Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft
File: 77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft (raw, json)
Hash identifier: LbO0BgxrEjg2MyPsBiFlr7sneysEAbgPqzISLiPIO9U=
Subject key identifier: 38:BB:1D:26:27:0A:13:35:70:70:A4:B7:6C:95:E3:98:8F:FB:DF:51
Authority key identifier: 77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5
Certificate issuer: /CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5
Certificate serial: 5F9D772F55ACF529F70CCE71900D9CC1BA0031F8
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft
Manifest number: 33
Signing time: Mon 11 May 2026 04:34:35 +0000
Manifest this update: Mon 11 May 2026 04:29:35 +0000
Manifest next update: Tue 12 May 2026 20:24:35 +0000
Files and hashes: 1: 77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl (hash: IvRd3XBtgbTdJu69GWbl2B6zW3SnsS7x5U7F8diLwqw=)
2: 326131343a373538303a666131303a3a2f34342d3434203d3e20323134333434.roa (hash: t+dQbhe0o/A21YGqm9dCw1DWi/aebT8VS3kHcNUIfSg=)
3: 326131343a373538303a666135303a3a2f34342d3434203d3e20323134333434.roa (hash: XN77Gl/F1X8F/1Vc/pLvFz1IwnKTsO6iTufij6RmXVY=)
4: 326131343a373538303a666133303a3a2f34342d3434203d3e20323134333434.roa (hash: BBvLVobm31lHE2YSVEFw7pK4NXtwbn4C2tTQjbanPbk=)
5: 326131343a373538303a666134303a3a2f34342d3434203d3e20323134333434.roa (hash: nJnylMUfQzzXqdIVQmBJRIEFv4ZtSZG/B9HDKJTMVmk=)
6: 326131343a373538303a666132303a3a2f34342d3434203d3e20323134333434.roa (hash: F5inQOiSNImj2gBvrsVqMCS17ZhaQcVsyimtR4sjAVw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9d:77:2f:55:ac:f5:29:f7:0c:ce:71:90:0d:9c:c1:ba:00:31:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5
Validity
Not Before: May 11 04:29:35 2026 GMT
Not After : May 12 20:24:35 2026 GMT
Subject: CN=38BB1D26270A13357070A4B76C95E3988FFBDF51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:fd:21:27:cb:6d:13:29:2d:87:45:5f:30:
fa:b5:a9:95:1d:76:ef:42:e4:f3:54:40:57:76:84:
4a:4d:bf:01:24:2f:2c:90:b1:88:ed:9f:45:8a:a2:
c8:f3:d0:b3:a8:5d:14:50:bc:5a:a8:1e:d9:82:01:
55:a3:c0:3e:af:45:8b:8b:1b:bf:04:fe:d3:44:5a:
10:e8:db:26:96:8c:69:5b:a4:54:aa:c6:85:aa:24:
d2:de:d3:a1:d1:ac:be:e3:9f:91:f3:e7:a8:5d:5a:
16:ab:f8:77:cf:cb:0d:04:f6:f3:bc:69:d2:b6:6e:
8b:7f:6d:1d:50:f9:0e:92:51:6d:87:c7:c6:41:ee:
9e:8b:5e:f0:44:0e:fa:e9:16:fb:f9:d7:ea:22:94:
62:a9:39:4b:cc:21:e0:ed:c8:d7:d7:1d:b9:eb:22:
cf:17:b3:fa:6a:af:62:b4:0d:8e:e9:4e:4e:b4:e2:
50:01:36:82:7d:a0:69:a5:42:2e:bf:7f:b5:55:2a:
91:d3:63:b9:b9:57:4f:35:4f:62:42:8b:fd:3f:22:
d2:2c:31:c8:e0:c2:08:52:90:40:df:ae:e9:be:ef:
a7:be:ba:e1:2b:a9:61:c1:1f:ab:89:bb:92:4a:e6:
38:05:5f:0d:31:d6:cc:57:b8:2a:f0:38:12:11:d8:
