
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
File: E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft (raw, json)
Hash identifier: pZgJ65sSf3NFGeY96ixa9vtuZIAMLMMVQ8I3XulzYUA=
Subject key identifier: 11:E7:76:11:24:99:2D:B7:DF:22:92:16:CF:CA:59:EF:0C:EE:F9:A9
Authority key identifier: E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95
Certificate issuer: /CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
Certificate serial: 1B0D5775A44927EBD34B2A47ADF1DEA70AA3B5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
Manifest number: 01AA
Signing time: Sat 24 Oct 2026 10:07:11 +0000
Manifest this update: Sat 24 Oct 2026 10:02:11 +0000
Manifest next update: Sun 25 Oct 2026 11:10:11 +0000
Files and hashes: 1: AS214976.asa (hash: v5lBSdK131Etk8q/qrO2YWGrpYrwgCaCsAichEGY55Y=)
2: E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl (hash: I1xS02W6mjA+jiQPyHFQx0xJFBxjoYynkTwLD0bphUk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 11:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:0d:57:75:a4:49:27:eb:d3:4b:2a:47:ad:f1:de:a7:0a:a3:b5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
Validity
Not Before: Oct 24 10:02:11 2026 GMT
Not After : Oct 25 11:10:11 2026 GMT
Subject: CN=11E7761124992DB7DF229216CFCA59EF0CEEF9A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:29:44:39:e4:3c:82:60:51:c5:8d:b8:7a:96:
1a:5a:a5:37:90:83:bf:13:6f:e9:78:1e:2d:39:7d:
e0:12:43:62:cb:c0:a6:62:13:26:38:31:e6:18:8d:
cc:a9:9d:0f:53:b7:26:80:bf:ae:92:7f:a9:eb:67:
f5:f9:0b:27:0d:fe:bc:3b:ac:cb:24:ef:4d:08:69:
77:cd:a1:e3:54:b0:75:94:bf:86:64:a7:be:4f:b5:
48:e4:a8:af:68:20:69:2a:a2:47:9e:f8:c0:a2:a0:
26:c4:fc:f9:bd:6e:37:6e:ca:7f:42:14:72:0a:0f:
a3:48:4f:7c:25:28:1c:3b:9a:82:0c:12:3b:53:0f:
b8:ad:93:d7:e4:6b:dc:3e:a6:61:42:fa:9d:1e:9c:
92:6d:e1:e3:8c:44:fd:fc:08:20:7d:cc:ae:d4:14:
5c:f9:37:f2:25:64:20:3a:ab:09:41:7a:4e:24:f2:
76:3c:d2:ac:da:2d:35:d0:39:4b:6e:b1:0d:ff:47:
e8:c6:ec:6b:4a:57:1d:f3:41:18:cf:c2:dc:74:4e:
5f:a3:c4:fa:41:40:b3:f3:ab:85:68:72:08:1a:c8:
e2:0b:41:5a:6c:e2:41:21:a5:74:a5:41:37:04:03:
5a:86:5e:76:ae:ee:e5:f0:55:93:7e:96:40:e2:20:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:76:11:24:99:2D:B7:DF:22:92:16:CF:CA:59:EF:0C:EE:F9:A9
X509v3 Authority Key Identifier:
keyid:E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2b:05:2b:27:1b:85:34:cd:6a:c4:ab:32:84:d0:56:af:58:
5a:ad:f5:f8:57:6c:8e:91:5c:11:25:4d:f7:d0:ac:06:af:96:
73:ff:b6:42:fe:7d:3e:09:12:49:ed:ca:3e:4e:bb:95:3c:95:
7d:2c:bd:59:f6:67:a6:5e:52:6c:a5:6a:64:0c:aa:f6:1d:ae:
65:52:39:73:b3:05:6d:a5:92:72:e7:70:96:1b:b8:13:36:37:
a3:bb:f9:2c:02:a8:72:5f:13:e6:c0:10:48:28:0c:9e:4a:a8:
b2:6e:9f:4d:3a:57:ae:73:a4:72:ea:7a:f6:8e:4d:25:a2:9b:
b1:a9:78:67:37:0b:47:9f:00:bf:fc:d0:fb:1f:7d:31:0a:69:
b2:c9:2f:62:01:ca:78:35:9e:fd:37:7d:d4:50:d6:b8:e8:b2:
ec:88:23:f2:6b:76:62:d6:56:55:b5:40:49:c3:c7:29:95:5a:
66:aa:a1:44:43:c9:b4:54:60:25:1e:12:cb:de:e7:51:0c:1d:
25:66:0e:89:ca:91:a6:55:cd:a8:fa:9c:e3:1f:a8:f3:b2:7a:
1b:80:60:cc:f5:03:27:29:8f:c6:26:93:f4:00:eb:09:15:94:
17:d3:84:43:c9:cd:4f:0a:6f:25:2b:0f:c1:da:b3:25:36:7b:
0c:bf:9c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:43:17 2026 by rpki-client