Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
File: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft (raw, json)
Hash identifier: UPYFaitdxN1hCLSne0+BgQ0G0obpp8iLaJgsLM/xe5g=
Subject key identifier: 8D:5F:94:45:04:15:13:5D:BA:C6:EA:73:8A:A7:47:E7:33:78:A2:54
Authority key identifier: 8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
Certificate issuer: /CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Certificate serial: 0AD2E8F6108C3D864E58F9A73192E91A2EFA3165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
Manifest number: 0382
Signing time: Sat 28 Mar 2026 22:51:52 +0000
Manifest this update: Sat 28 Mar 2026 22:46:52 +0000
Manifest next update: Mon 30 Mar 2026 01:29:52 +0000
Files and hashes: 1: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl (hash: uQalgJXVk3rHYP4UvCXi/2ejebuAwNFv25jAA+6iNyY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d2:e8:f6:10:8c:3d:86:4e:58:f9:a7:31:92:e9:1a:2e:fa:31:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Validity
Not Before: Mar 28 22:46:52 2026 GMT
Not After : Mar 30 01:29:52 2026 GMT
Subject: CN=8D5F94450415135DBAC6EA738AA747E73378A254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:a3:84:1a:c5:f7:a7:64:64:e1:3d:a2:d9:
bc:d2:51:c1:e7:c5:73:85:51:76:ca:2b:71:71:b4:
ab:eb:4b:fd:a5:69:83:ce:1f:44:8e:1c:cc:9f:15:
e0:c4:e4:18:e0:dc:32:da:1b:65:78:70:ee:8f:0c:
c7:1d:33:d4:5d:d5:e6:72:84:a7:89:5a:bd:f0:cd:
d3:9b:5f:39:73:b4:07:62:3b:33:c7:e4:93:85:ac:
f8:a9:81:64:9f:06:3f:fb:c6:7e:7b:3b:61:96:17:
c9:73:f1:ea:55:fe:5a:df:70:20:20:52:ac:2f:a0:
e2:f7:00:7f:a6:0d:80:60:3b:8b:66:b7:5e:94:82:
98:c8:fc:0d:37:6c:25:c3:4a:32:aa:6d:91:dd:8a:
da:83:38:6f:c8:de:00:5e:57:50:be:63:be:c2:28:
bd:4e:a7:ee:58:b6:59:49:ec:20:a0:f0:b4:f6:1c:
15:b0:39:21:e0:61:b5:bc:05:90:d7:52:cb:8f:34:
1f:b0:aa:d2:51:f2:09:7f:97:52:50:04:28:3f:22:
ab:81:f8:ef:73:d7:70:4a:28:9d:58:bc:a1:a2:48:
b0:26:db:7e:67:66:87:15:41:ca:80:97:44:72:6a:
84:b4:da:7c:04:24:09:5f:36:6c:8b:90:c6:01:2b:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5F:94:45:04:15:13:5D:BA:C6:EA:73:8A:A7:47:E7:33:78:A2:54
X509v3 Authority Key Identifier:
keyid:8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b7:3e:29:72:ba:ae:db:a2:eb:98:b6:db:5d:13:97:7a:e8:
04:86:ad:a8:f2:18:d5:08:9e:b5:5e:6e:38:ef:81:31:e3:50:
9a:75:e3:64:b2:31:12:47:3d:35:36:fd:c9:ed:8b:eb:ac:15:
99:a2:7a:3b:8d:c2:f1:a9:30:cd:fd:44:75:09:da:8d:19:c2:
f2:34:41:f8:31:68:2e:d6:18:10:ed:16:e8:90:34:9b:07:c0:
1b:9a:a3:90:29:a9:23:fd:2c:7d:53:76:a9:a5:5d:ef:c0:c7:
e2:d7:a5:b8:0b:49:f8:9b:cf:44:46:81:e1:36:c5:a8:cf:18:
3a:bf:fb:0e:33:ec:db:a9:c7:0e:2a:69:3c:20:29:fd:b0:91:
c3:0f:6b:0b:0c:d4:48:5c:05:55:70:45:42:2e:13:4a:42:4d:
3b:93:5e:7d:7f:d7:6f:7c:9d:62:58:70:23:64:44:18:fe:b7:
96:3c:d3:8d:68:04:f1:f7:c9:c9:e0:02:03:3c:0a:d9:9b:39:
eb:f2:9b:48:79:6b:e1:7d:9c:c7:a2:a4:a7:b4:1a:81:9a:bd:
cd:ab:d0:81:29:77:09:f4:0b:00:dd:36:ad:44:1c:ed:98:b3:
ae:fc:35:14:87:6e:36:de:0e:44:65:23:de:be:0a:6d:f0:14:
89:5d:fc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:27 2026 by rpki-client