Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
File: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json)
Hash identifier: dwXU6EPLRYBdh5gH8LY68urJbJg00y0s2R3d3truzhA=
Subject key identifier: EB:D5:4D:74:0A:38:C1:DD:9D:68:D9:19:FF:E6:92:4E:6E:B6:49:38
Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Certificate issuer: /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Certificate serial: 244C86243C0788F85F725213B2474F43DE2AE03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
Manifest number: 02F6
Signing time: Sun 29 Mar 2026 00:12:47 +0000
Manifest this update: Sun 29 Mar 2026 00:07:47 +0000
Manifest next update: Mon 30 Mar 2026 02:55:47 +0000
Files and hashes: 1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: v68v7TN2lnHP9yaKUf3rxk00aH3DDUN9FvvEDGOeQB0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:4c:86:24:3c:07:88:f8:5f:72:52:13:b2:47:4f:43:de:2a:e0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Validity
Not Before: Mar 29 00:07:47 2026 GMT
Not After : Mar 30 02:55:47 2026 GMT
Subject: CN=EBD54D740A38C1DD9D68D919FFE6924E6EB64938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:f9:21:07:32:5b:f5:44:1b:9a:d4:50:4f:
ec:78:fe:15:36:32:53:82:4c:5a:82:9a:13:3d:f3:
49:1e:89:2b:6f:aa:21:d2:6d:d5:87:f0:6e:0c:74:
d6:f2:c8:57:49:d7:de:a0:e0:b4:21:d1:7e:a2:38:
5e:cd:07:58:f1:0b:f8:aa:1e:dc:58:0d:55:32:ec:
9c:77:5b:0a:8e:30:08:27:d0:4d:be:5b:ad:8f:0c:
d2:0d:05:1f:10:82:ed:1f:94:ac:48:1e:2e:90:8a:
c6:6c:5a:6c:9f:64:ba:a4:2f:dc:0f:08:70:0e:e7:
57:42:fc:6a:3b:f9:23:80:87:a7:61:50:07:34:b4:
b1:72:b6:7c:e0:2d:79:dc:d3:f1:0a:72:9e:4b:9d:
df:0e:20:be:c1:d1:64:52:89:60:96:d0:ce:a2:8e:
51:14:e9:6a:9e:2f:dc:e9:cc:5e:25:cd:70:1d:c8:
64:4c:9c:60:96:bb:8e:20:4f:ac:6f:aa:53:05:4b:
f4:28:11:b0:9c:99:c5:c1:60:97:9a:54:3f:fe:10:
1e:d2:99:f6:55:fe:74:71:e8:a5:51:3e:b1:91:4f:
66:1d:2b:f4:0f:ab:59:76:0e:0a:10:a4:71:5b:97:
68:1d:02:6e:79:c3:18:89:28:b2:fc:23:73:9b:90:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D5:4D:74:0A:38:C1:DD:9D:68:D9:19:FF:E6:92:4E:6E:B6:49:38
X509v3 Authority Key Identifier:
keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9b:54:08:45:f5:da:65:25:72:d8:66:a4:0f:12:9a:9c:56:
c8:e1:b6:2e:ce:e4:e5:e5:09:25:37:fa:0e:28:26:cf:c1:b2:
8e:ff:f3:53:14:95:69:5b:e1:f6:4b:03:f9:e8:af:07:4c:4a:
44:43:bb:8f:38:81:67:26:b2:8a:88:7b:3f:d7:dd:5f:e7:ed:
33:a6:e4:2a:27:c2:26:57:34:3a:13:61:65:6f:dd:38:8d:a2:
48:ea:77:fa:79:87:08:70:53:c1:71:bb:cb:03:6f:c2:25:49:
e6:89:ad:53:6a:f5:9a:7c:52:26:e4:a9:73:44:51:33:fe:f2:
20:e1:ee:40:2e:16:10:13:52:e5:2b:03:6b:1d:43:49:eb:d5:
b2:e7:8c:87:bc:d5:4d:b9:12:3e:3b:e7:19:34:03:a3:09:c6:
1e:9d:28:75:4b:ae:ac:36:86:ef:8c:eb:c6:3c:17:77:c7:9d:
43:71:86:4b:20:9a:29:67:21:96:65:b8:94:dc:98:2e:e7:36:
b6:44:ae:5e:5b:e2:9d:2e:e8:53:14:27:a0:08:6e:9f:49:30:
18:27:01:eb:75:8d:0f:d1:f1:61:f8:b9:51:01:d1:66:ce:fc:
f7:4f:13:4e:a1:24:35:bc:a7:5b:05:5f:b2:39:b4:cb:1e:1d:
11:5e:04:98
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJEyGJDwHiPhfclITskdPQ94q4DswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRiZjgxMWU1MDRhNGZhMmMyOWQzYjRmMTFkZmI3MTM2
NDI4NzNkMzAeFw0yNjAzMjkwMDA3NDdaFw0yNjAzMzAwMjU1NDdaMDMxMTAvBgNV
BAMTKEVCRDU0RDc0MEEzOEMxREQ5RDY4RDkxOUZGRTY5MjRFNkVCNjQ5MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw8fkhBzJb9UQbmtRQT+x4/hU2
MlOCTFqCmhM980keiStvqiHSbdWH8G4MdNbyyFdJ196g4LQh0X6iOF7NB1jxC/iq
HtxYDVUy7Jx3WwqOMAgn0E2+W62PDNINBR8Qgu0flKxIHi6QisZsWmyfZLqkL9wP
CHAO51dC/Go7+SOAh6dhUAc0tLFytnzgLXnc0/EKcp5Lnd8OIL7B0WRSiWCW0M6i
jlEU6WqeL9zpzF4lzXAdyGRMnGCWu44gT6xvqlMFS/QoEbCcmcXBYJeaVD/+EB7S
mfZV/nRx6KVRPrGRT2YdK/QPq1l2DgoQpHFbl2gdAm55wxiJKLL8I3ObkIurAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU69VNdAo4wd2daNkZ/+aSTm62STgwHwYDVR0j
BBgwFoAUXb+BHlBKT6LCnTtPEd+3E2Qoc9MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz
Zjk2LzAvNURCRjgxMUU1MDRBNEZBMkMyOUQzQjRGMTFERkI3MTM2NDI4NzNEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hiLUJIbEJLVDZMQ25UdFBFZC0zRTJR
b2M5TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NWVhZTc0NS04
YWM5LTRlNzEtYmM5NC1mY2IyNjE3MDNmOTYvMC81REJGODExRTUwNEE0RkEyQzI5
RDNCNEYxMURGQjcxMzY0Mjg3M0QzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJptUCEX12mUlcthmpA8S
mpxWyOG2Ls7k5eUJJTf6Digmz8Gyjv/zUxSVaVvh9ksD+eivB0xKREO7jziBZyay
ioh7P9fdX+ftM6bkKifCJlc0OhNhZW/dOI2iSOp3+nmHCHBTwXG7ywNvwiVJ5omt
U2r1mnxSJuSpc0RRM/7yIOHuQC4WEBNS5SsDax1DSevVsueMh7zVTbkSPjvnGTQD
ownGHp0odUuurDaG74zrxjwXd8edQ3GGSyCaKWchlmW4lNyYLuc2tkSuXlvinS7o
UxQnoAhun0kwGCcB63WND9HxYfi5UQHRZs78908TTqEkNbynWwVfsjm0yx4dEV4E
mA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:37 2026 by rpki-client