Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
File: EC342ADD81633658330112D2BF8B1DE3EE19F684.mft (raw, json)
Hash identifier: /S1orY95dlwA7ARiXTDNuUmsDURr9EsKK981o6gRLG8=
Subject key identifier: 01:82:F0:B4:EC:4B:49:36:1E:B6:DA:0D:EC:E8:BE:99:81:A4:96:EE
Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
Certificate issuer: /CN=ec342add81633658330112d2bf8b1de3ee19f684
Certificate serial: 63883DF3E630DADE547F5EA7943C34BCB0485770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
Manifest number: A3
Signing time: Fri 15 May 2026 03:15:03 +0000
Manifest this update: Fri 15 May 2026 03:10:03 +0000
Manifest next update: Sat 16 May 2026 07:02:03 +0000
Files and hashes: 1: AS214420.asa (hash: rBhnv0fmIQ5QImIxVDZoRShVH2YY2qokZq71xdb7POM=)
2: EC342ADD81633658330112D2BF8B1DE3EE19F684.crl (hash: GSAtHPrEN+zdQgQ0Z8PMsvUrWzFjzZggu4iE9t/ilE0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:88:3d:f3:e6:30:da:de:54:7f:5e:a7:94:3c:34:bc:b0:48:57:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684
Validity
Not Before: May 15 03:10:03 2026 GMT
Not After : May 16 07:02:03 2026 GMT
Subject: CN=0182F0B4EC4B49361EB6DA0DECE8BE9981A496EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:62:00:ee:5b:38:d9:57:9e:e2:b8:10:65:
7e:c6:43:08:83:87:6b:6e:92:ca:59:37:a8:16:c3:
94:6a:e4:67:cb:ea:0d:ba:34:fb:46:d3:34:04:4b:
33:8a:b1:a8:81:1d:b9:58:f2:cf:ea:6e:17:1e:3c:
17:3a:57:d8:ae:1b:bb:77:9b:28:96:fb:48:26:17:
4c:77:fd:40:3f:82:79:89:eb:13:94:fe:51:07:3c:
3f:8f:66:88:0b:a7:17:40:21:2a:19:35:17:ba:6b:
12:e0:39:37:b2:a3:bf:96:d4:49:68:c2:3e:80:d7:
fc:1d:a5:5e:91:0f:c8:53:e4:b9:10:84:ff:d3:38:
4f:ff:81:c1:a4:1e:58:20:5a:8f:f8:fc:3a:86:f2:
eb:17:82:46:1f:40:b3:2a:f0:86:f6:d7:55:78:a8:
3c:cd:83:9b:42:9f:f9:c9:f7:72:27:9d:30:e2:3f:
63:00:e9:e4:4e:5a:2e:46:1b:e8:51:fb:79:56:c6:
ef:1c:22:a3:5c:31:6c:03:80:0c:a6:49:02:ef:8c:
ad:e1:a0:c7:dd:ee:58:0f:67:6e:0d:f1:b3:01:cb:
d0:31:7b:67:a9:1e:1d:23:2c:5e:2a:d2:f8:a0:98:
a6:34:04:2e:84:71:05:e4:62:12:9e:53:ac:6c:5b:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:82:F0:B4:EC:4B:49:36:1E:B6:DA:0D:EC:E8:BE:99:81:A4:96:EE
X509v3 Authority Key Identifier:
keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4c:85:1a:ab:f8:73:73:2c:21:1b:ad:06:97:25:db:04:87:
9f:d5:31:94:2c:23:fe:44:a1:37:68:6e:f5:bd:73:55:33:af:
4d:27:9a:5f:45:0b:36:59:37:47:9f:db:40:d0:5e:4a:af:d8:
ca:d9:88:c4:4f:9a:f3:80:f1:62:4e:c8:b0:d5:c0:57:ed:37:
a9:03:e2:48:0e:52:30:7a:5a:7d:c8:2d:7f:0e:82:95:4f:b2:
27:26:13:55:7a:1a:c6:88:a3:c4:07:f8:33:ac:27:8c:63:31:
d5:f0:42:f6:f0:82:3f:a7:fc:c9:b1:41:38:8b:cf:0e:de:64:
7f:1e:b0:36:ba:10:97:62:5e:7f:08:50:e3:f8:df:c5:8f:91:
a1:b3:ae:d2:1e:b7:fa:86:e4:76:c9:29:0c:b6:e9:13:7f:d5:
52:d3:a2:16:e2:27:94:0d:4e:7e:3a:99:30:d1:aa:51:1c:75:
52:52:12:6e:6c:46:c2:78:e4:bc:19:d6:f8:0b:5c:3f:a5:1b:
7c:ab:d3:31:8f:5c:37:fb:ff:cb:35:a1:2a:8b:75:e0:36:c0:
4d:d5:d3:51:48:7e:78:8e:9d:04:3e:49:74:dc:10:0b:c3:7a:
68:36:20:8a:93:19:15:aa:0d:ce:3a:b1:d6:3e:60:d9:f9:3c:
ee:46:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:01 2026 by rpki-client