Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: DnzVMENxy7VknMJeiS4e1UQ20n0sX2L4ZrCUHHzMXXA=
Subject key identifier: 21:57:10:EC:89:5D:F8:F3:CD:24:56:12:41:33:A8:C1:4D:84:B1:09
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 7CD9661A6652ED79DA11B8FF33044159E8BE72A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 05C9
Signing time: Wed 13 May 2026 03:33:38 +0000
Manifest this update: Wed 13 May 2026 03:28:38 +0000
Manifest next update: Thu 14 May 2026 05:53:38 +0000
Files and hashes: 1: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=)
2: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: 4ZrAyqj+Fv7fI6P4f3fbrk4UJArqw/FGttG+82n0hGg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d9:66:1a:66:52:ed:79:da:11:b8:ff:33:04:41:59:e8:be:72:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: May 13 03:28:38 2026 GMT
Not After : May 14 05:53:38 2026 GMT
Subject: CN=215710EC895DF8F3CD2456124133A8C14D84B109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:81:3d:97:48:06:90:3a:6b:eb:11:db:e1:17:
1c:35:b0:83:d3:27:99:02:2b:fb:2f:94:3b:36:9e:
89:eb:4e:b8:a1:d8:61:fa:58:22:4d:f3:3a:1b:b9:
59:82:63:4e:14:35:18:e0:e6:59:4b:17:86:97:15:
e9:26:c1:9b:d4:ec:c1:31:ca:2c:43:ea:cd:18:d8:
e4:83:27:11:39:e4:9a:1c:43:69:1d:21:83:53:52:
ad:8f:66:01:06:ed:3a:84:a6:e5:5d:7f:1a:14:0a:
e3:0b:09:9c:09:3e:60:47:ac:49:40:10:b6:b5:3a:
48:69:78:f0:1b:99:0b:ac:3c:f9:c4:cd:a0:e4:f7:
fe:28:8d:1b:58:cc:8c:0e:ef:e8:a1:31:82:dc:9f:
11:e3:8d:e1:09:bc:b9:a3:81:c3:88:1d:db:70:e9:
31:d5:66:36:a6:6b:0c:15:82:26:74:1f:ff:a3:8d:
52:59:60:d0:1d:c8:05:87:3a:13:cc:1f:69:61:16:
18:2f:cb:69:44:34:af:1f:21:43:a8:f7:56:c3:7a:
0e:c8:ec:53:c3:cc:62:36:bc:62:76:87:4b:29:22:
75:af:13:9d:b9:6c:82:00:22:2e:28:c8:d1:94:de:
09:50:a7:51:ee:9a:6d:ef:cd:7f:4f:07:c0:18:f9:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:57:10:EC:89:5D:F8:F3:CD:24:56:12:41:33:A8:C1:4D:84:B1:09
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:53:21:12:85:c7:ae:25:63:5b:1b:9b:4b:88:3e:b1:89:c0:
8e:50:4d:f6:73:f7:37:7d:0c:a5:94:3f:e2:c1:b0:ab:99:34:
84:05:5f:ee:b6:37:9a:63:0c:54:7f:7d:5d:79:5d:61:02:8d:
76:8d:44:ad:74:f7:38:5e:96:cf:78:2c:8c:1e:a9:ec:9b:94:
19:4a:de:7f:f0:9f:36:17:cf:c1:4e:9f:96:87:dc:0c:69:98:
19:39:01:02:24:7c:85:2b:48:98:94:4c:ec:95:45:85:3a:42:
cc:b3:79:66:d2:5f:35:d6:9c:60:cb:3c:8b:4f:c3:24:0c:3b:
02:90:3a:99:bb:c6:9a:e0:40:ff:34:ec:de:e9:fe:fc:32:1d:
08:af:02:4a:78:b6:fd:98:03:99:0a:25:6a:0e:a2:04:32:db:
a1:b3:a5:c9:66:19:39:5b:eb:b3:3c:9e:1b:e6:03:88:0d:7b:
7d:07:9c:48:29:50:45:75:63:e1:46:03:90:bd:0d:5b:01:27:
2e:73:3d:76:3e:13:52:dd:93:c2:61:68:c6:36:00:35:0c:cb:
d1:cd:e4:38:af:7f:96:81:7b:e0:c1:63:c1:46:83:17:ef:c1:
ca:c5:f0:3f:59:a7:8f:9c:0d:67:f8:0a:9d:22:21:f6:9b:ed:
99:0f:bc:e7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUfNlmGmZS7XnaEbj/MwRBWei+cqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZThiYzk4NzYxNzRkOWE3Mzg1ZmNlOTM0M2UyYmI3ZDk4
ZjUyM2IxMTAeFw0yNjA1MTMwMzI4MzhaFw0yNjA1MTQwNTUzMzhaMDMxMTAvBgNV
BAMTKDIxNTcxMEVDODk1REY4RjNDRDI0NTYxMjQxMzNBOEMxNEQ4NEIxMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgT2XSAaQOmvrEdvhFxw1sIPT
J5kCK/svlDs2nonrTrih2GH6WCJN8zobuVmCY04UNRjg5llLF4aXFekmwZvU7MEx
yixD6s0Y2OSDJxE55JocQ2kdIYNTUq2PZgEG7TqEpuVdfxoUCuMLCZwJPmBHrElA
ELa1OkhpePAbmQusPPnEzaDk9/4ojRtYzIwO7+ihMYLcnxHjjeEJvLmjgcOIHdtw
6THVZjamawwVgiZ0H/+jjVJZYNAdyAWHOhPMH2lhFhgvy2lENK8fIUOo91bDeg7I
7FPDzGI2vGJ2h0spInWvE525bIIAIi4oyNGU3glQp1Humm3vzX9PB8AY+futAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUIVcQ7Ild+PPNJFYSQTOowU2EsQkwHwYDVR0j
BBgwFoAU6LyYdhdNmnOF/Ok0Piu32Y9SOxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj
MTFiLzAvRThCQzk4NzYxNzREOUE3Mzg1RkNFOTM0M0UyQkI3RDk4RjUyM0IxMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZMeVlkaGRObW5PRl9PazBQaXUzMlk5
U094RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTQ3NmQ2Mi05
Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMC9FOEJDOTg3NjE3NEQ5QTczODVG
Q0U5MzQzRTJCQjdEOThGNTIzQjExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFMhEoXHriVjWxubS4g+
sYnAjlBN9nP3N30MpZQ/4sGwq5k0hAVf7rY3mmMMVH99XXldYQKNdo1ErXT3OF6W
z3gsjB6p7JuUGUref/CfNhfPwU6flofcDGmYGTkBAiR8hStImJRM7JVFhTpCzLN5
ZtJfNdacYMs8i0/DJAw7ApA6mbvGmuBA/zTs3un+/DIdCK8CSni2/ZgDmQolag6i
BDLbobOlyWYZOVvrszyeG+YDiA17fQecSClQRXVj4UYDkL0NWwEnLnM9dj4TUt2T
wmFoxjYANQzL0c3kOK9/loF74MFjwUaDF+/BysXwP1mnj5wNZ/gKnSIh9pvtmQ+8
5w==
-----END CERTIFICATE-----
Generated at Wed May 13 11:01:26 2026 by rpki-client