Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File: B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier: 8MEDq+fymXPJQ3tKf1uU924+QYVddCpgsLXHMj6y7E8=
Subject key identifier: C4:95:2A:AF:DF:EB:54:6D:DA:3C:5C:C9:74:AB:66:7B:51:2B:B2:BF
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer: /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial: 0FF4615B68CCF981B7DEFC1C8D58D6FAA87A1413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number: 04B9
Signing time: Sun 29 Mar 2026 08:14:36 +0000
Manifest this update: Sun 29 Mar 2026 08:09:36 +0000
Manifest next update: Mon 30 Mar 2026 09:55:36 +0000
Files and hashes: 1: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: mfJwmAVLtQgaU/bfqDXaJs8RMWjVAaxU2Bl80GTP/Nk=)
2: AS215147.asa (hash: GjsvLtdFoDUTAXomZoavpdPPd8CJuRsD46c0/yYhSME=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f4:61:5b:68:cc:f9:81:b7:de:fc:1c:8d:58:d6:fa:a8:7a:14:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Validity
Not Before: Mar 29 08:09:36 2026 GMT
Not After : Mar 30 09:55:36 2026 GMT
Subject: CN=C4952AAFDFEB546DDA3C5CC974AB667B512BB2BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:49:f8:9c:b0:7b:be:db:a4:4a:77:72:bf:
fb:20:97:4d:32:b5:b9:31:c6:e7:7f:a1:97:b2:8e:
af:db:29:85:03:66:a4:3e:7a:8e:85:06:a6:ff:79:
92:a8:57:10:8b:60:f1:33:94:4a:0f:1a:84:63:e9:
fe:27:97:d7:07:e1:85:01:d9:d7:a2:0a:a7:90:00:
43:8d:1c:c9:0a:1d:cc:a6:87:73:b8:a8:cb:b3:f6:
70:4a:65:a9:bc:c9:26:07:ec:71:4a:9b:f1:6e:37:
f0:6e:a6:ff:2a:cf:c3:9f:3f:92:d0:12:ea:8a:e3:
69:ce:db:b4:68:7d:8c:33:50:58:85:51:75:66:4f:
ce:05:7d:bd:43:77:6c:82:4f:4e:95:6b:1d:db:8c:
64:1f:19:fb:fe:c3:5c:04:a1:81:3b:52:e8:dc:b2:
9f:0d:8d:f7:7d:a9:f4:d5:08:b0:7d:4f:a7:16:c1:
6d:79:7d:33:64:5e:1d:d6:47:63:31:17:13:1c:69:
5c:0b:89:41:29:f9:39:cf:0f:c0:a5:88:5c:16:a9:
dc:3a:8d:de:ef:fb:8f:e4:5e:66:27:a9:af:8e:4b:
59:60:62:31:76:00:5d:9d:44:0b:7d:fe:b9:8a:4f:
23:8b:45:d7:19:60:65:24:fb:a6:de:cb:28:82:09:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:95:2A:AF:DF:EB:54:6D:DA:3C:5C:C9:74:AB:66:7B:51:2B:B2:BF
X509v3 Authority Key Identifier:
keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ea:ee:8b:55:c4:e3:30:6e:81:2e:f5:b0:f2:a2:99:d6:33:
1b:2f:60:c9:61:d6:ef:77:70:c2:df:aa:d9:6e:59:ea:1c:39:
08:75:2d:d5:8c:37:97:19:9d:8d:c1:c5:b8:32:df:42:29:5c:
05:f7:b9:35:a8:33:2e:1f:c0:ca:e7:36:6b:1b:27:07:24:7c:
79:f0:5b:d8:57:e8:97:80:4c:91:26:04:03:28:ab:2b:1b:3f:
b9:ef:98:29:54:6c:0c:f6:60:d0:15:b7:0d:40:47:24:ed:dc:
22:f6:18:06:33:56:d1:ae:e6:f0:f7:55:90:88:42:93:f7:ce:
4f:8c:98:28:01:5a:57:89:e2:f5:8e:32:e6:f9:f7:57:34:d4:
2e:e6:81:be:c9:f6:e2:af:26:6f:01:8b:53:39:5f:27:21:f0:
09:52:af:50:7c:1c:c2:6a:64:37:01:09:d5:db:1a:3b:6b:f7:
99:3c:ff:9a:2f:a9:e2:a5:5d:7b:cb:95:61:08:f8:dd:d8:e3:
96:b0:e5:3d:17:f2:f2:a6:cf:1a:04:42:36:99:d6:77:38:65:
c5:2f:08:63:fd:08:4f:a2:67:db:88:2f:5a:e4:c0:45:73:87:
bc:b0:1f:19:fe:fa:d7:09:3f:55:ea:b5:74:f2:5c:3e:f0:7d:
ec:c6:b9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:35 2026 by rpki-client