Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
File: 64742A2EF43282A0509E6A31574C96C8006ECCD5.mft (raw, json)
Hash identifier: yc0Eq8AtW/MCJmIlDrZZtCY3ry+6hvXGWEajQELRTqY=
Subject key identifier: C4:68:12:54:5C:0B:52:8F:D1:79:4D:2C:B7:FB:84:1A:FE:9A:6E:C0
Authority key identifier: 64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5
Certificate issuer: /CN=64742a2ef43282a0509e6a31574c96c8006eccd5
Certificate serial: 1468E96BACA752F8651AABD879310E74A065D891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
Manifest number: 013C
Signing time: Wed 25 Mar 2026 23:34:30 +0000
Manifest this update: Wed 25 Mar 2026 23:29:30 +0000
Manifest next update: Fri 27 Mar 2026 00:32:30 +0000
Files and hashes: 1: 64742A2EF43282A0509E6A31574C96C8006ECCD5.crl (hash: JhhRDjQTEKGGTd18DhbC+RaFmvEGA3x8Wu1mfKXsu44=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:68:e9:6b:ac:a7:52:f8:65:1a:ab:d8:79:31:0e:74:a0:65:d8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64742a2ef43282a0509e6a31574c96c8006eccd5
Validity
Not Before: Mar 25 23:29:30 2026 GMT
Not After : Mar 27 00:32:30 2026 GMT
Subject: CN=C46812545C0B528FD1794D2CB7FB841AFE9A6EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:58:96:04:19:fe:b9:80:eb:84:fa:7e:a1:
82:9f:25:93:c8:2e:88:2b:ac:81:9e:24:4e:50:75:
dd:63:b1:fb:6a:f4:62:41:17:8f:9d:ed:36:71:43:
95:97:fb:4f:94:fe:82:b0:af:ce:df:a3:71:64:a9:
00:c9:ab:61:df:ea:b2:0b:ef:5f:a1:29:15:d1:e7:
5b:3f:34:e5:16:bd:1e:a1:82:6c:da:c6:fc:45:63:
9a:97:c0:c8:17:97:12:12:de:45:99:e1:77:43:a2:
a5:ed:96:3b:13:0b:85:fa:0a:5e:e6:44:d8:d5:c1:
8d:f0:09:b9:90:b1:df:9a:b1:08:64:c6:96:7b:6c:
e2:2d:85:03:96:e7:a7:9d:19:82:f4:10:6b:15:63:
16:5a:2b:e4:27:5a:ea:73:3e:2e:c7:1a:48:6a:0a:
a6:e9:32:15:34:8d:4d:05:7c:01:d4:1d:f0:67:f9:
4e:33:38:cc:2c:b8:ae:a4:b5:ae:4f:2b:8f:11:d5:
2f:60:3f:38:a1:30:01:50:c5:8c:af:75:da:66:f3:
b3:39:8e:11:a7:ec:0e:2c:21:79:97:d2:d7:f5:d6:
3f:48:7c:b5:47:3d:46:5e:9a:54:f4:22:14:f0:08:
5f:1c:08:de:2e:a8:80:92:03:b9:26:38:2d:80:b1:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:68:12:54:5C:0B:52:8F:D1:79:4D:2C:B7:FB:84:1A:FE:9A:6E:C0
X509v3 Authority Key Identifier:
keyid:64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b5:2d:88:91:0c:f3:7f:c9:0b:78:8f:d7:3c:35:7c:d7:2a:
c1:90:90:94:08:29:86:7c:4e:2b:db:ec:bd:10:f8:86:1d:27:
b6:e2:44:5f:52:22:2b:15:60:73:13:41:9b:27:1c:c4:4d:9f:
80:e1:a9:ca:a1:9a:3c:83:ad:d1:e3:25:00:7d:e2:25:52:c0:
ee:5b:ba:31:d3:a7:16:6c:6a:8d:e0:d1:a4:a3:64:a0:fc:f7:
54:72:85:2d:ec:cd:79:6f:e6:ac:46:ac:e9:a0:d9:e4:48:00:
43:98:f1:70:13:95:fb:cd:50:b0:98:90:f3:57:9f:cd:ed:ca:
db:5f:ed:ba:e3:c1:5e:88:8b:4a:97:2a:37:9b:e2:a3:f6:aa:
6b:37:76:2f:38:ba:7d:16:91:ba:8c:4f:0a:96:51:0b:21:d3:
d1:03:21:0e:5d:52:06:d3:80:c0:b3:75:ce:13:89:61:58:b9:
4f:a0:46:f0:23:cb:4e:bb:7d:d3:8d:ef:a0:b7:42:5f:a3:76:
65:17:f7:eb:ad:ab:c9:c4:b6:5e:a1:39:18:0c:85:be:48:0e:
e6:8d:53:8a:b2:31:b5:fe:93:7a:61:b0:da:e1:72:09:7e:ae:
5d:ed:81:30:0f:8c:5e:d5:c0:53:8b:39:43:76:1b:07:3d:76:
a9:49:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:12:57 2026 by rpki-client