aa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:1D:26:27:0A:13:35:70:70:A4:B7:6C:95:E3:98:8F:FB:DF:51
X509v3 Authority Key Identifier:
keyid:77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b3:07:5a:4b:0c:ac:ff:0b:af:90:6d:42:8e:8e:26:67:fe:
3e:2e:b6:9e:ae:bb:b7:54:a4:8f:72:15:6a:bc:46:1a:b8:1c:
03:08:f7:85:1e:e5:30:ab:ac:e3:b0:a6:cb:ab:2b:6f:c4:c4:
3e:98:6a:8b:35:18:6c:8e:57:7e:b6:e7:fa:c3:6e:88:88:86:
a0:16:4f:85:4c:1d:f4:61:7e:a5:55:85:06:88:07:28:3c:79:
e6:8c:4a:1e:d7:5b:1c:ca:0b:bb:aa:9f:ec:74:ff:20:d4:ac:
b7:14:ba:f0:6e:18:2a:5b:5a:b0:9e:72:25:5f:2f:fa:39:e9:
b0:c4:df:2a:f6:b3:2c:49:ad:0d:8f:b0:11:28:fc:f2:8f:a1:
68:c2:96:1a:42:a4:e8:d1:22:ec:1c:d4:c1:e1:dd:fe:74:55:
e7:94:0c:db:e6:10:9a:a2:e3:fb:1c:46:cd:28:db:8c:ac:48:
85:93:75:f9:ce:f1:78:74:5e:3a:26:ff:08:be:82:7e:4b:c7:
23:8d:82:d0:37:c8:5f:d9:5f:ef:54:dc:85:e5:f0:bc:f9:8c:
19:76:f6:f5:83:ec:f1:f7:4e:cf:34:8e:ac:40:37:80:f1:e2:
58:5a:13:26:cd:e0:14:ea:93:63:2c:bd:03:d4:76:f6:63:e6:
77:4b:99:59
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUX513L1Ws9Sn3DM5xkA2cwboAMfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVF
RkMzRURBNTAeFw0yNjA1MTEwNDI5MzVaFw0yNjA1MTIyMDI0MzVaMDMxMTAvBgNV
BAMTKDM4QkIxRDI2MjcwQTEzMzU3MDcwQTRCNzZDOTVFMzk4OEZGQkRGNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb5P0hJ8ttEykth0VfMPq1qZUd
du9C5PNUQFd2hEpNvwEkLyyQsYjtn0WKosjz0LOoXRRQvFqoHtmCAVWjwD6vRYuL
G78E/tNEWhDo2yaWjGlbpFSqxoWqJNLe06HRrL7jn5Hz56hdWhar+HfPyw0E9vO8
adK2bot/bR1Q+Q6SUW2Hx8ZB7p6LXvBEDvrpFvv51+oilGKpOUvMIeDtyNfXHbnr
Is8Xs/pqr2K0DY7pTk604lABNoJ9oGmlQi6/f7VVKpHTY7m5V081T2JCi/0/ItIs
McjgwghSkEDfrum+76e+uuErqWHBH6uJu5JK5jgFXw0x1sxXuCrwOBIR2KpBAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUOLsdJicKEzVwcKS3bJXjmI/731EwHwYDVR0j
BBgwFoAUd+TSPQ/azuKTPZptMDPN9e/D7aUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk
NDQ0LzEvNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVFRkMzRURBNS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83N0U0RDIzRDBGREFDRUUyOTMzRDlBNkQz
MDMzQ0RGNUVGQzNFREE1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2I5NmI2MTEzLTg1ZWEtNGZjMi1hZWQ0LTFmODY1ZDBhZDQ0NC8xLzc3RTREMjNE
MEZEQUNFRTI5MzNEOUE2RDMwMzNDREY1RUZDM0VEQTUubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHswda
Swys/wuvkG1Cjo4mZ/4+Lraerru3VKSPchVqvEYauBwDCPeFHuUwq6zjsKbLqytv
xMQ+mGqLNRhsjld+tuf6w26IiIagFk+FTB30YX6lVYUGiAcoPHnmjEoe11scygu7
qp/sdP8g1Ky3FLrwbhgqW1qwnnIlXy/6OemwxN8q9rMsSa0Nj7ARKPzyj6FowpYa
QqTo0SLsHNTB4d3+dFXnlAzb5hCaouP7HEbNKNuMrEiFk3X5zvF4dF46Jv8IvoJ+
S8cjjYLQN8hf2V/vVNyF5fC8+YwZdvb1g+zx907PNI6sQDeA8eJYWhMmzeAU6pNj
LL0D1Hb2Y+Z3S5lZ
-----END CERTIFICATE-----
Generated at Tue May 12 22:17:10 2026 by rpki-client