
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier: YLGLgFNIYL2WsatbaBwFJJu5+qRlxJu2eJy0yUZbsIY=
Subject key identifier: 33:44:6F:E0:D2:6A:A5:B1:B7:86:F1:3F:D7:85:C2:D0:24:C6:9C:E4
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer: /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial: 17FD7B0F900C43163283FC9402E570C05D491767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number: 04E5
Signing time: Sat 07 Nov 2026 14:08:23 +0000
Manifest this update: Sat 07 Nov 2026 14:03:23 +0000
Manifest next update: Sun 08 Nov 2026 16:40:23 +0000
Files and hashes: 1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: YFPywXV4oJwocd7X4LEMVarSFicwyvy4ldffh2aFgpA=)
2: AS216107.asa (hash: G3HC27NuKem7ftHKQMHdWTgdJjlwOzOkBaiDyTq26cc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:fd:7b:0f:90:0c:43:16:32:83:fc:94:02:e5:70:c0:5d:49:17:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Validity
Not Before: Nov 7 14:03:23 2026 GMT
Not After : Nov 8 16:40:23 2026 GMT
Subject: CN=33446FE0D26AA5B1B786F13FD785C2D024C69CE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:33:fa:4f:79:19:6f:87:c6:ec:e8:3e:d2:
72:9e:4d:47:41:7d:7d:0d:ed:10:ba:cb:ca:3f:bb:
64:68:01:93:c0:0c:6e:5d:d6:7d:20:15:98:5a:58:
b8:0a:73:23:0e:37:31:39:ea:78:76:59:6b:ee:2e:
e0:05:a3:39:c0:96:cd:86:87:b2:ea:9d:30:09:b4:
2e:20:a7:72:d7:77:a6:f7:3f:92:d6:35:d1:6f:bc:
53:46:bf:47:07:01:65:08:6f:3e:3b:c6:75:6f:93:
83:ec:e7:df:2d:98:a1:14:2c:2d:4b:d2:a2:5b:9c:
7e:d8:fa:99:20:60:c7:c4:5f:5c:21:fd:4d:16:73:
cd:37:cb:28:ac:e2:cc:b9:87:bd:2c:0a:50:22:cf:
d9:a7:fa:66:06:87:67:d1:03:7b:8a:da:aa:5b:b3:
ac:0f:30:0d:6d:26:73:24:9e:3c:67:49:05:5b:23:
9d:7b:a7:ad:54:bf:82:2c:9e:1a:8a:77:9d:33:85:
3d:d4:1d:52:14:18:c2:45:b6:22:72:c3:71:cb:d7:
9b:25:82:3b:e7:69:ef:ea:50:c7:21:0f:ca:61:f9:
34:72:78:6b:cb:31:75:f3:98:7b:40:6e:d4:53:7f:
da:30:fa:ef:2a:8c:9d:36:7d:9f:c7:a3:49:35:ad:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:44:6F:E0:D2:6A:A5:B1:B7:86:F1:3F:D7:85:C2:D0:24:C6:9C:E4
X509v3 Authority Key Identifier:
keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5f:56:a1:eb:9c:fa:92:56:77:dc:b5:81:9d:be:c8:9c:4f:
a8:da:92:8c:5b:f5:56:06:14:9b:92:a5:89:3b:2a:22:ac:74:
1d:ad:88:b4:f6:40:c7:e3:ea:3c:ab:37:6b:16:32:95:23:dd:
49:d0:5b:5e:57:29:44:a7:22:01:3a:40:2b:8a:83:82:fb:1d:
7f:8b:58:81:5e:bc:ba:df:77:4e:4a:d6:91:75:42:e9:12:42:
d2:f4:6a:e9:c1:46:e6:15:a2:10:06:e6:e7:4f:0d:12:dc:a2:
68:78:91:1a:7f:98:e0:a4:6b:0e:f7:f7:de:9f:2f:72:de:66:
07:45:cc:e2:4a:17:7a:d3:85:01:d6:ca:da:63:d7:57:6c:c2:
37:5e:e1:f0:3a:79:61:27:f6:34:74:5f:3a:0d:6a:68:1d:1c:
d2:19:8a:00:18:74:08:cf:80:b9:7f:ac:77:7c:2a:55:07:b5:
71:ac:c6:5b:bd:74:d5:a1:22:11:89:12:c5:9d:71:d0:25:4c:
9f:42:a2:7f:9b:88:31:ae:35:38:33:f9:14:04:9a:48:de:15:
97:4a:1d:3f:f2:9c:08:f6:b1:d6:ef:b7:5e:b9:d1:b5:b6:17:
c4:4c:b2:1f:dc:39:8a:53:7e:e2:30:b6:ab:be:b0:f6:81:c8:
11:c6:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 17:46:48 2026 by rpki-client