Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft
File: 09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft (raw, json)
Hash identifier: 8UfONxmmHAFiDaW1nVup9oRKgBWlG35ubHGrVnMhJ80=
Subject key identifier: 89:61:B5:4A:DD:B9:1A:7C:56:5D:30:CA:E7:3A:75:E6:FF:50:DA:F7
Authority key identifier: 09:FD:34:FF:68:36:F9:DD:01:AC:7F:DF:35:78:40:C7:52:BB:91:A5
Certificate issuer: /CN=09FD34FF6836F9DD01AC7FDF357840C752BB91A5
Certificate serial: 0D2E198D88C8CD207FDD8C26842F8BAC5F2B8EBD
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft
Manifest number: 23
Signing time: Thu 06 Aug 2026 19:59:45 +0000
Manifest this update: Thu 06 Aug 2026 19:54:45 +0000
Manifest next update: Fri 07 Aug 2026 23:01:45 +0000
Files and hashes: 1: 09FD34FF6836F9DD01AC7FDF357840C752BB91A5.crl (hash: dQWX3pQ7QxGNNr/8xWdutIa/eez67hN0I5XtfPYa3uw=)
2: 326131333a633863343a626630303a3a2f34302d3430203d3e20323134353536.roa (hash: My6Ab96b5F0+JldNWozhK3m+60cIdrnbbGOkb8nRtmc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:2e:19:8d:88:c8:cd:20:7f:dd:8c:26:84:2f:8b:ac:5f:2b:8e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09FD34FF6836F9DD01AC7FDF357840C752BB91A5
Validity
Not Before: Aug 6 19:54:45 2026 GMT
Not After : Aug 7 23:01:45 2026 GMT
Subject: CN=8961B54ADDB91A7C565D30CAE73A75E6FF50DAF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:60:7c:d5:ec:b9:88:bf:b1:35:7f:d2:47:
0e:d7:22:40:53:0c:1f:a3:c6:ca:39:30:fd:d8:af:
f1:c4:a5:50:4f:df:a1:d7:85:c6:0e:9f:58:eb:b9:
8d:d4:b7:76:02:73:d6:74:c1:25:8b:11:ed:21:f6:
f6:7e:8b:52:84:95:95:72:8f:c1:db:83:e1:bf:c2:
14:26:21:ca:04:93:dd:b0:e6:76:5e:a3:e1:c4:db:
7c:64:be:05:2c:ee:4a:ec:27:fc:ef:96:49:15:a5:
ae:12:54:7e:6b:67:b5:cb:e1:df:be:94:7c:ee:f6:
9d:15:e4:a4:3e:bb:70:e2:3d:2d:e1:9d:76:de:ab:
3e:fb:14:ad:09:5d:1e:1f:cd:3e:32:bc:08:cd:40:
81:34:8d:c1:80:10:44:91:5c:82:5a:c1:fc:66:cc:
b4:d1:55:5e:87:92:28:f6:f9:90:d5:25:bb:d6:b5:
2e:09:b5:a4:5c:56:c0:e9:87:a6:5d:fc:64:95:5b:
c0:d5:04:cf:1c:ca:48:4e:9b:3b:a0:b0:23:68:04:
d8:f0:a4:2f:4d:d2:d2:24:82:f3:77:d2:44:45:27:
ba:7a:26:83:77:ed:2a:0a:37:66:47:ca:fa:c6:28:
f9:85:a4:c7:49:12:03:62:11:37:a7:a1:49:19:67:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:B5:4A:DD:B9:1A:7C:56:5D:30:CA:E7:3A:75:E6:FF:50:DA:F7
X509v3 Authority Key Identifier:
keyid:09:FD:34:FF:68:36:F9:DD:01:AC:7F:DF:35:78:40:C7:52:BB:91:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:3a:15:98:93:1b:af:82:ce:e4:11:3d:57:c0:57:70:18:43:
ff:f6:2b:96:58:5c:43:8d:5e:33:a2:ab:d2:9b:b2:2a:5a:66:
