Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
File: EC342ADD81633658330112D2BF8B1DE3EE19F684.mft (raw, json)
Hash identifier: 89mbaaQqUoGPGlLn8iaJytuvuoGd+n8nK6SsCmfbcs8=
Subject key identifier: A3:95:AA:FF:C7:A6:43:B2:62:62:7E:A3:C2:27:12:C8:20:D5:9E:F9
Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
Certificate issuer: /CN=ec342add81633658330112d2bf8b1de3ee19f684
Certificate serial: 2CA222DCF2F15B5B2F2659CA2527B52996FBBAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
Manifest number: 60
Signing time: Wed 25 Mar 2026 01:33:57 +0000
Manifest this update: Wed 25 Mar 2026 01:28:57 +0000
Manifest next update: Thu 26 Mar 2026 05:27:57 +0000
Files and hashes: 1: AS214420.asa (hash: rBhnv0fmIQ5QImIxVDZoRShVH2YY2qokZq71xdb7POM=)
2: EC342ADD81633658330112D2BF8B1DE3EE19F684.crl (hash: uCpfoX70660w2YMUDHTGosS5Kh5tmI0gDtvjSVRkv2k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 05:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a2:22:dc:f2:f1:5b:5b:2f:26:59:ca:25:27:b5:29:96:fb:ba:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684
Validity
Not Before: Mar 25 01:28:57 2026 GMT
Not After : Mar 26 05:27:57 2026 GMT
Subject: CN=A395AAFFC7A643B262627EA3C22712C820D59EF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:b4:64:70:56:3c:bf:31:91:68:87:c3:23:
7a:79:5c:e4:fb:5a:2f:1c:7f:59:c6:1c:23:20:eb:
dc:6f:3f:84:eb:05:6f:07:32:c2:14:9c:13:09:f2:
f1:f5:42:08:53:29:7d:1c:aa:9d:98:fa:46:5c:f5:
8b:ba:79:e5:76:5d:87:a9:2f:76:3a:7b:13:81:b6:
99:9c:8b:ac:c9:b8:0e:9f:65:cd:b5:d0:67:07:6a:
46:3d:e0:09:d6:29:1b:7f:47:7a:7c:84:32:df:4c:
c8:a9:23:46:9a:3f:b4:e6:8b:35:7b:92:42:b0:c0:
fc:5f:91:c3:da:2f:d8:97:31:50:9e:27:47:c2:9d:
21:4e:c8:7d:3e:25:39:81:3a:b9:f8:9c:c5:d3:f6:
b3:84:05:da:e8:8d:da:8d:aa:95:4c:af:44:09:4f:
ed:22:fb:49:20:0b:62:37:bb:d1:ff:76:e7:6a:21:
b3:7f:30:69:25:7c:ad:be:b5:ef:b2:96:52:7c:a4:
9c:3a:a8:d8:1f:bd:de:c6:9d:ce:39:c8:30:d2:9a:
e9:b6:11:8f:4f:69:f2:9f:bd:cd:d4:45:be:09:ef:
cb:29:55:cb:08:0a:e1:f8:74:15:74:f8:9f:e3:4b:
ba:01:54:8f:26:c6:e5:37:00:5d:15:5d:85:d8:d8:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:95:AA:FF:C7:A6:43:B2:62:62:7E:A3:C2:27:12:C8:20:D5:9E:F9
X509v3 Authority Key Identifier:
keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5c:eb:89:df:68:a4:81:b3:9f:b3:2a:9e:31:52:e1:a1:d0:
08:ef:f2:78:a9:29:66:9c:f2:2a:71:a1:c5:e8:6b:9f:98:e9:
68:85:32:99:2e:47:39:b2:73:0d:ca:e6:ac:21:26:8b:07:f7:
62:8e:d4:2d:91:c7:01:0b:e2:89:8f:1b:54:b7:48:98:49:f2:
1e:2e:33:37:cd:f4:31:68:ec:52:0e:86:72:56:34:45:9d:56:
1f:a0:bf:6a:3b:51:14:fa:6a:42:08:f2:b1:a6:42:d7:61:3f:
7c:cc:b3:9a:27:1d:08:6c:3f:de:ae:2a:ff:ce:be:22:b6:b2:
bd:23:a4:e6:e6:d1:80:6d:fb:2c:85:46:40:b1:55:d3:5f:f3:
15:e7:9c:3e:8f:c9:77:62:a8:5e:57:24:3d:2c:58:80:a3:82:
8d:74:b6:26:37:eb:1c:59:a4:cf:ad:37:b9:8a:b0:8c:b7:da:
5a:15:34:c9:fa:51:a7:5e:3f:aa:f2:1c:0d:35:c1:5b:b6:18:
f4:36:62:a3:36:1a:a3:51:1b:90:37:80:1e:c6:fb:58:44:8e:
fe:06:b2:fa:e5:ab:7c:c4:54:3d:ea:00:c7:3c:44:52:ea:94:
66:c7:27:b0:b7:d4:e2:f2:85:2b:08:0b:16:6a:e4:37:ca:52:
16:90:75:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:32 2026 by rpki-client