Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier: Wj/b0r/pHzOVmhKSlR/46et+x2yS9p6ZB1aMB9w5qTo=
Subject key identifier: 74:DB:0D:27:1F:18:10:E3:FC:E3:9D:65:E6:0F:46:57:78:9B:54:2F
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer: /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial: 502094F6493C6529A2B117B57303B4580BF63F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number: 0361
Signing time: Wed 25 Mar 2026 07:01:23 +0000
Manifest this update: Wed 25 Mar 2026 06:56:23 +0000
Manifest next update: Thu 26 Mar 2026 08:30:23 +0000
Files and hashes: 1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: wv8nS8ZowG7I5BjKTvcNN0FCtXYnwo/3asZ3F+3/400=)
2: AS214723.asa (hash: rkKLIM3Jzl++4c/N1MAbX2VnZd8jPZSTe5gZ4DgYJLI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 08:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:20:94:f6:49:3c:65:29:a2:b1:17:b5:73:03:b4:58:0b:f6:3f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Validity
Not Before: Mar 25 06:56:23 2026 GMT
Not After : Mar 26 08:30:23 2026 GMT
Subject: CN=74DB0D271F1810E3FCE39D65E60F4657789B542F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:af:45:f6:57:6c:9d:97:0f:bd:4c:02:28:
14:07:5b:d2:99:a1:04:a7:b1:d2:47:e2:74:1b:db:
ed:19:5e:02:4c:48:b7:fe:24:b2:85:44:3d:99:e5:
e2:39:9e:7b:79:fd:bd:8c:81:83:f5:ae:39:c0:f6:
c8:a3:d5:7b:85:b9:70:82:87:51:2e:8c:13:ab:35:
24:8b:ba:4e:9b:71:ec:f3:f0:62:50:46:10:cb:69:
05:bc:85:07:b7:ff:7a:c3:68:de:3e:64:f5:ad:98:
a4:23:31:df:fe:2f:b6:58:2c:2f:05:0e:21:c2:e0:
39:32:f5:92:ea:b2:be:62:b6:dc:f8:31:00:1e:33:
21:12:1a:8a:e6:de:33:f5:ef:ad:42:c5:42:f6:48:
b4:df:10:c3:39:24:e7:f0:7f:7f:bf:6f:ce:41:58:
35:be:4b:5d:c6:ed:de:da:51:34:99:39:10:fa:c5:
24:27:9e:c0:84:0d:a3:ae:eb:9e:96:d8:99:5b:20:
f4:c4:3a:bd:23:e7:ec:af:c3:10:cb:d2:9a:2c:8a:
f9:e7:17:9b:41:73:27:23:5a:ae:88:95:7c:83:f6:
33:59:d5:6d:86:19:0e:71:c4:eb:60:01:b1:61:32:
33:80:c9:6b:1f:57:ec:72:bb:37:dd:8c:99:c9:8b:
6e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DB:0D:27:1F:18:10:E3:FC:E3:9D:65:E6:0F:46:57:78:9B:54:2F
X509v3 Authority Key Identifier:
keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d5:bd:cb:94:1d:d3:35:1b:8b:85:4e:3b:a9:86:d2:55:d4:
c8:d0:bf:ba:56:ef:ef:c2:c1:22:88:4a:d0:b5:e3:75:d1:f9:
54:a0:00:7e:5c:0d:b4:3a:c9:52:81:80:95:b9:67:ea:30:2e:
4e:ca:72:8e:96:df:4b:dd:cf:b2:95:30:07:c5:a2:c9:a9:3b:
5a:44:67:02:14:43:93:1f:7d:e8:a6:29:41:f5:19:bb:a2:a6:
c0:e4:a6:4b:4f:84:36:b7:d5:2b:99:34:d0:ab:96:da:5d:9e:
61:12:13:13:6e:bc:76:1f:06:f1:b9:7c:11:83:af:34:24:9a:
13:00:7b:1f:6d:92:41:82:cb:fd:db:0f:69:9a:5c:57:49:61:
11:7c:e2:bc:f6:67:cc:d1:c5:2e:38:09:b7:7c:4a:93:b0:c6:
6d:50:7a:aa:e2:d6:ef:e7:98:15:cb:ee:14:aa:82:dd:14:3d:
01:2b:87:d8:8d:e5:22:2b:83:b5:55:de:4e:ec:a7:28:af:3f:
a6:7d:48:4f:91:57:b3:d9:8d:59:18:88:6c:18:e3:13:f7:f8:
1d:97:fc:b1:35:70:85:df:ca:c7:74:41:7e:6e:04:f0:ea:ee:
ec:9a:7d:2b:b9:15:fd:57:ca:e5:e4:07:3a:20:1b:6b:78:4b:
5a:02:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:51 2026 by rpki-client