Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
File: E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft (raw, json)
Hash identifier: cCnP1XSPrRk0AfdaTjTrykcdLyR2iWL2KBx4RP9nSEg=
Subject key identifier: 47:D5:C8:19:CD:28:A1:ED:DD:F3:26:39:8E:DB:1A:FB:BE:C2:BF:A1
Authority key identifier: E0:EB:C3:E1:88:E3:5D:38:BC:8D:CC:68:6C:A2:76:C6:5D:6D:A2:AF
Certificate issuer: /CN=e0ebc3e188e35d38bc8dcc686ca276c65d6da2af
Certificate serial: 2C11ABF8730C43B9B80CBF36DB5DDFCB2E4F34C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
Manifest number: B2
Signing time: Wed 25 Mar 2026 13:48:34 +0000
Manifest this update: Wed 25 Mar 2026 13:43:34 +0000
Manifest next update: Thu 26 Mar 2026 13:48:34 +0000
Files and hashes: 1: 3139332e3130372e38322e302f32342d3234203d3e203630383630.roa (hash: x3oBjxqc7sXsiScFg8HANPn6SPGL7AD0sdvQlu75w7g=)
2: E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl (hash: MnlHsemcQGFZ7V5rhkJQ3wMGLJvK4t/k6oxGeWJUHcA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:11:ab:f8:73:0c:43:b9:b8:0c:bf:36:db:5d:df:cb:2e:4f:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebc3e188e35d38bc8dcc686ca276c65d6da2af
Validity
Not Before: Mar 25 13:43:34 2026 GMT
Not After : Mar 26 13:48:34 2026 GMT
Subject: CN=47D5C819CD28A1EDDDF326398EDB1AFBBEC2BFA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:fe:d6:73:d3:ed:79:ba:28:a5:1a:98:a8:
6e:71:46:a4:1d:e3:e6:47:23:f7:d3:53:01:cb:a2:
6a:3c:22:69:94:e1:4b:85:3d:ae:a0:ed:ed:5a:97:
ff:b2:99:21:8c:e8:81:11:fa:14:2d:36:1b:2f:0e:
7b:2a:df:6c:01:14:9d:2b:3e:e0:c9:a6:6a:76:32:
88:40:f6:d5:6c:65:59:76:67:7b:fa:2e:d9:91:31:
4c:3e:f0:82:71:c1:4f:83:65:da:ad:70:e7:24:ee:
a7:ae:71:8a:d0:1a:a5:24:a0:74:07:2d:65:60:ec:
9f:3b:be:57:51:c4:d6:37:c2:f3:b7:a7:51:e9:0c:
99:cd:aa:71:db:19:f9:14:cb:e8:85:a4:4b:9c:d0:
1e:8a:f2:19:2a:3c:4d:1a:1d:bb:dc:89:29:27:f9:
71:71:03:37:6c:15:7d:5e:94:4f:1d:0c:50:10:ed:
bb:3e:c5:42:e0:38:d7:70:82:ee:3c:34:78:b3:20:
15:27:36:29:ff:7d:27:7a:a9:eb:9d:cd:6b:85:4e:
0b:db:ee:80:90:9c:bd:95:80:f6:7c:b9:20:05:91:
45:00:7f:0b:7b:34:be:b0:03:24:ae:6d:57:33:6a:
cf:0c:47:11:01:26:78:c0:32:ff:80:e1:f2:b0:e4:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D5:C8:19:CD:28:A1:ED:DD:F3:26:39:8E:DB:1A:FB:BE:C2:BF:A1
X509v3 Authority Key Identifier:
keyid:E0:EB:C3:E1:88:E3:5D:38:BC:8D:CC:68:6C:A2:76:C6:5D:6D:A2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8a:77:7d:d4:4f:c1:6e:40:dd:b8:56:fb:2b:77:e2:de:cf:
