Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
File: EC342ADD81633658330112D2BF8B1DE3EE19F684.mft (raw, json)
Hash identifier: 5GLsDoGkt1aKPFWr3YY8lY5h0E7ieO6Ky7kR8vRHBYM=
Subject key identifier: 4F:3C:8B:F7:0F:C5:C3:25:7C:23:97:32:B9:A8:1D:DF:25:54:33:10
Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
Certificate issuer: /CN=ec342add81633658330112d2bf8b1de3ee19f684
Certificate serial: 060547121AEB4735E1A744649317137D366A946C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
Manifest number: E2
Signing time: Sun 28 Jun 2026 16:45:44 +0000
Manifest this update: Sun 28 Jun 2026 16:40:44 +0000
Manifest next update: Mon 29 Jun 2026 18:20:44 +0000
Files and hashes: 1: AS214420.asa (hash: SKqjlhpYP9KMOWA5T/76smdcLt7PL/G11UEsEyYsQFM=)
2: EC342ADD81633658330112D2BF8B1DE3EE19F684.crl (hash: bG67f+ga95hUiY1wL8QDZQTIFHtE7GSzifh/3x2V7Ls=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 18:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:05:47:12:1a:eb:47:35:e1:a7:44:64:93:17:13:7d:36:6a:94:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684
Validity
Not Before: Jun 28 16:40:44 2026 GMT
Not After : Jun 29 18:20:44 2026 GMT
Subject: CN=4F3C8BF70FC5C3257C239732B9A81DDF25543310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:38:65:b8:0e:47:ce:22:96:12:f1:bc:6e:
b6:46:ad:a3:55:69:89:de:26:6b:1a:ce:fc:59:f6:
88:e0:d9:04:74:49:e2:ce:58:cf:af:5f:f3:c7:3d:
0d:61:01:cd:63:29:d0:9f:57:bf:c0:5c:0a:cd:e1:
00:61:a9:3b:43:a4:35:f0:05:88:b7:45:2b:d9:99:
3b:99:f9:df:5b:47:08:d7:ab:be:a5:19:36:e9:6e:
ba:f2:2f:dc:a8:fa:14:4d:ca:f9:d4:f5:73:f4:d8:
19:23:9f:08:b5:ae:7a:57:ad:6f:68:ad:9a:aa:61:
7b:85:3a:df:f6:d7:e7:56:43:b7:97:d7:8e:f7:81:
54:58:50:91:6f:a8:e9:f9:8c:a2:1d:89:19:01:4b:
99:8d:08:2f:7a:0e:6e:b5:92:a1:f9:0b:3f:fd:f9:
36:b5:5f:18:cc:3e:fe:4b:37:b1:fb:0f:0a:1b:99:
1c:13:a3:7c:95:f1:f4:80:b1:f8:3d:95:c5:c3:e9:
d1:eb:c7:1b:76:0f:c4:4f:26:90:f3:82:e3:b3:08:
1b:6d:f0:43:c3:7e:9d:58:dc:24:32:73:e5:bd:9c:
e2:96:74:d0:ed:c1:06:51:9d:bc:75:3d:50:78:e0:
5f:5e:da:b4:fa:5d:ab:f3:da:21:8f:0d:0e:aa:54:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3C:8B:F7:0F:C5:C3:25:7C:23:97:32:B9:A8:1D:DF:25:54:33:10
X509v3 Authority Key Identifier:
keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d5:4b:e3:53:39:62:a3:91:0e:97:e0:cd:e7:8b:78:32:8b:
1b:40:2f:a3:ea:a9:f0:83:e4:b9:ff:ea:77:c8:1c:8c:f7:e0:
47:d8:45:01:db:20:06:eb:d8:54:be:c9:c6:5d:5e:71:ee:bf:
64:46:5e:f6:33:0f:12:00:fe:2b:da:69:88:05:59:20:ad:3e:
34:f0:23:c0:0b:d1:b4:14:2d:18:e5:c6:76:58:a7:ae:64:a2:
c1:61:5f:8e:0e:48:bf:44:95:92:f6:91:9e:9e:ef:04:1c:dc:
ac:c4:29:4b:da:a0:64:9a:a1:4d:85:e0:3e:b8:57:a3:14:2c:
07:45:53:68:77:3e:13:8b:0e:4b:0f:cd:ed:e6:81:d6:49:ed:
cd:05:4a:8c:38:1a:2a:11:85:82:ba:fe:92:81:06:3b:02:21:
e6:aa:06:82:10:10:be:e6:d9:79:57:b3:fd:5b:39:30:d8:b3:
16:71:21:ed:9b:d3:fd:66:98:57:2d:a0:d8:4b:7c:cb:55:cd:
25:b7:37:20:e9:6b:3f:fa:a8:b5:4c:e0:3c:c6:aa:86:96:80:
ac:a4:7c:2d:9c:7c:a2:81:86:51:05:34:03:a2:6e:a3:c3:9d:
ed:a0:54:aa:e8:21:50:11:f0:f9:90:12:bb:d5:7c:1c:1e:8f:
6b:de:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:39:55 2026 by rpki-client