Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: Gj5leqyK2hcaX+528/TFsMf1t8bFvy0qGI2keV5O1Yw=
Subject key identifier: 05:02:08:CE:A2:22:9F:7C:F6:CA:B8:8D:25:F5:14:F0:27:97:86:0E
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 2261B229CFD5DACF181123B7BFE4EBB7D9D5D069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: 02BE
Signing time: Sun 29 Mar 2026 01:26:59 +0000
Manifest this update: Sun 29 Mar 2026 01:21:59 +0000
Manifest next update: Mon 30 Mar 2026 04:40:59 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: Ibz979ugAGo54O4cmFMYWfqvFYWH8sbS8USHZxqS+n0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:61:b2:29:cf:d5:da:cf:18:11:23:b7:bf:e4:eb:b7:d9:d5:d0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Mar 29 01:21:59 2026 GMT
Not After : Mar 30 04:40:59 2026 GMT
Subject: CN=050208CEA2229F7CF6CAB88D25F514F02797860E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:6f:91:e7:34:6a:d7:25:05:c6:3b:2b:31:
fb:a5:31:36:b6:0e:6c:4d:69:c9:6c:03:e5:81:0c:
d1:d6:ce:cd:af:69:81:26:d5:0e:8a:d9:71:5f:27:
ac:5b:05:59:8e:5c:9e:46:d0:1d:09:da:4c:1b:61:
eb:fe:90:ee:79:49:3a:d2:fe:8c:f0:dc:a5:4a:0c:
5f:b1:ba:b1:8f:35:50:94:a2:7d:43:e8:dc:1d:c5:
b2:fe:24:0d:97:dc:44:4a:56:47:a5:ca:7e:b4:7d:
b3:57:8b:91:c7:be:32:34:c9:c8:a0:c6:48:e7:1d:
0c:e6:b1:9b:38:49:87:4c:f2:0e:14:8b:77:ae:bd:
95:fe:13:8d:c1:55:f7:52:40:28:69:f7:18:d9:81:
94:d4:d4:07:c4:01:16:27:4c:83:5b:2b:92:40:94:
40:24:57:a6:cc:6e:fb:a5:cf:8b:12:67:ba:1f:0b:
14:99:22:ca:cf:f4:1e:c1:8d:b5:cd:7a:a9:02:cd:
ea:dd:98:af:97:8a:25:eb:aa:59:2c:b3:49:44:50:
17:55:59:d9:7c:60:d3:b4:21:4c:26:f3:f2:bb:16:
1a:9b:51:23:2c:18:ff:d7:15:28:58:31:24:0d:45:
b0:7f:7c:ad:de:4f:56:a3:b2:0d:d2:08:78:59:8e:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:02:08:CE:A2:22:9F:7C:F6:CA:B8:8D:25:F5:14:F0:27:97:86:0E
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5f:09:3e:3c:1d:d5:1a:b5:be:a1:56:4a:56:2e:c6:7e:15:
aa:59:40:c3:e1:46:ee:74:e5:48:04:b0:42:b3:89:c4:f7:1b:
a5:dd:1d:b3:fd:46:b9:e5:be:c9:f9:4d:1a:75:96:3c:1e:70:
78:61:7c:90:f5:9c:c6:f5:f8:da:96:a3:23:3b:16:27:8e:7f:
92:50:a9:55:50:5e:17:80:b1:8e:70:c9:22:1d:6e:be:58:4a:
e0:89:29:38:a6:68:89:c9:ad:16:3a:ec:f9:dd:5e:b1:32:2f:
cb:4b:a4:04:72:c0:08:f7:7c:b3:ae:b3:63:5b:47:9d:9c:18:
b6:5b:a1:a4:26:8b:62:c6:6c:52:91:68:07:74:52:75:f9:1e:
dc:18:6f:76:ed:63:30:da:b9:f9:65:92:56:0f:be:f2:44:fa:
19:24:3f:f2:6a:b0:83:1c:92:bd:10:3a:90:9b:3b:ff:19:44:
38:85:d0:65:56:df:ab:e3:68:8d:9f:57:36:f5:76:4b:bb:6f:
4b:89:5b:b3:7f:38:30:a4:3b:b6:75:ba:bd:6d:36:07:dc:58:
ec:cb:73:94:df:0e:2e:d6:28:7b:28:c9:b2:2f:79:7e:35:68:
8a:98:c7:55:2f:18:2a:a9:12:2e:20:8d:3a:92:1e:ba:8e:be:
dd:d0:85:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:45 2026 by rpki-client