Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
File: EC342ADD81633658330112D2BF8B1DE3EE19F684.mft (raw, json)
Hash identifier: cYakroBWLnq6G7pZx3uyDc+CzPL0DsoEgBZz7WG4cHI=
Subject key identifier: 57:7B:FF:83:EF:55:51:AA:D1:0C:19:79:7F:A1:96:46:5E:EC:AC:1C
Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
Certificate issuer: /CN=ec342add81633658330112d2bf8b1de3ee19f684
Certificate serial: 59D338676A26C0E4F17EF35AC455CACA32C03D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
Manifest number: A0
Signing time: Tue 12 May 2026 19:54:18 +0000
Manifest this update: Tue 12 May 2026 19:49:18 +0000
Manifest next update: Wed 13 May 2026 23:01:18 +0000
Files and hashes: 1: AS214420.asa (hash: rBhnv0fmIQ5QImIxVDZoRShVH2YY2qokZq71xdb7POM=)
2: EC342ADD81633658330112D2BF8B1DE3EE19F684.crl (hash: LDqXkvhnukmfkEQY61iRGFqIYjfglJzJ78AZbRBA1JM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d3:38:67:6a:26:c0:e4:f1:7e:f3:5a:c4:55:ca:ca:32:c0:3d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684
Validity
Not Before: May 12 19:49:18 2026 GMT
Not After : May 13 23:01:18 2026 GMT
Subject: CN=577BFF83EF5551AAD10C19797FA196465EECAC1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:b4:1f:89:ef:28:de:cd:d3:2e:04:b2:df:
b1:50:03:fd:93:77:56:f6:01:71:89:c0:ff:34:85:
b6:38:93:22:5e:f9:0f:8c:4a:c0:4a:f0:aa:82:c8:
dd:82:90:45:ca:fe:2f:af:fc:b7:15:1e:b5:a1:0e:
3c:18:85:df:1f:5b:0b:68:06:6c:a9:31:c0:bc:de:
60:9e:86:39:cd:84:9a:71:6e:10:39:d1:22:d9:af:
55:f5:07:ea:0a:9c:59:4f:c1:9d:61:f7:b9:63:93:
08:2e:74:88:71:7d:04:6c:ca:c3:81:4d:67:cc:86:
08:d7:6b:76:c7:9c:0f:a4:a0:00:94:9d:f2:2f:56:
78:61:01:59:d4:87:5f:ae:c7:b8:54:7a:63:f5:ec:
85:5e:a9:8a:f9:58:b5:fa:fc:ae:27:fc:7e:12:09:
b1:19:d3:5a:2b:db:8e:67:c5:2e:4d:dc:38:4b:89:
49:79:89:24:96:88:2e:50:72:da:f0:92:b5:1f:fe:
4c:06:53:a8:2a:cf:d8:8d:71:5d:34:de:42:8f:6c:
31:ed:ec:c7:aa:4e:ff:95:99:0f:94:87:c2:4d:53:
15:72:e3:af:6a:f6:1d:8a:7a:29:df:8f:5d:69:31:
df:1a:41:84:c5:7c:7d:55:ba:3a:9d:3f:2b:5e:6d:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7B:FF:83:EF:55:51:AA:D1:0C:19:79:7F:A1:96:46:5E:EC:AC:1C
X509v3 Authority Key Identifier:
keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:20:5f:ae:63:d0:e5:7e:1f:3f:03:d4:3b:d3:60:d9:9e:29:
52:4f:80:bb:66:4a:94:80:11:e1:f0:ec:b2:20:f0:11:13:68:
95:2d:4a:0d:dc:e9:25:9a:be:8b:1d:ac:7f:48:3c:e7:47:90:
10:1b:c4:b2:33:38:9d:1c:d1:9f:d6:da:d5:ba:f5:cd:fd:67:
a9:e0:84:00:30:51:98:97:2e:ec:ae:e0:c4:1e:b6:df:69:ee:
4b:de:cc:a0:85:4e:37:bf:1f:4f:d4:22:1e:59:80:d1:41:b4:
3b:df:dc:ae:05:e9:30:1b:21:60:38:ce:06:9c:92:95:4e:fa:
d6:d7:2d:28:c0:d5:53:25:1c:25:82:b3:a2:da:39:c1:ff:f6:
78:4d:5b:f5:ec:a0:e7:2e:47:d8:08:69:ee:6b:3c:9d:8a:5c:
bb:00:b2:44:cd:57:5e:97:9c:fd:4b:30:d6:77:76:a2:6b:0c:
45:a2:2b:de:4b:c5:3f:b9:12:26:42:6a:ef:32:c2:e0:e2:34:
6a:6d:1f:af:ce:5d:aa:44:9d:5e:b9:5c:43:b8:c8:aa:34:a5:
98:9f:92:3b:a5:d2:8e:2b:56:46:bd:cc:d8:6d:9b:2c:ec:2d:
d1:38:a6:65:a3:fc:35:89:da:7c:4f:65:cc:8a:25:ed:d0:0f:
12:1b:1e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:59 2026 by rpki-client