Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File: B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier: +lf40BUWzOTJub8PTuuL10+zxH1x5ZwH165fsjHxtIY=
Subject key identifier: 1F:50:AE:0A:9E:25:33:72:A6:5D:E2:B9:64:10:96:5A:48:20:D0:1A
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer: /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial: 72DAB6701999C08E3CDE479A611913C484646FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number: 0593
Signing time: Sun 28 Jun 2026 15:03:51 +0000
Manifest this update: Sun 28 Jun 2026 14:58:51 +0000
Manifest next update: Mon 29 Jun 2026 17:25:51 +0000
Files and hashes: 1: AS215147.asa (hash: arE7PxVkqmoj/EHtL7YslYLec2sH97+ZguXgAkgz3cQ=)
2: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: /cWuMJs0N9rpts5d1R5sKhWMdge/JwNLwhcGa1MgjO0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 17:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:da:b6:70:19:99:c0:8e:3c:de:47:9a:61:19:13:c4:84:64:6f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Validity
Not Before: Jun 28 14:58:51 2026 GMT
Not After : Jun 29 17:25:51 2026 GMT
Subject: CN=1F50AE0A9E253372A65DE2B96410965A4820D01A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:c0:ed:a6:82:5a:68:6f:38:b2:ee:6b:07:
0d:47:2e:21:e0:b7:19:12:bd:f9:e3:b8:4f:b4:14:
db:9d:d8:54:dc:0b:b3:64:b8:18:8b:04:aa:af:42:
bb:84:0c:e3:73:53:c6:22:7a:e0:7c:71:8c:74:80:
7e:bb:6e:8c:63:11:80:bb:7e:b9:2b:22:30:26:03:
aa:aa:08:12:3a:27:01:03:7e:c0:30:c7:45:b3:b7:
35:38:d7:d5:a0:d9:f9:93:86:b5:72:bd:92:53:74:
b6:e6:d9:32:d1:e9:b0:2b:91:2f:6d:e5:7d:66:e4:
8a:dc:84:bb:85:d0:c4:c7:e3:27:15:78:a7:f8:a8:
b4:72:df:60:35:3a:b9:8c:74:46:e5:af:22:b8:24:
bb:85:03:ec:6e:ff:ff:b6:cc:62:f2:b3:20:57:5f:
3b:88:11:04:2e:75:48:1e:26:fa:41:99:bf:dd:dd:
9c:f2:92:f7:24:bf:87:52:84:bd:67:20:0e:89:c3:
82:95:05:2b:00:24:26:47:f9:44:59:46:15:e1:9b:
45:90:dd:dc:7b:81:2c:89:0b:4f:b2:cf:6d:e0:4c:
cd:fd:a4:cb:a4:1a:c1:cf:1f:bd:9d:1c:a5:82:80:
5a:96:9a:c0:63:e9:b7:c8:3c:e2:34:42:eb:7f:49:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:50:AE:0A:9E:25:33:72:A6:5D:E2:B9:64:10:96:5A:48:20:D0:1A
X509v3 Authority Key Identifier:
keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6d:bc:f8:90:9a:eb:5b:78:6a:1f:78:2a:f1:16:39:09:36:
f1:1d:0a:94:95:d1:86:51:78:78:7f:c8:0c:2f:89:1b:d3:3f:
44:2b:29:2e:6e:6e:96:cc:d0:98:a6:db:e0:f8:4c:d6:22:8e:
c8:49:66:80:c4:34:7e:ac:9f:df:75:cc:80:64:6c:35:50:1f:
7e:b7:81:d5:6a:de:30:f2:25:1c:a8:93:79:5e:1d:98:7b:03:
ea:d4:90:33:cd:a8:0e:3b:60:db:bd:26:d3:16:42:d9:53:fc:
b3:68:e1:ed:2c:80:3b:19:3f:bc:08:01:41:ab:c8:c8:56:b3:
d5:7c:35:d2:4a:25:08:7f:c1:a3:d5:58:fc:f3:14:79:55:ff:
4c:40:97:65:8a:45:72:0e:fd:81:4c:a7:23:7a:ac:41:eb:2f:
a5:00:a9:68:4e:3d:cc:17:d4:52:fe:7a:48:e4:7b:6d:09:fe:
2c:30:c5:c0:8a:de:cf:95:7e:cd:1a:c9:54:fb:a5:e7:d2:55:
4a:9c:55:c7:e4:c9:9b:7a:47:cc:5e:71:71:9a:6e:19:ac:ce:
bf:14:d2:6b:47:28:9a:0b:a1:a4:86:4a:d4:c2:1e:13:7a:02:
10:09:c6:31:d6:d0:83:d9:7e:e1:24:38:46:6b:93:24:4d:f5:
12:5c:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:39:16 2026 by rpki-client