Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier: gH2v8xjddtqm/bbOCMCvMjqm4AoGOsa/w3IKv/Rv73Q=
Subject key identifier: B6:E8:A4:45:75:FA:4C:B6:FC:85:21:83:A0:9A:7C:21:55:07:43:0D
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer: /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial: 6C40D9F0D7F390AB18FBD12D97B1F8B6605AE294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number: 04D1
Signing time: Sun 29 Mar 2026 12:38:11 +0000
Manifest this update: Sun 29 Mar 2026 12:33:11 +0000
Manifest next update: Mon 30 Mar 2026 13:13:11 +0000
Files and hashes: 1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: GM+eGwQfQBcR1VRAFT1adWcrMqDNrBoXKY5zUHp6tlY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:40:d9:f0:d7:f3:90:ab:18:fb:d1:2d:97:b1:f8:b6:60:5a:e2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Validity
Not Before: Mar 29 12:33:11 2026 GMT
Not After : Mar 30 13:13:11 2026 GMT
Subject: CN=B6E8A44575FA4CB6FC852183A09A7C215507430D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:74:a9:0f:1b:5c:7e:ec:7d:91:fb:cb:83:
76:56:28:77:1a:59:6e:b5:15:44:e6:56:e3:05:70:
6b:2f:03:73:3c:0f:36:da:f8:a8:67:e1:98:a8:c2:
c0:07:52:34:1c:0c:df:29:55:13:fc:a0:f3:55:28:
e6:54:2b:87:c8:7a:a0:e6:fb:ae:8a:29:55:11:50:
55:80:97:04:c6:d5:0b:f1:1d:7d:f6:60:e9:5e:3d:
b3:a2:0b:92:10:ee:08:25:a7:78:8c:af:4a:7e:98:
f3:bc:dd:72:ce:61:2e:ca:4e:0d:5d:37:b5:39:aa:
eb:4f:a5:b5:a6:2f:32:39:39:8f:d2:27:b6:55:f4:
4b:33:85:2c:10:68:9d:1e:11:63:5c:0d:ab:44:ca:
4b:74:da:85:8d:c5:3a:29:55:54:a3:71:aa:90:0a:
f7:59:3b:23:5a:cd:f5:ef:06:2d:e6:75:c4:74:98:
ef:1f:78:31:8a:35:04:99:ac:2d:fa:38:82:ac:05:
74:6e:5f:9e:ba:44:dc:92:4c:d0:3e:f5:8d:5c:9d:
bb:fa:63:f9:ae:a4:68:a2:dd:46:41:3e:4c:82:67:
cb:51:8d:fa:05:da:ae:77:1d:81:c5:41:6f:49:8f:
4b:e7:d1:b7:93:ff:7f:f8:b8:a1:8e:e3:66:3a:b0:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E8:A4:45:75:FA:4C:B6:FC:85:21:83:A0:9A:7C:21:55:07:43:0D
X509v3 Authority Key Identifier:
keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:94:e9:bf:a5:2d:d8:aa:53:73:b7:79:7b:91:1e:ba:4f:9c:
26:0a:5d:4b:db:08:0e:b5:fa:e4:7d:b7:73:03:2b:79:37:ed:
5e:40:15:28:c9:f6:5c:82:cb:b6:46:60:81:13:e5:2b:96:ca:
bd:72:6c:fe:11:38:17:a1:8f:1f:e5:be:06:31:7d:33:a0:dc:
07:c9:17:4f:69:70:2a:70:ec:9c:f1:d9:67:1d:d1:89:15:23:
29:f4:44:21:74:d5:33:c6:dc:f5:40:84:72:0b:98:1d:a3:ac:
54:ef:68:f9:e6:c6:f1:a2:2e:04:00:d1:a3:ce:1b:b3:d5:df:
cf:cb:81:12:3f:40:7f:b6:e2:67:6d:7a:1a:fd:1a:97:a0:5f:
d2:ce:9b:01:aa:4d:96:ed:9b:ba:85:f7:3a:bc:e2:c2:ff:52:
ff:b0:db:6c:44:1d:c4:8d:52:fb:f0:37:19:6b:95:1f:5e:ce:
97:62:c9:3d:d2:d6:3a:61:41:51:f7:4c:e6:fd:ed:eb:80:1f:
98:63:8a:e7:ec:95:01:32:e9:cb:be:d4:00:51:44:d6:fb:3d:
03:d5:e0:70:8d:d5:9b:45:f8:6d:0b:cc:0c:e3:55:56:86:1c:
03:20:8d:5b:53:5c:8c:84:75:ec:51:96:90:3d:10:7b:8f:d6:
9f:cc:7f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:43 2026 by rpki-client