Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: 5swFpWZms1tDe+h8XVbOShdIMeQ7/IMV6v6VSXwLpxs=
Subject key identifier: D8:4D:50:EF:FF:3B:8B:5F:B7:98:A7:05:28:02:DC:13:73:CC:35:E6
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 04A94DD1966AA44365BDD8A048FB5FA3BB0B83DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: 02BA
Signing time: Wed 25 Mar 2026 22:51:57 +0000
Manifest this update: Wed 25 Mar 2026 22:46:57 +0000
Manifest next update: Thu 26 Mar 2026 23:48:57 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: O/N+kU5oHSSixtiHuP4cyOQ8lI24kp5VoRW90syGmmc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a9:4d:d1:96:6a:a4:43:65:bd:d8:a0:48:fb:5f:a3:bb:0b:83:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Mar 25 22:46:57 2026 GMT
Not After : Mar 26 23:48:57 2026 GMT
Subject: CN=D84D50EFFF3B8B5FB798A7052802DC1373CC35E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:fd:95:fa:88:fc:63:b2:5f:a4:a5:23:e8:
14:7d:ab:7e:12:56:e7:f3:89:b0:22:fc:04:96:18:
0a:89:79:c0:09:17:d9:63:ef:f3:29:7d:09:45:9d:
04:f2:0f:56:4e:36:94:af:df:1d:1e:dd:ab:59:72:
37:13:34:37:a7:ce:af:7a:d3:2a:f5:c5:a9:0c:7a:
31:6c:66:5c:d1:4d:7f:76:b7:a4:6b:e3:ab:81:a0:
de:e8:bf:60:7f:d7:be:10:09:a9:e0:f7:c5:4e:a1:
df:e9:f8:33:7e:b5:81:7d:a3:ce:e1:1d:41:d5:12:
b7:c7:e2:af:bb:1a:08:d6:f6:87:19:e0:31:b5:31:
05:7a:d4:60:dd:66:06:6a:a1:51:6c:21:4c:6c:57:
86:83:22:44:57:cc:9a:d8:ce:df:63:85:fb:d5:c2:
50:22:ed:34:1f:fd:ca:83:8d:ee:92:f9:11:00:f9:
a8:5f:02:85:1d:98:73:b9:76:e3:d7:f7:2c:09:11:
a4:90:7c:49:3b:15:36:14:7e:56:26:57:72:c8:66:
21:52:0d:90:bf:2d:de:4a:ac:36:ee:c8:95:fd:7c:
2f:35:32:42:ca:e5:5a:28:90:87:df:c7:e4:a5:f5:
24:2f:28:07:bc:5e:c8:24:c4:93:16:46:42:6d:b7:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4D:50:EF:FF:3B:8B:5F:B7:98:A7:05:28:02:DC:13:73:CC:35:E6
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:70:a6:bb:ea:6d:80:af:a2:17:80:2f:9f:d3:b6:31:32:d5:
46:7d:ed:db:dd:8c:6f:a4:8d:c3:c9:b7:74:fe:30:ce:22:bc:
6c:e8:4b:db:f9:76:a3:e5:81:95:a9:ea:bb:37:2f:a9:86:a1:
50:3c:5d:f0:4a:92:4f:e6:76:79:8b:2d:69:9d:cb:c0:5c:b9:
ab:7b:c5:1c:00:bd:36:8f:cd:8b:46:28:2a:ba:c3:fe:8d:0e:
c9:0c:a0:14:29:1c:dc:7b:7b:58:b2:d2:87:4d:fd:82:44:9b:
77:56:da:e9:6e:fc:4d:2b:b3:fa:c2:3e:4e:48:ec:ef:d3:7d:
0c:ed:24:52:c2:4a:3b:21:a8:c8:f7:89:55:be:4a:1c:b3:b0:
f6:1f:95:8a:9a:2a:da:e5:e0:94:9d:52:a3:f0:e8:07:6e:cd:
53:33:f9:d7:77:98:ce:21:e8:d2:8d:35:d8:83:79:47:02:07:
70:0b:a2:b8:42:85:f2:a7:03:14:18:70:a2:f9:da:17:b3:51:
10:45:83:67:7b:e5:2c:c2:c7:d5:b6:24:48:78:c4:d4:59:e3:
93:c7:29:cb:85:f0:ee:0a:97:60:55:75:6b:56:69:be:39:b2:
69:2e:fd:c7:02:97:28:5d:35:b8:2a:89:5c:87:4c:e9:04:fa:
fb:68:f3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:40 2026 by rpki-client