5d:d0:07:3a:a5:d0:4b:45:75:7c:c0:ac:10:2d:2c:c2:3b:eb:
3c:08:3f:e2:c6:e3:8f:a0:d2:cc:ac:e3:91:38:fe:18:7a:c5:
b1:7f:88:10:05:f8:af:5a:1f:53:49:9b:ff:68:40:fc:ec:24:
5f:9e:d8:aa:98:5f:ed:1d:63:41:da:69:27:25:b5:94:8f:a2:
44:86:ef:1d:69:cf:ec:f9:66:8f:58:b1:dc:ab:36:8c:81:d5:
52:cf:e2:86:1f:dc:b2:8e:d4:7b:12:83:05:5c:3c:f0:f0:41:
41:09:cb:5d:f3:2a:29:93:30:9b:06:01:49:0c:b3:98:0d:87:
6a:6a:d5:c4:82:9b:de:9a:85:4c:6a:88:bd:c0:ea:30:06:99:
d3:ca:bc:4d:bf:60:37:91:af:e5:69:f7:a1:f0:19:71:ed:85:
71:34:ce:b5:e1:e0:b5:db:d3:fb:e7:ed:61:9b:7b:3e:e3:c9:
f0:02:6e:f3:de:d4:05:c6:35:b9:6c:81:1f:6b:d8:76:f1:3d:
be:90:c4:ea:60:48:c8:a4:62:ab:01:4b:b8:07:bc:27:50:80:
41:fe:aa:f2
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUDS4ZjYjIzSB/3YwmhC+LrF8rjr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlGRDM0RkY2ODM2RjlERDAxQUM3RkRGMzU3ODQwQzc1
MkJCOTFBNTAeFw0yNjA4MDYxOTU0NDVaFw0yNjA4MDcyMzAxNDVaMDMxMTAvBgNV
BAMTKDg5NjFCNTRBRERCOTFBN0M1NjVEMzBDQUU3M0E3NUU2RkY1MERBRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGo2B81ey5iL+xNX/SRw7XIkBT
DB+jxso5MP3Yr/HEpVBP36HXhcYOn1jruY3Ut3YCc9Z0wSWLEe0h9vZ+i1KElZVy
j8Hbg+G/whQmIcoEk92w5nZeo+HE23xkvgUs7krsJ/zvlkkVpa4SVH5rZ7XL4d++
lHzu9p0V5KQ+u3DiPS3hnXbeqz77FK0JXR4fzT4yvAjNQIE0jcGAEESRXIJawfxm
zLTRVV6Hkij2+ZDVJbvWtS4JtaRcVsDph6Zd/GSVW8DVBM8cykhOmzugsCNoBNjw
pC9N0tIkgvN30kRFJ7p6JoN37SoKN2ZHyvrGKPmFpMdJEgNiETenoUkZZxz7AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUiWG1St25GnxWXTDK5zp15v9Q2vcwHwYDVR0j
BBgwFoAUCf00/2g2+d0BrH/fNXhAx1K7kaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2JhNTAxZmEtNTlmMC00MDI3LWFlNDAtZmQ1MjU2Mzg5
YzI4LzIvMDlGRDM0RkY2ODM2RjlERDAxQUM3RkRGMzU3ODQwQzc1MkJCOTFBNS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh
ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8wOUZEMzRGRjY4MzZGOUREMDFBQzdGREYz
NTc4NDBDNzUyQkI5MUE1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2NiYTUwMWZhLTU5ZjAtNDAyNy1hZTQwLWZkNTI1NjM4OWMyOC8yLzA5RkQzNEZG
NjgzNkY5REQwMUFDN0ZERjM1Nzg0MEM3NTJCQjkxQTUubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDVOhWY
kxuvgs7kET1XwFdwGEP/9iuWWFxDjV4zoqvSm7IqWmZd0Ac6pdBLRXV8wKwQLSzC
O+s8CD/ixuOPoNLMrOOROP4YesWxf4gQBfivWh9TSZv/aED87CRfntiqmF/tHWNB
2mknJbWUj6JEhu8dac/s+WaPWLHcqzaMgdVSz+KGH9yyjtR7EoMFXDzw8EFBCctd
8yopkzCbBgFJDLOYDYdqatXEgpvemoVMaoi9wOowBpnTyrxNv2A3ka/lafeh8Blx
7YVxNM614eC129P75+1hm3s+48nwAm7z3tQFxjW5bIEfa9h28T2+kMTqYEjIpGKr
AUu4B7wnUIBB/qry
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:35:54 2026 by rpki-client