37:7f:66:dc:87:c7:18:d5:65:ed:8a:77:57:ad:70:05:81:db:
b8:38:6b:78:a1:b8:74:82:de:78:de:d8:02:6e:15:91:03:8d:
41:a8:cb:99:ec:c6:5c:e3:31:9d:6f:40:ba:6b:66:2c:1c:8a:
de:eb:62:d8:d5:3f:f6:42:b7:7f:a8:ae:c7:3d:47:e7:65:43:
94:f2:ad:8c:48:ee:61:50:a1:41:f9:63:6b:86:ef:0e:49:6b:
dd:44:32:e2:97:65:ea:57:75:6d:c2:55:25:2e:8b:5a:79:fb:
f7:e1:c7:f3:87:79:0c:0d:61:59:73:6a:7c:cd:a9:6a:87:9a:
88:32:0c:a9:14:ca:7c:6f:e4:c5:bf:33:d8:74:de:d8:ff:de:
89:03:f9:19:de:a1:3d:e1:d4:0b:7f:50:c5:ef:31:12:28:d0:
53:f5:2d:5d:37:a2:9c:b0:34:d7:f8:07:c5:16:da:e5:be:20:
7a:97:e9:51:37:d3:11:4e:2c:fc:57:89:18:04:d6:cb:a8:ca:
df:a0:0c:fb:7b:90:03:d1:10:e2:4e:81:8f:f5:75:c4:cd:46:
67:0b:f3:3d:56:3e:00:3c:6d:54:de:12:b9:0c:25:92:a3:c9:
a0:5f:d6:90
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULBGr+HMMQ7m4DL82213fyy5PNMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTBlYmMzZTE4OGUzNWQzOGJjOGRjYzY4NmNhMjc2YzY1
ZDZkYTJhZjAeFw0yNjAzMjUxMzQzMzRaFw0yNjAzMjYxMzQ4MzRaMDMxMTAvBgNV
BAMTKDQ3RDVDODE5Q0QyOEExRUREREYzMjYzOThFREIxQUZCQkVDMkJGQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeev7Wc9PteboopRqYqG5xRqQd
4+ZHI/fTUwHLomo8ImmU4UuFPa6g7e1al/+ymSGM6IER+hQtNhsvDnsq32wBFJ0r
PuDJpmp2MohA9tVsZVl2Z3v6LtmRMUw+8IJxwU+DZdqtcOck7qeucYrQGqUkoHQH
LWVg7J87vldRxNY3wvO3p1HpDJnNqnHbGfkUy+iFpEuc0B6K8hkqPE0aHbvciSkn
+XFxAzdsFX1elE8dDFAQ7bs+xULgONdwgu48NHizIBUnNin/fSd6qeudzWuFTgvb
7oCQnL2VgPZ8uSAFkUUAfwt7NL6wAySubVczas8MRxEBJnjAMv+A4fKw5Js9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUR9XIGc0ooe3d8yY5jtsa+77Cv6EwHwYDVR0j
BBgwFoAU4OvD4YjjXTi8jcxobKJ2xl1toq8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4
NDhjLzMvRTBFQkMzRTE4OEUzNUQzOEJDOERDQzY4NkNBMjc2QzY1RDZEQTJBRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRPdkQ0WWpqWFRpOGpjeG9iS0oyeGwx
dG9xOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02
YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMy9FMEVCQzNFMTg4RTM1RDM4QkM4
RENDNjg2Q0EyNzZDNjVENkRBMkFGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYp3fdRPwW5A3bhW+yt3
4t7PN39m3IfHGNVl7Yp3V61wBYHbuDhreKG4dILeeN7YAm4VkQONQajLmezGXOMx
nW9AumtmLByK3uti2NU/9kK3f6iuxz1H52VDlPKtjEjuYVChQflja4bvDklr3UQy
4pdl6ld1bcJVJS6LWnn79+HH84d5DA1hWXNqfM2paoeaiDIMqRTKfG/kxb8z2HTe
2P/eiQP5Gd6hPeHUC39Qxe8xEijQU/UtXTeinLA01/gHxRba5b4gepfpUTfTEU4s
/FeJGATWy6jK36AM+3uQA9EQ4k6Bj/V1xM1GZwvzPVY+ADxtVN4SuQwlkqPJoF/W
kA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:21:52 2026 by rpki-client