Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
File: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft (raw, json)
Hash identifier: 67Jw69OsaSyypTLFRk8voBzS7nBYMpW8174ZtmgaTr8=
Subject key identifier: CB:61:BF:AA:25:30:5A:40:95:3D:DB:AD:0E:AE:77:64:2B:30:BF:84
Authority key identifier: 8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
Certificate issuer: /CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Certificate serial: 7635D8BD136D536F80266C78A49FBE3B9EC24246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
Manifest number: 037E
Signing time: Wed 25 Mar 2026 20:31:52 +0000
Manifest this update: Wed 25 Mar 2026 20:26:52 +0000
Manifest next update: Thu 26 Mar 2026 21:49:52 +0000
Files and hashes: 1: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl (hash: R0XM/COoSou2/VVCESz6YLbNPheSYd6d7thNev7qmZk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:35:d8:bd:13:6d:53:6f:80:26:6c:78:a4:9f:be:3b:9e:c2:42:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Validity
Not Before: Mar 25 20:26:52 2026 GMT
Not After : Mar 26 21:49:52 2026 GMT
Subject: CN=CB61BFAA25305A40953DDBAD0EAE77642B30BF84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:6e:98:fb:d4:d4:2d:9b:f9:bc:24:08:7d:
69:61:45:a1:f7:00:98:ab:dd:a1:ca:f6:e1:3f:94:
f9:71:01:22:83:f1:df:bf:51:88:7f:c1:86:22:31:
d7:b4:26:d6:f6:bc:7f:16:54:e3:36:59:22:3e:a7:
03:6d:20:46:3a:89:9a:39:bf:0a:28:9a:1c:f6:f4:
13:ad:b0:b7:53:6e:45:9c:e4:18:fb:1c:fb:b1:2b:
65:3a:e4:46:13:2f:32:8c:33:a6:d2:3f:4e:28:a9:
89:54:e1:c7:3d:17:a3:be:c5:3d:eb:06:9d:3c:52:
2d:c8:e9:15:fa:86:59:9d:cc:f4:8f:76:b5:83:57:
45:4e:85:49:49:6b:98:3d:7b:ef:b5:64:64:17:f0:
9a:a3:aa:0f:64:b7:7a:f2:69:66:11:5e:2d:94:b2:
a9:b1:2a:5e:34:f5:78:61:b7:89:8a:ee:ae:9a:81:
c6:c2:e1:8d:80:f4:ca:aa:b5:a2:40:23:1c:ef:f7:
b1:01:1d:70:8f:2c:e2:d7:c9:38:25:cc:59:eb:b4:
0c:4a:89:f5:3f:49:14:0d:56:3c:08:f0:01:64:ee:
f0:bd:ac:7d:c7:5c:09:59:34:39:8d:ee:05:ee:b6:
55:5c:76:8c:55:20:04:c8:c8:99:b4:fc:b1:f6:52:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:BF:AA:25:30:5A:40:95:3D:DB:AD:0E:AE:77:64:2B:30:BF:84
X509v3 Authority Key Identifier:
keyid:8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:95:d7:4e:e3:4e:70:cd:d9:0e:5f:c2:9f:c9:d3:cb:25:58:
d0:bc:39:6b:96:a3:9c:45:7d:f3:b8:d4:a4:57:3a:6c:12:49:
26:81:54:b8:c7:d0:65:06:14:e5:fc:aa:27:2a:1a:ea:e0:4c:
df:aa:27:1e:f0:79:9d:a0:42:e1:45:5b:50:75:0e:0d:e5:3c:
b2:a8:12:1d:a3:8d:80:20:18:01:58:cb:80:d2:28:03:d9:f4:
22:fe:05:61:2b:65:1a:53:90:47:32:24:fc:79:27:f2:81:e9:
7a:00:ab:62:da:f4:ae:80:3f:45:91:cb:95:d4:33:98:22:bd:
f4:42:71:11:15:50:57:56:d7:cb:75:95:25:a0:a2:b9:57:7b:
77:2c:e8:9e:4c:b0:ab:2a:f9:c4:de:f6:ca:8f:28:9b:67:ea:
a2:58:5c:31:f1:be:95:14:55:c6:eb:46:05:a2:2f:c6:cd:c2:
e7:12:b3:6e:40:bf:a2:27:9a:5b:cf:d2:58:cb:01:2c:7e:ae:
cf:c5:b9:b8:89:40:88:8c:52:26:fc:0e:cc:17:ef:26:1c:bf:
ef:fe:6f:6f:94:3c:a8:8b:c3:18:b5:65:3d:0b:61:69:93:d8:
19:0e:f0:62:25:e6:4a:ea:32:fc:c0:59:65:67:ba:4b:e4:92:
0e:c2:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:54 2026 by rpki-client