Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier: FQTlTz6wYV/HFilbYo3/QC4yrw3EomcR6SOk2IOVClk=
Subject key identifier: B5:2D:9D:77:00:F2:8A:A1:B9:6E:54:20:EC:1C:DB:24:A8:B6:DD:44
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer: /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial: 0E1D9546011E32166313877C26F48AC90339E41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number: 0558
Signing time: Wed 25 Mar 2026 18:18:14 +0000
Manifest this update: Wed 25 Mar 2026 18:13:14 +0000
Manifest next update: Thu 26 Mar 2026 20:13:14 +0000
Files and hashes: 1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: j9RSSIPfnhg2tj96YaqOxUBzwP5FZLUlwwWmxCghSLM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1d:95:46:01:1e:32:16:63:13:87:7c:26:f4:8a:c9:03:39:e4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Validity
Not Before: Mar 25 18:13:14 2026 GMT
Not After : Mar 26 20:13:14 2026 GMT
Subject: CN=B52D9D7700F28AA1B96E5420EC1CDB24A8B6DD44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:b6:40:9d:93:fe:29:e0:4e:74:fb:ab:71:
81:ac:6f:d3:a3:49:6f:c6:21:58:63:11:84:c9:92:
ac:e1:5a:ab:2c:5c:6d:0d:e0:cb:03:86:67:72:e6:
26:c4:e3:5a:06:de:47:db:da:62:a2:a6:2a:d6:2a:
3c:a2:f9:e9:83:b2:b1:40:54:5c:c1:b9:88:86:0b:
b7:09:af:5c:1d:87:ff:36:53:7d:c7:13:07:26:a2:
01:33:e4:25:cc:4f:f6:3d:f4:bd:ef:61:62:e2:4f:
e2:d0:1d:d4:80:e7:2d:b3:aa:ed:6e:03:d4:6b:34:
7c:fb:f5:f1:cd:26:eb:80:86:b1:2f:40:cc:70:6b:
c1:63:9b:5d:d5:16:d8:92:1d:b6:be:e8:34:a5:59:
ce:89:66:13:5b:7c:3b:46:89:42:e9:d6:10:6d:c4:
ef:d0:95:9f:11:e4:44:f6:61:25:d5:3b:42:31:2d:
26:a7:2d:25:e6:91:60:e5:a5:e6:3c:a1:ff:63:77:
15:ba:eb:36:e6:48:5d:92:83:ed:73:c7:88:06:b3:
52:e6:a2:46:cd:6b:04:86:e0:f3:2c:9b:da:5f:34:
5f:6d:8b:16:85:fb:32:c7:83:4b:af:f1:1f:e0:ff:
50:69:1e:14:09:b0:40:d0:70:cf:b5:9e:5b:83:32:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2D:9D:77:00:F2:8A:A1:B9:6E:54:20:EC:1C:DB:24:A8:B6:DD:44
X509v3 Authority Key Identifier:
keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:20:54:ec:09:01:a4:1c:75:9e:10:7a:97:b7:cf:d4:bb:3f:
a7:69:78:5b:be:28:d0:c9:b9:a3:c8:a8:7e:68:cd:af:d3:8d:
1d:e2:40:29:b0:c8:f7:fb:d0:ad:6b:c1:24:66:52:72:cc:99:
41:21:64:23:2d:2f:10:36:50:32:2e:b8:e8:12:cb:91:c0:30:
4a:ed:3d:01:41:ea:bb:ea:23:14:03:21:34:30:f7:93:db:5b:
ba:6d:37:cd:b9:ea:cb:1e:95:ac:92:bd:e5:1a:bb:9d:33:63:
5a:ab:e9:51:e5:c1:87:4d:4b:3f:23:cf:92:e3:36:2a:08:09:
9d:9b:8f:1e:c4:34:eb:1e:78:3d:a6:44:e3:d4:64:e5:e7:a4:
ea:de:9f:f4:42:5f:85:f3:a8:0d:89:55:74:41:86:d5:b5:cd:
17:b8:94:8c:0a:94:9f:ce:b9:ac:98:4f:98:47:e5:bd:85:c2:
e5:63:82:89:a1:7e:90:73:ef:95:e5:f9:3b:93:a3:6e:91:01:
c1:f3:8b:dc:79:74:4b:e2:b1:26:89:ce:f8:5c:ad:4a:43:2c:
27:10:20:fd:3a:b3:7b:05:63:df:37:90:71:99:17:6c:87:eb:
77:96:40:13:0f:d0:2c:cb:7c:43:5d:43:50:4d:3f:2e:f4:df:
9c:a0:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:47 2026 by rpki-client