Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft
File: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft (raw, json)
Hash identifier: JCEcz99UnMhVjasAbrE7Bjvg9WHSCogRDBxpgFnZtbw=
Subject key identifier: FF:4A:D6:3B:2B:3F:60:29:F6:37:DA:E6:DD:1B:AA:38:DF:83:CA:5A
Authority key identifier: A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD
Certificate issuer: /CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD
Certificate serial: 6BA31A25D0088D6D97B6F2BCA9D7703103090F6D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft
Manifest number: A8
Signing time: Wed 12 Aug 2026 15:51:45 +0000
Manifest this update: Wed 12 Aug 2026 15:46:45 +0000
Manifest next update: Thu 13 Aug 2026 17:13:45 +0000
Files and hashes: 1: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl (hash: A20idwZ6ah8LL50pfk82/vfJGvTKH/kczOwlKohv5v0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a3:1a:25:d0:08:8d:6d:97:b6:f2:bc:a9:d7:70:31:03:09:0f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD
Validity
Not Before: Aug 12 15:46:45 2026 GMT
Not After : Aug 13 17:13:45 2026 GMT
Subject: CN=FF4AD63B2B3F6029F637DAE6DD1BAA38DF83CA5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:65:d0:5a:c2:51:2c:f1:d7:a6:33:11:17:
77:a1:7d:53:91:c3:e9:a9:6b:ec:8f:e9:56:9c:b4:
87:39:7f:09:98:55:d4:4b:17:3a:bb:4f:e5:c9:b3:
ca:13:b2:2c:7a:34:7c:d0:ba:da:24:de:47:a4:e8:
bc:e4:32:19:f6:2c:20:b7:3f:0b:b3:11:bd:12:72:
31:3f:f6:90:10:38:43:12:71:eb:3b:bf:1f:d8:8e:
2c:ea:d9:3b:bb:b3:d5:83:df:63:ed:98:fb:d0:59:
2b:f9:94:5a:a7:d1:9a:62:7d:cb:44:c3:ff:71:6a:
01:82:02:dd:1e:23:77:3b:58:14:92:85:59:27:a4:
8c:56:f4:f4:9a:cb:36:ac:eb:6f:cb:53:be:af:c1:
1a:15:9c:58:88:80:35:f7:75:c9:8e:66:1a:5e:00:
e5:d4:e6:47:12:2d:d1:1f:dd:27:7b:c4:07:22:10:
0d:ff:cd:6a:8b:2b:f1:74:25:68:1e:30:ba:08:d1:
83:d7:d8:0f:47:8b:20:57:c4:de:91:55:5b:1e:ef:
c4:eb:3d:67:6c:a2:ff:97:fd:18:d5:1e:80:af:3d:
96:64:fd:57:e4:ae:31:ab:01:e6:29:0f:b8:0c:9b:
83:49:70:ca:0a:4c:34:92:f5:1d:c1:f8:52:72:64:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4A:D6:3B:2B:3F:60:29:F6:37:DA:E6:DD:1B:AA:38:DF:83:CA:5A
X509v3 Authority Key Identifier:
keyid:A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:83:21:ce:2e:33:61:86:5d:29:02:29:00:57:3a:f8:eb:dc:
f3:c4:a6:45:fc:b2:ec:5d:67:96:3f:85:9f:2e:b3:63:db:6d:
76:97:ec:53:11:85:25:71:0e:4a:ae:f3:e6:1e:f9:c4:d1:01:
3e:ad:85:a2:a2:45:6f:53:fd:d7:81:09:db:45:6b:d1:01:2b:
d8:56:91:2e:c1:02:c3:5c:69:bd:90:ba:1f:eb:39:f2:2c:2b:
08:30:25:d4:78:11:42:52:27:d3:81:cc:32:e2:86:77:79:a8:
c0:0d:cd:2f:0a:69:11:ac:37:cd:dd:c5:55:85:bc:f3:ed:e3:
42:71:51:4c:56:1a:d0:fd:e4:bf:4d:6d:e0:29:6a:29:b0:1c:
5f:a3:cf:f4:29:f6:8f:af:50:ad:56:27:02:2b:25:f3:59:90:
90:4b:b2:c4:ac:f7:a8:06:44:73:29:41:6c:c7:57:1e:a2:7c:
3c:b2:c8:7f:1b:ad:9f:f5:fe:d7:15:5e:1e:5e:14:5e:02:9c:
5f:e8:3f:6e:0c:51:20:ad:98:8d:ec:9a:a7:13:87:b0:ef:7f:
ff:6c:97:5a:ac:87:0b:b0:9f:b1:c6:83:eb:58:88:9d:77:55:
0c:c0:8f:d6:bd:14:da:59:d7:e6:94:32:a0:d2:40:ab:31:14:
ab:ab:c4:d6
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUa6MaJdAIjW2XtvK8qddwMQMJD20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZF
NjIwRkVBRDAeFw0yNjA4MTIxNTQ2NDVaFw0yNjA4MTMxNzEzNDVaMDMxMTAvBgNV
BAMTKEZGNEFENjNCMkIzRjYwMjlGNjM3REFFNkREMUJBQTM4REY4M0NBNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGC2XQWsJRLPHXpjMRF3ehfVOR
w+mpa+yP6VactIc5fwmYVdRLFzq7T+XJs8oTsix6NHzQutok3kek6LzkMhn2LCC3
PwuzEb0ScjE/9pAQOEMSces7vx/Yjizq2Tu7s9WD32PtmPvQWSv5lFqn0ZpifctE
w/9xagGCAt0eI3c7WBSShVknpIxW9PSayzas62/LU76vwRoVnFiIgDX3dcmOZhpe
AOXU5kcSLdEf3Sd7xAciEA3/zWqLK/F0JWgeMLoI0YPX2A9HiyBXxN6RVVse78Tr
PWdsov+X/RjVHoCvPZZk/VfkrjGrAeYpD7gMm4NJcMoKTDSS9R3B+FJyZI8XAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU/0rWOys/YCn2N9rm3RuqON+DylowHwYDVR0j
BBgwFoAUouQchNj4z1G1ux44VoN5D+Yg/q0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEw
M2Y4LzAvQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZFNjIwRkVBRC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4
YTgtOTc5My0zM2VlYzA2N2NlMzkvMy9BMkU0MUM4NEQ4RjhDRjUxQjVCQjFFMzg1
NjgzNzkwRkU2MjBGRUFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2NmODRmMmYyLTQ2NzMtNDRlNi1hYzIzLTdmZjk1NGExMDNmOC8wL0EyRTQxQzg0
RDhGOENGNTFCNUJCMUUzODU2ODM3OTBGRTYyMEZFQUQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBigyHO
LjNhhl0pAikAVzr469zzxKZF/LLsXWeWP4WfLrNj2212l+xTEYUlcQ5KrvPmHvnE
0QE+rYWiokVvU/3XgQnbRWvRASvYVpEuwQLDXGm9kLof6znyLCsIMCXUeBFCUifT
gcwy4oZ3eajADc0vCmkRrDfN3cVVhbzz7eNCcVFMVhrQ/eS/TW3gKWopsBxfo8/0
KfaPr1CtVicCKyXzWZCQS7LErPeoBkRzKUFsx1ceonw8ssh/G62f9f7XFV4eXhRe
Apxf6D9uDFEgrZiN7JqnE4ew73//bJdarIcLsJ+xxoPrWIidd1UMwI/WvRTaWdfm
lDKg0kCrMRSrq8TW
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:47:32 2026 by rpki-client