Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier: I0ZOpNoLnWMu5RnwSQiW5tJ1mHG0wAMTRnx6FM9Psn0=
Subject key identifier: E9:9E:CC:8E:A1:C8:93:C1:83:DE:D2:D3:AD:B6:47:80:9F:39:67:D8
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer: /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial: 12839247AA9F2609F869B55B5354C4FC663301F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number: 031B
Signing time: Wed 25 Mar 2026 03:08:30 +0000
Manifest this update: Wed 25 Mar 2026 03:03:30 +0000
Manifest next update: Fri 27 Mar 2026 03:19:30 +0000
Files and hashes: 1: AS215368.asa (hash: WPjfLrYhLr3BbA/Kt1sBzS/Meq/kNQBVQgd3rtboPnI=)
2: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: vOPIR6X5NHCLJ6gkPOhJzRYHFDWHUpxS43jYJKqJyk4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:83:92:47:aa:9f:26:09:f8:69:b5:5b:53:54:c4:fc:66:33:01:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Validity
Not Before: Mar 25 03:03:30 2026 GMT
Not After : Mar 27 03:19:30 2026 GMT
Subject: CN=E99ECC8EA1C893C183DED2D3ADB647809F3967D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:56:c7:b0:fa:4c:dd:d6:49:37:2c:50:20:e0:
60:0c:6b:c2:06:33:21:14:75:42:c1:ff:6c:bd:70:
c4:df:da:5f:ea:69:44:e8:86:57:b2:c7:c3:78:37:
95:13:9f:b1:32:c1:53:74:2d:11:9a:9a:c5:1b:4b:
18:3b:e4:8c:df:14:24:d6:9e:89:8c:71:96:e8:32:
72:9e:ea:15:bf:f7:3a:27:b7:69:8f:65:6c:12:1e:
9d:da:50:22:54:cf:bb:17:01:bf:6b:f6:b3:b8:b3:
d9:69:50:58:0f:a6:14:09:b2:73:6d:5c:b3:25:21:
81:ee:26:88:b3:8e:52:4f:cf:cf:71:74:cf:4e:d5:
73:6b:29:4a:b3:3c:57:63:e3:3e:91:d2:66:b8:3f:
42:13:f1:99:31:2f:cf:f5:f4:19:8b:50:21:1d:25:
6f:17:9f:32:8e:0d:79:b2:6a:cf:8a:27:3f:2f:d8:
40:81:c7:ed:01:f0:df:f9:08:06:8d:c6:a6:35:24:
3e:61:ef:e4:c2:df:af:de:eb:cd:44:18:3a:6f:87:
4c:62:27:10:06:10:0c:7c:26:29:6f:ae:6a:06:0a:
61:99:b4:14:df:79:74:bc:65:db:c8:8e:b6:5a:27:
0a:3d:ef:76:11:f8:47:58:02:c8:35:a1:1f:78:b1:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9E:CC:8E:A1:C8:93:C1:83:DE:D2:D3:AD:B6:47:80:9F:39:67:D8
X509v3 Authority Key Identifier:
keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:61:2d:5a:5a:ae:f8:25:6a:83:d1:b4:c4:a9:d8:d2:af:71:
a7:11:98:c2:1f:03:57:68:36:9f:bc:2e:e4:c7:d5:41:f0:af:
75:a0:78:f3:65:f7:f9:60:d8:c1:ae:f6:2a:5e:0d:64:c5:12:
ce:b4:15:56:41:43:94:57:aa:af:f8:6f:14:75:f2:a2:0d:75:
84:55:f0:6e:7f:ae:79:64:d6:ce:b2:59:04:48:fc:6b:04:8e:
9e:f3:f9:b0:48:db:d7:90:ba:60:81:2a:2b:40:c4:a1:10:84:
c8:32:d4:b3:e7:71:da:84:7f:14:6e:f2:e7:1a:76:35:05:14:
af:88:9e:4c:ae:c0:94:10:50:a4:2f:eb:bb:fa:b8:2a:63:93:
27:2a:1a:d9:39:ca:36:50:43:c2:d6:c6:24:f1:f2:09:5d:0b:
0b:04:db:94:af:7f:f7:50:b7:62:3c:ae:0b:18:b2:04:fe:20:
c1:7f:fd:2f:12:67:b8:9b:2e:8a:57:1e:13:55:72:ed:e1:0f:
2e:91:03:b6:2d:df:77:ba:c4:f6:57:f9:15:26:27:bc:3a:52:
fd:dc:a0:ea:a3:ef:ff:ca:2b:46:41:25:6f:49:4a:09:d3:c2:
0a:ca:19:a5:e3:40:d8:9e:42:f1:bb:3c:a8:f7:67:8a:31:17:
21:24:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:43 2026 by rpki-client