Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: mN4u266WLWMHHHBpyI77mpUU+Gb5HzIrq/yOQaOZJQs=
Subject key identifier: 43:88:59:3A:41:57:20:31:88:CB:EC:C0:A5:E5:37:19:BB:FC:5D:1E
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 1A0370142D97C9A294984337EC7AE0698330F6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 058D
Signing time: Sun 29 Mar 2026 13:07:19 +0000
Manifest this update: Sun 29 Mar 2026 13:02:19 +0000
Manifest next update: Mon 30 Mar 2026 15:28:19 +0000
Files and hashes: 1: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=)
2: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: pNfQ6sEpglXHz4tMaey+cENoqdmUZY90cdaxjGhDB14=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:03:70:14:2d:97:c9:a2:94:98:43:37:ec:7a:e0:69:83:30:f6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: Mar 29 13:02:19 2026 GMT
Not After : Mar 30 15:28:19 2026 GMT
Subject: CN=4388593A4157203188CBECC0A5E53719BBFC5D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:37:ba:39:6f:fe:76:42:04:98:be:ba:2a:
9a:3d:e6:fc:b0:f8:f6:66:7c:34:93:50:81:02:c7:
54:b6:e5:3b:7c:5d:f4:e8:f8:06:0b:67:2e:ab:99:
3d:cf:0d:79:f6:ae:74:d5:64:8b:2e:43:59:7e:77:
39:8e:66:2c:41:f6:b6:7f:5e:71:ec:13:23:77:f9:
9c:10:01:01:ef:a2:8a:43:2c:54:13:46:a3:fe:93:
d7:ab:dc:eb:82:18:90:54:33:7e:c6:47:74:ff:06:
50:f4:72:46:33:93:7c:b4:77:a1:51:96:ca:a0:6b:
94:1e:7d:39:3b:0c:40:c6:4c:60:f1:50:b3:76:50:
40:9d:12:b2:d4:5f:a4:d4:5f:e5:c2:72:f0:98:96:
03:21:da:28:08:4f:8c:9b:b9:59:e4:cf:4e:01:f1:
63:a1:f2:47:4c:55:3f:67:d3:7d:c9:ac:35:87:d7:
42:f0:e1:43:fa:4a:8d:f9:67:04:81:da:44:d3:96:
03:a2:75:c0:9c:a1:5d:f2:ef:d8:e9:cc:45:39:5e:
53:3f:6a:8b:cd:f0:66:6d:fb:87:6c:e6:33:7f:d2:
1c:0d:6d:38:82:a8:98:3f:4c:c8:e6:e6:3b:b2:7a:
f2:0b:65:7e:ea:15:3b:cf:cb:3a:c8:c0:cf:0f:32:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:88:59:3A:41:57:20:31:88:CB:EC:C0:A5:E5:37:19:BB:FC:5D:1E
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fd:da:46:17:6a:ca:ef:f2:fc:62:f9:c3:47:00:cb:ca:a8:
19:47:5d:0b:e8:4a:db:40:28:6e:7f:31:bc:b6:ba:81:d3:67:
3e:90:9e:b1:66:de:e6:fc:e8:d0:e6:49:9b:89:c7:6d:93:b7:
c4:53:7f:4a:75:bb:e9:8d:7c:c3:06:b7:e9:23:dc:82:84:6a:
9c:d7:44:b3:d2:0e:81:9f:c1:74:58:7e:37:71:3f:11:21:c4:
3e:e5:0b:c9:ee:32:91:7d:ee:4f:c6:77:4f:14:15:7b:8d:5a:
aa:5f:49:99:46:d7:20:b4:57:d1:d6:9c:1c:14:01:08:af:b2:
2d:83:4b:3b:37:c7:bb:c4:69:a9:c3:90:fc:9b:9a:ee:f2:7b:
0d:d3:45:93:1d:8a:79:c9:90:89:53:2d:bd:0b:5e:88:b4:08:
2e:c3:57:7c:0a:ce:7d:00:ee:81:74:0f:9a:58:00:80:88:14:
0a:f1:fb:73:c3:b0:3e:e9:ce:a3:e3:30:64:28:cd:a5:80:88:
8e:1b:c4:f8:68:c1:0b:80:c2:9e:57:cf:cd:f8:65:41:de:e2:
31:25:54:96:52:1e:11:a1:a9:c1:fa:61:08:f0:91:4b:de:23:
28:1d:fb:da:4c:31:31:f9:20:3b:26:63:7a:65:05:3e:72:a9:
7e:84:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:32 2026 by rpki-client