Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft
File: F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft (raw, json)
Hash identifier: QZ2TTCJwDh9b8xfGKdQdpZyWmtVw7QUFfeuo3nwWXOU=
Subject key identifier: 74:E8:9B:11:69:8C:C8:06:A0:93:D1:5F:01:F4:79:AE:93:49:DF:2A
Authority key identifier: F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32
Certificate issuer: /CN=F4D1A7E9DFF0D90E760FB87D5605458BA870BF32
Certificate serial: 072FEEDF2DF6564948626164DE42575D1D6D557B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft
Manifest number: D0
Signing time: Fri 01 May 2026 02:41:52 +0000
Manifest this update: Fri 01 May 2026 02:36:52 +0000
Manifest next update: Sat 02 May 2026 06:36:52 +0000
Files and hashes: 1: F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl (hash: sOjvVGErWFHFUlJM2qu/EvN/X+BjWtdUVCWhxf8l3dA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:2f:ee:df:2d:f6:56:49:48:62:61:64:de:42:57:5d:1d:6d:55:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4D1A7E9DFF0D90E760FB87D5605458BA870BF32
Validity
Not Before: May 1 02:36:52 2026 GMT
Not After : May 2 06:36:52 2026 GMT
Subject: CN=74E89B11698CC806A093D15F01F479AE9349DF2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:c9:4d:2d:db:1e:17:37:e6:57:0a:65:1c:
d4:db:c5:a2:d5:e7:c1:11:8a:d0:2a:ce:e3:dc:69:
90:1f:0d:37:3b:6a:61:05:0b:16:fc:77:58:f0:c1:
dd:20:90:bb:f0:1a:ce:c3:4d:0b:82:e6:ae:ff:a9:
81:df:2c:1c:3e:5a:72:42:aa:1b:53:eb:f1:5b:17:
48:c0:50:fa:2e:79:f9:b9:39:d5:7c:36:cd:db:2a:
78:47:7d:6b:b2:07:58:eb:b1:59:00:5a:cd:5a:11:
84:38:86:ac:cd:3b:c7:f9:0f:45:fd:ab:5e:07:cb:
cc:52:4b:4a:c2:6e:02:ed:65:d2:79:08:97:d5:47:
51:7c:09:d3:fe:8f:a8:ac:ab:af:b9:f3:97:a5:63:
c2:49:11:0d:3f:c5:8a:2d:62:06:1a:fe:8c:c3:f4:
2b:e1:64:3b:8a:1d:99:08:15:22:e7:2f:90:9e:83:
90:13:44:ef:f8:ca:10:1a:39:c7:56:f7:01:0e:52:
45:19:92:73:4d:3c:b1:a8:3a:74:15:4d:98:96:82:
65:44:90:7a:8a:ba:e0:1d:16:09:5e:43:f8:02:8a:
c0:58:ee:8d:5c:b3:68:ee:26:1e:4f:98:ae:6d:57:
82:cb:b5:74:88:8d:95:1d:5f:17:44:d4:67:49:0c:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E8:9B:11:69:8C:C8:06:A0:93:D1:5F:01:F4:79:AE:93:49:DF:2A
X509v3 Authority Key Identifier:
keyid:F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e7:b7:71:ad:9e:53:cc:1e:4f:07:6d:1f:f6:f8:57:64:bf:
62:de:b2:b0:6f:ce:90:3b:bb:bf:f5:7c:ea:4b:65:6e:47:54:
66:72:98:1b:67:d3:f2:26:3f:cc:1b:63:89:22:f8:fe:55:2e:
c6:93:bb:6e:33:34:77:6f:4a:09:e6:6f:31:72:e5:52:53:7c:
1c:ca:5b:82:48:93:62:8a:44:15:83:47:34:2e:89:43:28:79:
bb:fd:b3:43:cb:ab:f7:80:56:7f:d1:8c:62:23:ea:39:b5:36:
b0:16:1e:b5:63:1e:08:6b:85:ca:9d:bf:fc:77:48:20:7a:dd:
b4:29:43:ac:f1:8f:ae:31:e2:76:52:55:84:ee:3d:5e:df:d3:
cf:be:dd:80:f3:a1:a9:f3:46:02:97:45:c6:5b:b8:bd:26:c9:
87:ac:16:8e:e3:e4:45:d1:70:c3:09:0e:9e:75:ab:53:94:47:
aa:be:ca:e9:dd:e2:ce:9e:2d:8b:63:28:84:18:a7:da:56:ad:
fd:29:1a:89:d8:3b:44:86:52:ac:5b:90:c8:a3:d8:b9:07:6e:
28:bb:cf:c5:27:ab:36:f8:ed:84:9d:82:bd:ed:b9:38:1a:76:
64:73:28:97:03:ab:df:f1:bc:05:67:74:83:61:79:63:cd:d1:
af:00:dd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:55 2026 by rpki-client