Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: cwQzfAv88g2scFP6W7t0w97HobYyMLn90MYMxsy//Hs=
Subject key identifier: DF:97:1D:77:D0:C0:6F:5D:59:7E:EE:A4:66:8C:41:13:69:28:AF:2A
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 10DB1D6BC34C310CF3A46A728B56E5A47D40C2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 0588
Signing time: Wed 25 Mar 2026 15:02:19 +0000
Manifest this update: Wed 25 Mar 2026 14:57:19 +0000
Manifest next update: Thu 26 Mar 2026 17:48:19 +0000
Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: nFQi70UxNh7YmvhE7KlX89u38hyuXoYd1AAHnopfr4Y=)
2: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:db:1d:6b:c3:4c:31:0c:f3:a4:6a:72:8b:56:e5:a4:7d:40:c2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: Mar 25 14:57:19 2026 GMT
Not After : Mar 26 17:48:19 2026 GMT
Subject: CN=DF971D77D0C06F5D597EEEA4668C41136928AF2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:4d:7a:8e:ac:22:1e:7c:ea:c5:a9:9b:7e:
46:f0:a6:b4:f1:e0:af:1d:50:06:46:31:df:cb:e3:
88:77:a5:81:56:9f:65:8e:45:7f:20:9b:72:fb:cb:
8f:3a:31:b6:f9:82:21:ce:72:f6:f0:51:73:72:6e:
d4:94:7e:05:06:48:82:d5:8c:54:3a:52:70:7f:0b:
67:3d:7c:03:37:c0:f1:08:e5:ed:4d:f6:bf:5d:b3:
f9:b1:8e:62:94:15:96:d7:19:a6:58:25:36:38:41:
3f:23:f5:47:a9:68:ef:4a:c0:c7:85:f2:42:b7:f0:
85:85:c6:fe:3c:3b:ff:0b:06:f9:d0:69:ff:6b:a9:
b0:b0:5a:32:9c:0a:87:02:d5:94:24:8c:c1:e8:53:
59:f2:60:9b:1d:f6:43:54:e9:b0:d1:7b:2a:10:9f:
22:19:47:58:bc:ea:d7:c5:28:2b:b1:52:55:4f:36:
50:2d:20:6c:42:a8:41:02:d0:93:c4:40:7b:29:52:
c3:3e:3a:07:0a:9d:df:0f:3e:03:49:7c:9a:fa:04:
49:f4:57:40:eb:94:63:59:42:ba:20:6c:8e:9a:49:
26:34:d5:cd:ff:66:a8:63:c9:3d:df:f9:13:28:a5:
c2:db:ef:48:d1:53:6c:bf:9d:6e:95:2e:8c:85:40:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:97:1D:77:D0:C0:6F:5D:59:7E:EE:A4:66:8C:41:13:69:28:AF:2A
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1d:3e:b6:88:c6:79:97:b5:63:06:ca:a0:33:27:5e:dc:ba:
1c:28:16:ef:31:c7:ec:f2:7c:55:c6:72:70:d8:44:39:6a:59:
cd:4b:20:70:a3:c0:78:bc:bf:e2:04:33:d2:98:0d:5b:1c:ba:
05:31:86:db:9f:8c:9c:27:45:d0:13:07:ac:32:3b:5a:bd:f7:
cd:53:02:a7:b0:ef:cc:e4:96:7c:13:91:82:bd:37:92:a0:ee:
d1:c2:45:dd:42:32:a6:6f:2f:a9:fb:34:01:91:f4:c8:d9:a6:
ff:1f:8a:5e:59:f3:f4:06:bd:fc:5e:ef:f4:37:bc:9c:54:96:
24:f3:16:11:6c:b1:36:5a:9b:2a:8a:84:e0:59:2b:e1:b7:7e:
47:dd:6d:e8:62:42:80:70:66:8c:eb:61:45:40:62:55:c5:3f:
3e:73:8f:b8:f8:02:d6:af:8b:4d:75:61:09:06:ba:f7:17:5d:
10:c4:b0:30:df:7b:8f:4b:60:7d:83:7d:9e:6e:f1:dc:b9:a9:
16:8f:89:ba:a9:b8:63:7a:4d:2f:a2:31:3c:ae:9c:ae:41:1e:
14:e9:e1:ae:e3:b8:79:a9:97:c4:41:f4:26:ad:9d:dd:05:2f:
7f:75:68:84:47:59:31:1c:b0:e2:6e:9d:39:46:20:19:27:7f:
d6:a7:9d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:10 2026 by rpki-client