Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier: grzZxqU2vlXOF8uAqausRy8mMK8A0n/5koHMRNUTn54=
Subject key identifier: FA:58:30:5C:12:B3:75:64:90:A2:0C:25:FC:D3:5B:54:1B:03:B9:D4
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial: 1A2D7ED25554022F05202D380765EBB0B90A4250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number: 03AC
Signing time: Wed 25 Mar 2026 18:51:10 +0000
Manifest this update: Wed 25 Mar 2026 18:46:10 +0000
Manifest next update: Thu 26 Mar 2026 22:14:10 +0000
Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: 47RejAl1EHSY9+B4NHxGzuPMpDcqJOQ456zZnzRq8iw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2d:7e:d2:55:54:02:2f:05:20:2d:38:07:65:eb:b0:b9:0a:42:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
Validity
Not Before: Mar 25 18:46:10 2026 GMT
Not After : Mar 26 22:14:10 2026 GMT
Subject: CN=FA58305C12B3756490A20C25FCD35B541B03B9D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:a3:86:86:0e:86:c6:4e:8d:4b:38:5b:dd:
bd:82:43:34:9d:40:7c:19:b9:5d:fc:29:15:78:14:
53:00:68:57:3b:ad:d9:28:ba:7f:21:17:44:99:69:
c7:c4:8c:62:8b:f2:c4:88:c0:0d:61:6c:e6:44:e0:
d5:55:18:14:9c:2e:32:ec:cc:a6:a8:9a:e2:b3:86:
23:3f:b8:ac:fe:d2:11:6d:67:1c:0f:11:b0:ff:08:
58:bf:3b:28:2d:b6:e3:b3:90:ee:5f:71:5f:f3:0d:
0d:67:29:81:7d:52:8e:16:f9:6d:6f:3f:2e:9f:66:
57:29:eb:5f:26:fa:2c:1f:5e:70:13:61:7c:f4:6c:
cf:af:0c:73:00:79:db:c5:8c:7b:a2:19:e3:0c:ae:
79:3a:c8:88:b5:84:23:f7:98:13:85:bf:56:2a:72:
73:b2:45:a5:5b:4f:48:07:9a:11:81:c3:0f:ca:02:
16:41:c7:57:86:48:42:fe:ce:fc:95:13:0a:d7:88:
0f:c4:6f:03:cb:34:d4:d4:ce:b0:91:c8:59:d2:41:
2e:89:af:78:d5:90:50:6d:3d:3a:52:16:26:e5:75:
93:17:61:78:40:e7:04:7b:40:99:fe:3d:e9:de:a2:
61:bc:66:9c:1c:20:bc:c5:49:bf:93:fc:75:63:91:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:58:30:5C:12:B3:75:64:90:A2:0C:25:FC:D3:5B:54:1B:03:B9:D4
X509v3 Authority Key Identifier:
keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e1:63:9c:eb:0a:39:fc:91:ba:c3:6d:a7:63:f6:9b:9b:e3:
94:c7:17:7f:22:38:14:70:62:c2:c4:45:20:61:d5:94:87:e2:
5a:c5:bc:31:09:8e:46:1d:4d:b8:26:df:4b:2e:11:d5:f3:1c:
98:b8:9c:00:5f:72:c7:a9:03:52:f6:9e:ba:c9:54:0d:e3:22:
e2:c0:c2:65:7f:e6:21:ac:a9:17:14:22:55:7a:2e:c6:61:17:
cd:c7:78:b6:4c:c0:ae:5e:87:a6:ce:96:43:7b:d6:f4:fb:32:
1b:69:3f:ae:ce:64:11:9f:cb:9c:71:e3:ec:fb:82:75:ad:6b:
01:c4:89:76:0a:74:e8:67:80:3e:b6:8e:c0:cf:df:84:d7:59:
ef:26:6c:c5:49:e8:67:72:ea:05:c9:ba:47:65:88:e0:19:24:
6f:c0:e9:57:2d:2f:fc:44:53:53:3e:ed:f6:3a:f7:63:ea:dd:
2d:07:7f:01:51:a5:e9:3e:43:df:c1:00:bf:35:07:61:59:ce:
11:be:93:21:83:08:fe:34:0d:b5:9a:d8:9d:b5:ba:17:22:cd:
df:d7:b9:c7:d2:17:f3:32:0f:7b:7e:81:2f:37:cb:b5:05:15:
c6:4f:01:f4:2a:30:22:08:3d:bd:6a:64:76:7f:35:64:76:aa:
e0:1e:c7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:58 2026 by rpki-client