Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File: B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier: PehxTVc0CQVB3bmzkZWO2fCCh3toUDIhgONlfaD/wi8=
Subject key identifier: DF:71:08:75:7A:57:51:9C:5F:B6:7F:E8:B3:B0:E9:AB:7F:62:E7:F9
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer: /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial: 0DCEAE83428242718DACD2B5760622AF71AF5BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number: 04B5
Signing time: Sat 28 Mar 2026 02:52:57 +0000
Manifest this update: Sat 28 Mar 2026 02:47:57 +0000
Manifest next update: Sun 29 Mar 2026 04:03:57 +0000
Files and hashes: 1: AS215147.asa (hash: GjsvLtdFoDUTAXomZoavpdPPd8CJuRsD46c0/yYhSME=)
2: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: 8Q5/LWFZSLsp8AW1LBczkZ+H+Kq78dLInRmAnkFIrBU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ce:ae:83:42:82:42:71:8d:ac:d2:b5:76:06:22:af:71:af:5b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Validity
Not Before: Mar 28 02:47:57 2026 GMT
Not After : Mar 29 04:03:57 2026 GMT
Subject: CN=DF7108757A57519C5FB67FE8B3B0E9AB7F62E7F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:4e:67:43:ab:ba:f5:b4:f2:d9:2f:d5:a2:
4d:73:fe:63:e3:cb:3a:46:58:ad:cc:24:3d:70:a2:
27:2e:90:27:25:3f:42:63:b0:79:ab:06:94:34:eb:
80:30:53:92:71:03:11:c4:ac:21:9a:4e:8c:66:96:
9a:24:0a:b2:2e:09:1e:32:6a:5b:07:77:39:a8:f4:
1e:df:37:29:a8:db:82:c5:50:05:a2:37:6c:a7:75:
d6:b2:04:a3:44:99:c3:df:66:16:5f:84:bf:48:21:
90:43:e8:b7:ff:12:43:34:9b:f7:4a:03:c9:63:d9:
f4:68:c7:ba:2e:ff:9e:a4:8c:2a:de:68:ee:6c:31:
34:ae:82:46:96:7d:17:1b:f8:22:69:39:f2:0d:71:
bd:1f:cc:f7:f8:1b:6a:2b:32:d6:44:0e:f6:50:b3:
f2:b7:de:92:6a:ff:61:04:2b:7c:d3:66:13:79:e4:
dd:2b:27:84:31:46:22:2b:a1:78:22:a8:ac:63:e8:
54:6d:e2:69:f6:c1:d1:96:67:b2:d1:aa:f5:52:4d:
e0:f6:d1:f7:ac:1b:44:ff:64:d7:d4:45:65:b6:22:
7c:ac:41:79:04:80:8d:a6:08:26:d4:aa:e0:40:02:
03:63:c6:6e:88:1b:56:69:18:14:80:ed:6c:e8:53:
87:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:71:08:75:7A:57:51:9C:5F:B6:7F:E8:B3:B0:E9:AB:7F:62:E7:F9
X509v3 Authority Key Identifier:
keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9d:3f:dc:e3:b4:2b:95:ac:07:be:f0:c7:de:b3:b6:d4:b7:
10:c4:01:80:f0:6f:d7:62:51:89:62:41:48:ab:dc:ec:8a:04:
32:21:ea:3b:36:9e:10:d0:f9:30:73:d2:dd:e0:aa:78:c7:3e:
cf:db:5b:16:48:9c:5e:f9:b2:2a:da:6a:08:13:70:90:73:6c:
9f:5e:93:f5:ef:79:e3:4e:b5:01:04:84:92:a6:c1:80:fc:79:
b4:85:8e:04:77:82:11:4c:26:7e:63:46:96:f9:bf:d6:3f:39:
6a:c4:c2:58:28:f5:f6:13:d1:e6:65:9e:a7:7c:b4:fa:db:c1:
30:dc:1e:42:85:a9:6d:d4:61:cb:55:0b:b4:c4:08:44:be:1d:
3e:27:e6:93:6c:b9:cf:0b:68:0b:34:05:bd:35:f9:c5:80:72:
87:44:b3:e2:fd:d6:42:53:01:6c:27:ea:cf:ed:e7:17:e0:36:
91:45:53:99:81:c2:95:b6:41:8b:41:ae:0e:32:1e:1a:c4:69:
3b:46:47:55:ae:8e:14:b8:ce:d7:f5:07:10:77:5d:05:08:00:
92:55:2a:75:46:6b:81:92:2a:c7:c7:c3:e5:1e:5e:c7:b1:b6:
b9:aa:78:18:ec:50:72:60:19:d7:c9:c4:8b:8a:db:98:a2:22:
46:7a:56:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:10 2026 by rpki-client