Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
File: B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft (raw, json)
Hash identifier: fYeqJyHA6ImdMeeSWMIi3ll7g9RsKKEdg04NOOhhfgg=
Subject key identifier: FB:BD:1C:4D:EC:A9:D9:A3:CD:40:53:ED:E8:EB:BF:BD:8F:76:74:A3
Authority key identifier: B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF
Certificate issuer: /CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
Certificate serial: 4EAFBCBBBE451D302CCCD6F82E6D64D51047BF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
Manifest number: 015B
Signing time: Fri 27 Mar 2026 17:54:54 +0000
Manifest this update: Fri 27 Mar 2026 17:49:54 +0000
Manifest next update: Sat 28 Mar 2026 19:22:54 +0000
Files and hashes: 1: B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl (hash: bI8QogJAAq50xttVqrHsT94J3Qiaq4HGvggWytTU7y4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl
rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:af:bc:bb:be:45:1d:30:2c:cc:d6:f8:2e:6d:64:d5:10:47:bf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
Validity
Not Before: Mar 27 17:49:54 2026 GMT
Not After : Mar 28 19:22:54 2026 GMT
Subject: CN=FBBD1C4DECA9D9A3CD4053EDE8EBBFBD8F7674A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:d0:85:4d:62:4c:13:dc:e8:e4:58:35:46:
26:f4:65:00:3a:a0:4a:22:71:c3:97:a7:51:cd:5a:
59:5a:70:dc:4d:a0:98:f6:0b:44:96:a8:7e:43:6b:
2f:ce:9b:8e:96:6f:e3:a0:d9:2b:ae:85:6a:dc:84:
36:85:10:4a:a3:3d:95:7a:e6:a3:46:8b:52:1e:7b:
07:42:68:f0:eb:a0:72:9b:28:0b:a6:71:34:fe:75:
66:c6:47:02:e2:7d:d7:9f:c0:44:e2:cc:2b:ee:5b:
f8:e6:76:ed:a9:8d:04:e9:20:8c:cc:62:2f:2f:df:
18:e1:29:60:06:2d:4c:01:c0:79:10:13:13:7e:97:
b7:1e:4d:d6:2c:55:d3:95:40:d2:62:1f:e9:ab:c1:
e2:a3:19:4b:9a:56:7b:f3:ed:1c:e9:f9:8e:af:35:
a5:50:6a:71:61:e6:67:f8:c2:fa:ef:f8:90:4b:1b:
9f:3c:27:53:48:32:18:f3:b9:7d:49:6e:60:4a:b9:
42:d9:5e:92:f4:a8:25:91:a7:99:cd:2e:f4:26:3a:
95:9c:c9:60:3c:46:34:77:07:f6:28:71:82:31:99:
4a:cd:17:54:6e:69:47:33:77:7b:49:8f:8c:30:c6:
67:c0:06:56:8e:0f:94:a1:e3:8d:1c:c9:a1:df:b7:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BD:1C:4D:EC:A9:D9:A3:CD:40:53:ED:E8:EB:BF:BD:8F:76:74:A3
X509v3 Authority Key Identifier:
keyid:B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6d:fa:83:8f:5e:98:64:ce:f1:c8:c3:b8:b6:9f:12:da:76:
2c:10:33:ff:63:a0:32:a9:3a:12:1a:df:63:bd:06:c4:f7:42:
51:7a:98:fd:3e:48:17:5c:9c:ef:a8:25:4d:b6:09:4c:74:0a:
0f:9c:05:53:3e:6a:4f:3b:1e:50:a9:71:cf:84:e8:d7:8f:b7:
64:29:c9:f4:4f:62:6b:bf:0e:12:a1:c9:c7:75:65:f3:02:43:
65:a2:d8:85:a4:dc:ad:ac:6d:3c:c7:2b:b4:60:d8:e7:d9:b8:
57:36:a0:09:ef:a5:5f:7e:e5:6d:25:6a:cd:80:4e:2e:86:23:
b3:79:c0:9e:77:6c:a3:2d:9e:8f:27:63:af:96:3a:6b:cb:d8:
09:39:87:17:cb:e3:b3:2f:d1:14:c8:2b:c4:c7:e8:9e:ab:d3:
75:dd:39:d8:77:44:92:26:1f:5f:b4:41:ba:8f:ba:3c:7d:2b:
c0:6b:e1:a8:4f:fb:23:dd:62:80:d6:e0:7f:2c:05:0a:7d:02:
23:be:76:8a:0d:69:56:ef:2c:0c:82:f4:78:32:20:b5:a7:df:
aa:05:2f:58:bc:98:7b:7a:74:cb:20:8f:c8:07:be:c7:05:05:
e5:de:72:9e:e8:b5:ff:ae:06:c6:1d:f9:16:3c:73:ce:6a:f7:
53:c5:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:30 2026 by rpki-client