Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
File: 6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft (raw, json)
Hash identifier: UtWIfyYrvFnIVs6G2TrU0CWlUL0T0eXJmJk0xFz6zzk=
Subject key identifier: 85:64:D4:7C:BC:08:93:C8:13:C0:7B:25:CB:CC:6C:55:13:63:2A:2E
Authority key identifier: 6E:51:CB:9A:48:1B:5A:E9:9D:8B:E1:18:3E:3F:B0:87:FF:5C:8B:6F
Certificate issuer: /CN=6e51cb9a481b5ae99d8be1183e3fb087ff5c8b6f
Certificate serial: 648A8C67975C8313DD270D193D824E610962B85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
Manifest number: 02DA
Signing time: Fri 20 Mar 2026 13:39:48 +0000
Manifest this update: Fri 20 Mar 2026 13:34:48 +0000
Manifest next update: Sat 21 Mar 2026 14:37:48 +0000
Files and hashes: 1: 6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl (hash: YkiVPZQxdX6v6xrQTBxRUtt29iNBGHBBqgVRqqKRTC4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:8a:8c:67:97:5c:83:13:dd:27:0d:19:3d:82:4e:61:09:62:b8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e51cb9a481b5ae99d8be1183e3fb087ff5c8b6f
Validity
Not Before: Mar 20 13:34:48 2026 GMT
Not After : Mar 21 14:37:48 2026 GMT
Subject: CN=8564D47CBC0893C813C07B25CBCC6C5513632A2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:e8:e1:66:7a:d5:0b:a1:2a:57:46:fb:b3:
57:0f:f2:bf:d5:f4:27:eb:6f:da:cb:29:5d:d9:60:
0e:f9:a1:72:89:59:84:16:51:49:43:db:aa:8d:4b:
78:2a:2d:71:22:67:8a:b0:64:33:d3:50:d9:6e:ed:
4a:c2:62:53:c5:f0:de:e9:38:e3:ec:02:5a:7e:62:
1c:eb:c3:fb:6a:05:19:1c:3f:f6:49:11:b1:89:bc:
9c:52:cf:f9:8d:bf:64:af:ba:2e:1d:4c:17:84:81:
57:ff:17:5c:9e:c2:51:41:95:aa:1e:ef:56:d7:a6:
be:b2:13:14:62:8e:36:a3:b4:ed:86:bd:96:02:60:
db:9a:b8:94:99:69:ce:25:14:19:78:6f:54:a2:7a:
a2:f1:84:a4:ee:ec:39:bf:8f:d9:af:a0:6c:cc:fa:
35:d4:96:50:17:ef:4c:5f:7c:d9:22:42:1f:a7:12:
8d:c8:18:8a:dd:88:e6:a6:cf:18:08:95:da:b4:05:
9c:47:bd:56:31:51:50:33:e4:0e:7d:20:dd:8f:47:
d0:85:1c:cb:5f:4d:70:6c:e7:36:65:0f:08:4e:be:
aa:ee:4c:8d:d8:ba:86:58:a3:29:f2:7f:e5:9e:75:
56:a7:b7:80:56:64:b4:fc:cc:df:89:36:65:24:a0:
92:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:64:D4:7C:BC:08:93:C8:13:C0:7B:25:CB:CC:6C:55:13:63:2A:2E
X509v3 Authority Key Identifier:
keyid:6E:51:CB:9A:48:1B:5A:E9:9D:8B:E1:18:3E:3F:B0:87:FF:5C:8B:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5a:36:84:c5:52:02:50:40:89:47:30:6a:21:45:3c:92:21:
ee:a8:bd:1f:3f:20:78:8a:4e:a4:e7:f4:7b:f8:ad:0c:92:4c:
1b:f1:f4:be:be:e1:cc:3e:75:33:5b:4c:b3:33:af:90:d3:b5:
9b:1d:29:83:8b:d4:cc:0b:25:b7:97:c4:e9:ac:46:84:a3:09:
12:79:de:78:2e:cc:1d:da:8b:2b:e0:cc:8a:f0:11:c2:68:34:
9a:d7:b5:da:8f:a6:2d:d6:89:e8:de:b0:e9:61:00:15:69:91:
19:bf:63:f9:7c:0b:66:36:e6:68:8f:16:fc:02:8f:39:0f:be:
c2:26:90:a7:10:c7:21:07:e1:0a:80:e2:51:ae:ac:5f:bb:b9:
bd:ee:e7:36:55:72:0d:11:ef:07:0c:0d:d5:11:6d:f4:22:d4:
27:7e:6f:f3:37:bc:66:ce:bb:3c:26:09:40:4c:04:83:94:92:
fe:8a:e5:cb:80:5f:fc:33:4a:8f:a8:fb:14:38:b0:ce:2d:64:
94:dd:f0:2d:47:3c:fd:bc:f3:1f:b0:d6:2b:2f:68:d4:91:64:
3b:a3:ce:5c:d9:1d:e2:8c:85:77:45:fe:66:94:49:52:14:58:
7f:d3:6c:d5:88:6a:ba:e0:99:b0:78:7a:25:2c:10:8b:54:a3:
87:f0:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:42 2026 by rpki-client