Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
File: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json)
Hash identifier: r/r3TVydF70GmCIc1Oc8975SSL9xGrY20wgp1FHe0y8=
Subject key identifier: 49:57:CD:9B:A2:FF:ED:27:7B:0B:8F:CA:A7:C8:2A:E2:0D:87:FF:89
Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
Certificate issuer: /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Certificate serial: 43C2FE102479126405CE4DF0313BE2CD7DE4991B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
Manifest number: 03FC
Signing time: Thu 26 Mar 2026 02:32:38 +0000
Manifest this update: Thu 26 Mar 2026 02:27:38 +0000
Manifest next update: Fri 27 Mar 2026 02:37:38 +0000
Files and hashes: 1: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: GgJMK1pwrX/fvWubM8v2ZsEBLKZGAlf4cGy1JU/qjmE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c2:fe:10:24:79:12:64:05:ce:4d:f0:31:3b:e2:cd:7d:e4:99:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Validity
Not Before: Mar 26 02:27:38 2026 GMT
Not After : Mar 27 02:37:38 2026 GMT
Subject: CN=4957CD9BA2FFED277B0B8FCAA7C82AE20D87FF89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e2:09:bb:46:6c:a2:28:34:3b:8b:81:30:b3:
b3:67:a3:fa:dd:92:96:ba:87:a2:61:fe:24:4c:7e:
91:61:c9:6b:b0:b6:60:f9:e7:9c:d1:65:9c:db:d9:
d3:08:24:d4:65:91:b7:83:6f:20:2b:47:e1:b2:4a:
18:51:78:f3:e0:4d:dd:a5:b5:92:af:08:09:60:77:
ce:b0:aa:26:5b:98:75:86:fb:3c:57:dc:c0:55:24:
e5:72:4e:a8:42:49:b2:03:b6:fb:63:91:b5:0d:b4:
68:5f:be:6e:68:11:8b:06:22:57:00:93:1d:fb:96:
a3:05:e9:f0:db:10:e3:9b:f0:74:b4:53:a3:ca:d6:
80:18:f3:25:cf:b7:c0:8a:e9:33:95:d5:b2:c6:aa:
1d:12:ad:5a:a3:d9:56:9b:97:8b:33:2c:23:89:1e:
d7:18:07:81:de:f1:64:be:4a:6d:74:21:3a:64:29:
17:fc:12:24:4e:0e:3c:ba:5f:4b:e2:19:f7:20:1b:
2c:ab:2f:fd:d1:b3:48:6c:c2:c5:fb:4f:46:a6:db:
7e:98:8d:fd:33:88:e1:ab:d8:be:9a:f9:dd:b1:5c:
67:34:51:5e:68:63:16:79:92:76:8d:3e:6e:d1:75:
7d:5a:c7:ee:23:8d:e0:68:fc:04:d4:d2:83:73:19:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:57:CD:9B:A2:FF:ED:27:7B:0B:8F:CA:A7:C8:2A:E2:0D:87:FF:89
X509v3 Authority Key Identifier:
keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:37:0f:4c:b0:9f:cc:27:e3:99:a1:d4:eb:c1:da:60:0e:54:
a1:8b:3a:59:e7:d0:1c:ed:1a:96:49:c7:ad:26:a3:15:81:ca:
f1:4d:2d:62:fe:00:91:52:f1:41:d0:92:3a:70:da:e5:90:10:
3c:12:af:d1:28:45:6e:43:5f:b3:16:88:66:32:b8:7f:a6:b0:
56:5c:18:5c:a5:59:80:27:09:f0:d6:94:4d:64:84:12:66:16:
3f:78:ee:a3:74:02:0b:af:70:49:56:22:83:68:46:f6:98:30:
98:9e:b7:ba:71:de:5e:9c:8d:a7:ff:f3:31:7d:f1:4e:f1:ed:
8c:52:7c:56:a0:2e:d6:d0:f3:b4:0a:c8:1c:96:19:8f:75:49:
35:0e:17:f3:6a:fc:4a:c1:85:85:9f:54:c5:29:93:78:13:63:
32:b3:08:ba:d1:c1:be:fc:af:86:12:ac:4f:3e:ac:9c:f6:3d:
c8:4d:8a:4a:bb:87:ee:fd:c7:7d:ee:82:c4:be:54:6b:6d:28:
5b:1e:9f:3b:52:bf:57:8d:3a:20:ea:40:79:0b:04:57:e1:65:
99:22:74:4f:81:9c:71:b1:d4:53:01:de:7e:95:d3:fa:b0:03:
e7:72:1c:74:44:71:1b:85:75:dd:ec:37:66:2a:eb:0a:f1:8f:
65:c7:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:09:41 2026 by rpki-client