f5:97:f9:6a:c6:73:f2:e0:46:
e7:4d:ce:bb:a2:f3:3b:eb:ab:71:62:c9:f1:3a:80:c6:aa:56:
b5:76:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:49:44 2026 by rpki-client