Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
File: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft (raw, json)
Hash identifier: AVBwrC0SfE9WKwbpWMT6ycRFyLnEFPbDZD/qMMlK9Fk=
Subject key identifier: 16:78:E1:FF:DF:CE:4F:D9:8E:63:9D:46:94:3E:1B:70:DC:8B:59:0E
Authority key identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
Certificate issuer: /CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Certificate serial: 4B26AAA4A7CC178DBEEC81CE0B47EB865B68F2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
Manifest number: 03A6
Signing time: Thu 26 Mar 2026 11:23:21 +0000
Manifest this update: Thu 26 Mar 2026 11:18:21 +0000
Manifest next update: Fri 27 Mar 2026 11:55:21 +0000
Files and hashes: 1: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl (hash: 5E8XGg6tazoK2EpFg7aD70LTBsnl8ZdfCz6NP0n3tc4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:26:aa:a4:a7:cc:17:8d:be:ec:81:ce:0b:47:eb:86:5b:68:f2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Validity
Not Before: Mar 26 11:18:21 2026 GMT
Not After : Mar 27 11:55:21 2026 GMT
Subject: CN=1678E1FFDFCE4FD98E639D46943E1B70DC8B590E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:f2:ec:60:98:d0:6a:97:6e:45:e6:84:f3:
b6:e4:8e:80:27:ab:51:75:50:c0:15:71:ed:5c:eb:
5f:7b:3f:59:be:69:c7:be:78:5f:df:82:7a:a9:4f:
db:f5:b7:38:cc:e0:af:c4:d4:ad:d5:2d:62:b6:e5:
c8:dc:9e:94:e5:a6:6e:ca:8f:46:f4:dd:0f:68:fa:
ab:2a:44:b4:f7:bd:15:f3:0f:96:63:01:51:94:e2:
e8:b7:bb:08:c9:8d:e3:90:38:e2:1b:90:68:ad:2a:
3e:a3:ee:93:90:3f:07:46:9d:56:1b:58:f9:90:cd:
cf:77:ee:d0:ff:ea:14:88:9a:98:b1:62:76:6d:45:
a6:4d:3b:a0:1d:46:3d:d1:ed:66:66:0d:11:b1:a6:
39:2d:c6:24:6f:f8:34:b6:a2:5c:6d:1b:dc:dc:90:
c2:9f:1b:e5:22:cd:f7:6b:db:a3:39:25:08:64:e0:
e8:cc:6f:e5:c1:31:b8:ca:60:8b:67:67:b8:08:f6:
1e:b0:3a:67:3c:6f:d6:5f:5f:3b:8c:30:fa:ad:5f:
63:b2:07:02:84:b5:6d:b2:4f:53:0a:e5:8e:99:24:
a2:8e:d4:b0:4f:ac:13:c3:45:86:31:c1:ea:d4:f1:
f8:62:ee:3a:1b:25:c2:e6:b2:cf:9e:85:81:c3:17:
fd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:78:E1:FF:DF:CE:4F:D9:8E:63:9D:46:94:3E:1B:70:DC:8B:59:0E
X509v3 Authority Key Identifier:
keyid:63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5b:af:c9:b7:8f:56:ac:89:d4:0b:24:37:c5:54:64:a2:5e:
f7:cb:5e:f8:a8:14:83:c2:9c:56:c7:87:f3:81:ce:7e:5a:5c:
79:de:ee:ea:d3:75:69:d6:d5:c7:6f:72:94:9e:3c:db:90:3d:
23:86:d5:b8:c1:8d:aa:07:bb:2f:ab:e7:67:1b:c0:cd:90:82:
db:2f:e3:94:3a:05:0b:ea:2d:9e:ff:3e:c7:b4:a4:c5:08:6c:
64:94:bb:10:a6:57:67:86:2a:3f:99:3e:7f:b2:d0:5b:d6:78:
00:d9:8e:ac:9b:10:6e:34:a7:16:34:23:16:da:9b:0b:f0:48:
c5:94:df:63:b5:1e:71:20:31:63:21:51:97:92:a5:52:d2:99:
a9:89:46:ab:22:bc:ba:af:e2:68:53:0c:7c:31:d4:26:ce:a2:
53:cc:3d:81:29:28:6d:72:48:50:4e:74:b0:c9:24:5d:dc:db:
dd:0c:db:b9:8b:ea:e8:46:1c:d1:64:3c:8f:5c:d2:b4:19:b6:
b6:cb:28:58:90:f9:e5:53:58:17:7e:79:65:41:a6:99:98:ab:
01:78:27:69:bc:b3:10:5a:98:02:8b:82:70:e2:00:69:90:45:
97:33:75:3c:36:e2:5e:ca:79:c3:ba:04:e4:58:ea:9a:ad:75:
8b:24:68:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:29 2026 by rpki-client