Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
File: EC342ADD81633658330112D2BF8B1DE3EE19F684.mft (raw, json)
Hash identifier: 6BpVrEep0gmWgP/DKJvhsR84foHLZfLBDqCDHPRaSxY=
Subject key identifier: 7A:5D:C2:B1:79:5E:08:CF:70:5E:2A:DC:D2:2E:0A:23:FD:4E:4C:16
Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
Certificate issuer: /CN=ec342add81633658330112d2bf8b1de3ee19f684
Certificate serial: 564A413357F959C0FF8E2029447F69419EDF2554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
Manifest number: 65
Signing time: Sun 29 Mar 2026 00:08:57 +0000
Manifest this update: Sun 29 Mar 2026 00:03:57 +0000
Manifest next update: Mon 30 Mar 2026 01:32:57 +0000
Files and hashes: 1: EC342ADD81633658330112D2BF8B1DE3EE19F684.crl (hash: AVbzi+1aRPgintZz8zIUNkx3EsT/IoNkSqnPc+Pc3OI=)
2: AS214420.asa (hash: rBhnv0fmIQ5QImIxVDZoRShVH2YY2qokZq71xdb7POM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:4a:41:33:57:f9:59:c0:ff:8e:20:29:44:7f:69:41:9e:df:25:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684
Validity
Not Before: Mar 29 00:03:57 2026 GMT
Not After : Mar 30 01:32:57 2026 GMT
Subject: CN=7A5DC2B1795E08CF705E2ADCD22E0A23FD4E4C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:64:23:e9:2d:81:f9:3d:cf:89:ad:5f:9c:
b9:a1:e9:b1:d1:f8:9d:c9:51:4d:3c:8e:05:f8:d3:
ab:53:01:31:02:02:8c:77:cf:25:f3:b6:8f:0a:4b:
59:4c:e1:cf:65:b2:c8:f4:34:97:3d:31:d8:58:dc:
7b:b2:94:3f:f4:2d:1f:a1:0d:f9:78:19:57:c4:8e:
51:a5:6b:65:21:2b:cf:4f:1e:51:b6:e1:82:2e:d1:
1f:e8:65:52:e5:f9:e3:cf:49:10:60:b8:53:dd:22:
6f:28:b0:40:98:e3:1e:d9:eb:3f:f0:6d:00:a7:30:
70:33:49:fd:c0:a2:a8:37:d8:3d:85:2a:f7:4b:b4:
e8:d7:dc:b8:58:65:b3:1b:65:86:ad:89:5e:a1:64:
3d:c4:87:76:dd:31:c1:33:f1:d5:07:20:cb:2f:3e:
dd:82:13:09:0b:1c:b0:10:b5:e2:c8:bb:f2:e2:5d:
48:86:f9:87:31:07:3a:6f:da:2f:dc:d2:51:02:c0:
5d:6c:07:6f:65:45:f2:e5:5f:1b:8f:59:86:68:1a:
df:3e:3b:bf:ee:dc:c7:44:98:d9:f6:b5:4a:32:29:
bc:37:3f:0e:33:b6:25:4d:43:b2:2e:f2:f3:ba:19:
fd:13:67:20:2f:40:35:39:75:e3:6b:f4:74:c7:83:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5D:C2:B1:79:5E:08:CF:70:5E:2A:DC:D2:2E:0A:23:FD:4E:4C:16
X509v3 Authority Key Identifier:
keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:50:90:cd:d8:e2:4e:a6:53:95:21:91:7a:a0:31:ab:85:db:
14:be:fe:4e:ac:c4:c4:46:9b:ba:b1:c1:7a:2d:28:d0:f0:d8:
28:af:80:51:46:23:eb:e8:f1:78:c9:99:e9:38:6f:cc:1e:1d:
a4:5d:d2:6c:00:a4:9e:cc:9b:4c:26:07:f5:77:e6:64:e4:17:
f6:d9:9a:76:4e:df:88:4d:36:df:de:d2:cc:c1:97:3e:e7:8f:
8c:2d:59:06:a1:cc:4a:74:61:16:2f:0c:5e:ca:a0:31:4c:85:
c7:59:a5:4c:3b:3b:09:a8:37:87:5e:3e:93:29:68:2a:df:c4:
98:5f:b9:b6:1b:cd:45:d6:46:53:80:ed:05:7d:53:6e:99:fa:
0b:3f:a5:6e:cb:d4:96:87:5e:1a:39:dd:56:03:30:f9:e8:b4:
2d:8c:e0:a4:8b:0a:68:64:1f:ad:7b:48:1c:ff:1b:e7:98:40:
ab:29:f4:1b:0b:3d:ad:30:5f:d6:d1:90:10:cb:70:c4:f4:5f:
fb:33:db:25:1e:86:f1:bc:40:89:f5:76:cb:37:98:34:04:79:
a0:8e:6e:78:45:19:00:aa:a4:01:fe:97:74:12:95:3b:57:b5:
7c:c2:eb:ff:2b:88:60:81:0f:a8:61:6a:7d:9b:88:50:7f:b9:
a8:4a:8a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:44 2026 by rpki-client