Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: uxdfpAXPONcI3ekHCe2Pw44myPYFvBk8jg1/dScHySY=
Subject key identifier: E3:58:08:44:B6:CE:B1:10:9D:4D:C3:8A:19:0E:60:B6:36:C2:F6:FA
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 635666299773CA0B1998C108384CD7C63DE47003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 038F
Signing time: Thu 26 Mar 2026 02:32:38 +0000
Manifest this update: Thu 26 Mar 2026 02:27:38 +0000
Manifest next update: Fri 27 Mar 2026 05:54:38 +0000
Files and hashes: 1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: iQJdFNvmnBylFBuJvd/qYphqabolM70y1ni+4ztYBPs=)
2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:56:66:29:97:73:ca:0b:19:98:c1:08:38:4c:d7:c6:3d:e4:70:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Mar 26 02:27:38 2026 GMT
Not After : Mar 27 05:54:38 2026 GMT
Subject: CN=E3580844B6CEB1109D4DC38A190E60B636C2F6FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:ed:cc:18:77:ff:62:af:75:39:ee:39:d8:
67:12:ab:79:ee:9b:35:7e:a3:1a:8e:6d:d1:a3:a7:
36:6a:fa:d5:f9:90:f3:47:6f:72:a6:41:41:b8:36:
6a:58:b9:59:4a:0e:b1:ee:2f:cc:6e:1d:1f:92:df:
34:41:f5:d4:ca:9b:69:cc:d8:db:9f:12:2f:8d:f3:
bd:bc:32:1a:14:7e:f0:10:61:3e:14:ee:d3:54:43:
f4:0a:61:07:93:85:47:51:20:5a:70:d3:a1:fc:4a:
a4:14:c8:76:13:95:e9:4c:42:3b:df:09:d5:e4:e9:
f3:20:0f:22:37:80:93:cb:f8:4a:99:09:dd:13:5f:
2f:7d:2c:23:c1:e2:0d:3f:1b:7d:f5:fa:ac:20:c9:
97:78:19:5f:42:83:df:3a:80:62:f8:af:aa:cd:63:
d3:76:4a:e5:e1:e7:6e:46:86:f0:b2:f5:92:84:5b:
27:bd:37:4f:de:1b:c5:4d:de:58:18:94:0c:b8:b3:
d6:f3:fb:fe:06:8a:99:d2:cc:ca:8e:1f:4d:f9:0a:
47:ad:c5:c1:5b:c2:79:f7:f7:b7:47:5d:7b:f2:9f:
7f:c8:33:2b:16:93:ee:e7:21:ed:86:0a:7f:92:ac:
93:d7:ed:6d:3d:75:ca:1b:3e:a1:43:f6:61:d3:9e:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:58:08:44:B6:CE:B1:10:9D:4D:C3:8A:19:0E:60:B6:36:C2:F6:FA
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:4a:15:1a:89:c3:0c:72:49:11:6a:a3:3e:37:cc:8a:c6:e6:
58:13:3f:e8:69:81:a5:a2:ab:d2:b1:c1:95:74:7b:16:94:50:
67:bd:8e:7d:65:b4:77:99:51:e1:6d:0c:ed:78:f3:53:6b:3c:
c2:a8:76:99:ca:81:4f:9f:af:9e:10:20:ba:36:74:12:64:c6:
57:34:dd:6a:25:31:b4:e3:82:f4:fc:08:07:31:c0:2d:18:4c:
19:6c:a9:a6:6f:51:b1:78:1b:9e:78:07:63:31:2c:0d:1a:87:
38:11:22:04:16:e0:46:a6:0d:25:46:25:6a:40:c1:83:1d:1c:
88:c1:28:c8:bb:b5:d9:49:ba:7c:0a:be:41:87:4b:56:24:ab:
cb:7b:f9:a7:f4:8c:00:9a:51:0f:4a:fc:d8:06:76:37:f1:60:
db:5a:c6:15:1d:95:41:a4:36:55:5c:08:e4:81:0c:8c:24:13:
b6:e9:45:60:84:ab:bb:b6:f7:5a:25:df:19:66:f6:d2:29:99:
67:45:a3:76:0c:f8:20:2e:1d:d3:0e:83:b8:5c:2d:67:23:31:
20:23:e3:3c:19:8f:e7:d0:15:d2:61:c5:cf:98:f6:b8:b7:5d:
51:07:91:68:24:31:9d:d7:a9:45:00:89:a5:d6:fa:b6:d2:55:
ec:cf:89:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:58 2026 by rpki-client