Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File: B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier: BngA/ewQ+yfqCjkDJ+D/L1zxwbjOmiOdyoM4/DDQ43k=
Subject key identifier: 23:BD:03:17:17:6D:A2:12:3F:51:16:56:A1:F7:5A:1B:6C:4B:D8:07
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer: /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial: 2E081C7B8F00FF4E707E627A1ECE863707C8FD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number: 0543
Signing time: Thu 14 May 2026 19:02:50 +0000
Manifest this update: Thu 14 May 2026 18:57:50 +0000
Manifest next update: Fri 15 May 2026 21:09:50 +0000
Files and hashes: 1: AS215147.asa (hash: MbJkmWdbtO5Z0lPnzZuur8qQYzpsB14Rcr92DO3Mrl8=)
2: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: Sn82oUIOHT+kiaYLw3DiQqhCP4Q1mFWtvYXOePlZqtE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:08:1c:7b:8f:00:ff:4e:70:7e:62:7a:1e:ce:86:37:07:c8:fd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Validity
Not Before: May 14 18:57:50 2026 GMT
Not After : May 15 21:09:50 2026 GMT
Subject: CN=23BD0317176DA2123F511656A1F75A1B6C4BD807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:a8:69:6a:5a:73:95:a5:81:e1:07:0e:b2:
64:76:55:82:a2:77:90:f3:a2:23:2a:f6:f0:3f:7b:
0c:d6:1d:af:fe:bb:66:0c:30:9d:39:b6:7f:b6:33:
1a:f2:4f:ce:dd:ac:cc:22:87:9b:fe:4e:85:4c:b6:
e1:32:36:c2:bd:06:3f:e3:c2:da:24:0f:72:d4:97:
ec:e9:d1:1f:db:fc:3d:f6:d2:cd:14:6e:0c:db:e2:
ed:41:3e:90:cd:ad:08:86:79:c9:fe:04:30:5c:b8:
71:36:d3:16:cd:e2:44:9b:32:f2:4d:86:9d:70:c6:
ee:7f:bf:cd:2a:eb:01:30:8d:a0:11:56:39:50:72:
52:14:73:8d:82:cb:96:66:cd:c3:cc:00:86:86:c3:
7e:92:98:bd:43:7b:3d:32:18:b4:cc:2a:e8:20:97:
31:11:db:5b:00:90:a4:01:51:0b:d5:26:ed:fb:92:
fd:de:82:c3:f8:c5:15:b0:62:35:6c:7e:3d:0a:68:
ec:88:bb:81:73:8d:5a:a5:4e:b2:bd:4f:b6:46:29:
01:c0:99:68:8a:61:73:d1:ce:6a:41:ed:1e:5f:0f:
ce:55:47:83:35:b2:59:ee:b0:f9:af:ee:0b:b0:17:
9b:9e:8a:3f:0a:26:78:04:86:df:ca:e4:60:65:15:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:03:17:17:6D:A2:12:3F:51:16:56:A1:F7:5A:1B:6C:4B:D8:07
X509v3 Authority Key Identifier:
keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:01:12:4d:bf:65:e6:fa:26:5f:b7:24:11:c8:3b:dc:09:e4:
c0:06:84:f7:2e:5f:60:8a:d3:9a:63:18:44:e6:f4:6a:f3:a9:
e5:2c:4e:a1:83:2d:9f:0e:28:7e:27:a8:40:12:dc:63:c7:5c:
75:2a:9a:77:d9:1c:b6:db:ec:f4:e9:ec:09:9c:1f:fa:35:71:
6c:6c:af:b9:e6:fe:f3:25:0e:6d:39:30:fb:52:15:26:65:e6:
f3:e9:e4:d9:25:05:e9:9a:94:1f:e9:74:a3:dc:b0:fa:10:6c:
1e:6b:75:d3:61:55:d5:32:df:86:3f:3d:6c:f0:5b:e4:fc:f0:
e8:1d:80:6e:51:52:9f:21:04:da:f7:cc:cd:b6:fc:5d:7a:0f:
d0:8f:c9:e7:82:63:e2:b8:44:1b:41:73:34:90:f4:a2:cb:fd:
d1:1d:31:04:e3:6b:a9:4d:60:3f:d8:b6:7b:4e:0c:9b:1d:a5:
48:4b:f3:d5:37:68:b6:32:4f:f7:52:5c:a1:7e:02:25:b0:e6:
26:41:3e:76:02:bd:83:0d:9e:da:8a:6e:a1:12:be:a7:6a:80:
2e:77:8e:87:7e:79:e5:ba:4b:9b:bf:a7:e9:a8:7a:81:4d:5e:
a6:cc:5f:89:19:94:9f:76:cf:be:e0:7d:e8:7c:58:22:23:e0:
ff:4d:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:51 2026 by rpki-client