Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft
File: 8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft (raw, json)
Hash identifier: w16vmGv1NAB9jWQAP8POwyo4P8tT4tEw9xk2xzmGwAc=
Subject key identifier: 12:B8:27:EF:3E:D6:3E:EB:40:F7:2A:0B:68:A7:16:63:EE:A8:47:7D
Authority key identifier: 8C:5B:75:AE:E1:ED:7E:37:D4:4B:FA:69:53:6F:BD:F2:0E:6D:37:85
Certificate issuer: /CN=8c5b75aee1ed7e37d44bfa69536fbdf20e6d3785
Certificate serial: 275747B42FDB95B45C6A6AA087DEDDC86C94F83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft
Manifest number: 3E
Signing time: Thu 08 Jan 2026 09:45:33 +0000
Manifest this update: Thu 08 Jan 2026 09:40:33 +0000
Manifest next update: Fri 09 Jan 2026 11:27:33 +0000
Files and hashes: 1: 8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.crl (hash: zAqoHxcorTkijOINX0SZqQVrpci1JXHTIc7P5/tumLk=)
2: AS206604.asa (hash: GOPuu8bgnldHrckSs2Q/SEKwJoj9qi/IuuwYKQTXkfM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:57:47:b4:2f:db:95:b4:5c:6a:6a:a0:87:de:dd:c8:6c:94:f8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c5b75aee1ed7e37d44bfa69536fbdf20e6d3785
Validity
Not Before: Jan 8 09:40:33 2026 GMT
Not After : Jan 9 11:27:33 2026 GMT
Subject: CN=12B827EF3ED63EEB40F72A0B68A71663EEA8477D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:c4:3c:9e:0f:99:7f:2d:d5:8e:6b:6e:c1:
e7:c3:7e:5f:65:3b:17:9c:41:e6:6a:35:01:66:0b:
ea:c5:48:b1:33:0b:57:69:c9:77:f6:85:91:8a:1c:
9d:7f:42:f6:a6:fe:69:eb:23:0c:5d:6b:12:b5:4c:
1d:0c:c6:21:ab:60:19:a6:19:f0:a0:8a:5e:7e:3b:
39:6b:45:bd:eb:0f:97:1d:4d:da:19:14:2e:17:d2:
db:e7:f6:c3:fc:2c:de:15:8e:e9:6c:9a:2d:ec:40:
b3:de:c8:50:40:ca:f3:6b:bd:a3:c0:9c:b3:62:09:
5f:31:d0:21:99:ca:27:f6:5e:68:ff:79:fc:ed:72:
44:90:34:98:ba:59:3f:79:c7:c6:07:ef:4a:79:5c:
50:ef:8d:89:49:84:47:0e:f1:ef:c9:a8:9c:e4:3f:
60:24:d1:be:ba:4f:6f:19:bf:d2:e4:ef:54:79:f6:
af:af:91:aa:20:94:ba:d2:64:25:dc:ad:11:0a:87:
29:af:b7:e6:ed:a2:32:94:68:dd:71:21:e0:74:81:
40:88:89:78:da:25:bc:4e:2f:1b:b1:59:1f:ff:c0:
9f:09:53:71:22:bd:6c:6e:2d:3b:19:d9:28:1c:e6:
8a:de:7a:50:54:4e:7a:b3:80:67:b0:a1:b2:a1:6e:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B8:27:EF:3E:D6:3E:EB:40:F7:2A:0B:68:A7:16:63:EE:A8:47:7D
X509v3 Authority Key Identifier:
keyid:8C:5B:75:AE:E1:ED:7E:37:D4:4B:FA:69:53:6F:BD:F2:0E:6D:37:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0d:72:74:34:cb:a7:ca:ab:98:75:e7:df:bd:29:0d:a5:ea:
1f:08:5d:9a:ed:47:cd:4a:f5:ce:7d:c4:82:4a:3b:32:db:b9:
5d:4e:4a:0b:d7:5d:82:d5:22:d3:9f:2f:8f:73:3b:e5:41:43:
dc:a9:34:ee:4c:e6:e4:a4:73:86:8c:5d:22:a3:69:6d:66:14:
14:16:db:ce:c9:37:08:da:aa:06:61:6d:84:4a:df:7e:0e:34:
6c:50:91:5a:6e:45:14:99:8f:14:67:ff:a2:8f:be:c9:d9:2a:
62:99:19:63:80:f0:9f:8b:68:46:fd:4e:d8:67:cb:4c:f1:38:
a0:90:07:2a:6e:05:09:67:fc:b4:26:75:af:51:17:e9:1e:c6:
eb:0c:b6:a7:9d:db:a6:b0:5a:81:1f:d2:74:ab:3d:94:d3:ad:
d2:e5:a4:2b:20:60:ac:cc:35:56:80:49:98:e3:e6:5d:10:95:
db:f5:62:b7:55:fa:aa:f1:52:cc:3f:6a:79:be:30:06:da:28:
b0:a9:df:0b:90:96:51:13:c7:8f:cf:bd:31:7b:10:fc:d6:5d:
05:09:1d:50:41:a9:e3:45:6e:7c:93:1a:f6:7f:6f:0c:c0:df:
da:2b:48:48:d9:b1:15:e4:f6:70:0f:2a:51:f5:05:34:e4:0a:
7e:81:78:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 08:52:06 2026 by rpki-client