Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft
File: DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft (raw, json)
Hash identifier: ulbgv592IXMdpeELXFBE/Se5zw/oar4sN5T2Q2atGA8=
Subject key identifier: B6:75:36:75:7A:5F:2F:D0:BD:26:75:9D:7C:D8:3C:A2:F8:18:9A:AF
Authority key identifier: DC:98:4B:AE:2D:6E:E5:48:FC:80:6D:CE:CD:40:2B:71:C7:37:34:A0
Certificate issuer: /CN=dc984bae2d6ee548fc806dcecd402b71c73734a0
Certificate serial: 6280C1BC9C39DDE2351406CA20CECA6464D1F34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JhLri1u5Uj8gG3OzUArccc3NKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft
Manifest number: A9
Signing time: Wed 12 Aug 2026 13:11:23 +0000
Manifest this update: Wed 12 Aug 2026 13:06:23 +0000
Manifest next update: Thu 13 Aug 2026 15:15:23 +0000
Files and hashes: 1: DC984BAE2D6EE548FC806DCECD402B71C73734A0.crl (hash: lAZjfQH02DDKR1ZcVnYSs2tsi1aBQGAveFDVuNUMgAY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:80:c1:bc:9c:39:dd:e2:35:14:06:ca:20:ce:ca:64:64:d1:f3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc984bae2d6ee548fc806dcecd402b71c73734a0
Validity
Not Before: Aug 12 13:06:23 2026 GMT
Not After : Aug 13 15:15:23 2026 GMT
Subject: CN=B67536757A5F2FD0BD26759D7CD83CA2F8189AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:12:c4:d4:c1:a5:45:41:13:57:18:18:f7:
05:94:92:ce:d3:ee:e8:f1:3d:21:e5:4a:32:9e:92:
03:04:36:99:c0:aa:7d:c7:8f:93:14:ef:83:3a:68:
89:8f:94:fb:f0:f5:70:df:9c:3e:44:10:be:b7:07:
38:e6:0a:04:55:68:5b:5e:4a:6f:bb:1c:94:40:ee:
cc:9d:ed:b3:75:9d:a9:54:9b:b7:f6:f3:84:36:dc:
f7:e1:6f:71:bb:e5:ed:74:5f:2a:fe:af:5e:b0:57:
4b:25:1d:d5:61:44:75:ad:4a:44:28:89:65:da:4d:
1c:89:3b:b2:4e:90:2e:90:35:f3:07:c9:17:63:d5:
f2:61:44:27:dd:27:93:8e:69:56:cb:77:58:b3:5a:
67:60:6d:6b:b5:cb:15:f0:2a:a5:a9:d4:f0:7f:56:
ef:f6:7b:df:0b:7f:b8:ae:0b:25:f1:9e:a5:19:e6:
fb:d6:85:d4:88:dd:5d:a3:e3:2a:0f:80:3f:e5:74:
5d:74:dc:b4:95:1a:d8:9f:5d:f8:31:17:fc:fd:0c:
72:9e:98:a5:bf:1e:eb:e2:00:45:a8:d8:ce:00:dd:
22:25:19:1e:3a:1a:97:a9:9e:07:fd:fd:7b:cc:66:
cb:ab:50:e9:9c:6c:02:e5:ab:f4:f3:33:2f:fa:d8:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:75:36:75:7A:5F:2F:D0:BD:26:75:9D:7C:D8:3C:A2:F8:18:9A:AF
X509v3 Authority Key Identifier:
keyid:DC:98:4B:AE:2D:6E:E5:48:FC:80:6D:CE:CD:40:2B:71:C7:37:34:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JhLri1u5Uj8gG3OzUArccc3NKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:86:59:ab:45:60:b4:2c:b4:68:ce:86:3c:2f:6c:ff:cd:09:
f7:36:92:66:93:7a:af:48:2f:20:4d:93:98:e9:de:a5:d2:a8:
cf:07:71:15:eb:fc:d9:64:c2:ef:63:4a:3d:64:fb:2f:b1:39:
b1:59:9d:32:9d:7a:05:b3:45:04:a1:4d:40:64:5d:ce:00:34:
55:b6:0e:7b:ab:68:59:a4:c5:0b:6a:18:36:21:a8:5c:fe:f9:
f0:73:61:50:be:07:a1:76:83:23:de:65:af:81:9a:ce:9b:65:
55:23:c1:5e:1d:8c:c1:66:51:aa:11:0d:dc:a6:36:cb:91:48:
76:15:73:b3:24:af:06:d9:73:16:dd:e6:bf:67:2b:fb:50:4b:
e3:5a:c5:f5:04:42:26:78:ad:8e:b8:8e:9c:bc:13:7f:c0:02:
23:08:84:e0:2c:2c:62:9c:46:04:98:91:d5:d7:7c:37:7a:14:
cd:7b:4b:ed:f7:b5:61:ef:8d:69:d4:80:be:4c:eb:ce:7b:12:
21:06:67:39:8a:a9:47:25:7e:75:9f:ad:b6:54:91:7d:e7:be:
1d:6a:c1:f5:de:81:64:79:f8:c6:43:72:0b:4e:41:30:7c:7c:
cb:85:f1:57:29:2f:92:ff:e1:5f:83:63:c0:de:cd:86:ff:4e:
d5:4b:94:7a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYoDBvJw53eI1FAbKIM7KZGTR80owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5ODRiYWUyZDZlZTU0OGZjODA2ZGNlY2Q0MDJiNzFj
NzM3MzRhMDAeFw0yNjA4MTIxMzA2MjNaFw0yNjA4MTMxNTE1MjNaMDMxMTAvBgNV
BAMTKEI2NzUzNjc1N0E1RjJGRDBCRDI2NzU5RDdDRDgzQ0EyRjgxODlBQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTBLE1MGlRUETVxgY9wWUks7T
7ujxPSHlSjKekgMENpnAqn3Hj5MU74M6aImPlPvw9XDfnD5EEL63BzjmCgRVaFte
Sm+7HJRA7syd7bN1nalUm7f284Q23Pfhb3G75e10Xyr+r16wV0slHdVhRHWtSkQo
iWXaTRyJO7JOkC6QNfMHyRdj1fJhRCfdJ5OOaVbLd1izWmdgbWu1yxXwKqWp1PB/
Vu/2e98Lf7iuCyXxnqUZ5vvWhdSI3V2j4yoPgD/ldF103LSVGtifXfgxF/z9DHKe
mKW/HuviAEWo2M4A3SIlGR46Gpepngf9/XvMZsurUOmcbALlq/TzMy/62IQxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUtnU2dXpfL9C9JnWdfNg8ovgYmq8wHwYDVR0j
BBgwFoAU3JhLri1u5Uj8gG3OzUArccc3NKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEw
M2Y4LzEvREM5ODRCQUUyRDZFRTU0OEZDODA2RENFQ0Q0MDJCNzFDNzM3MzRBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKaExyaTF1NVVqOGdHM096VUFyY2Nj
M05LQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZjg0ZjJmMi00
NjczLTQ0ZTYtYWMyMy03ZmY5NTRhMTAzZjgvMS9EQzk4NEJBRTJENkVFNTQ4RkM4
MDZEQ0VDRDQwMkI3MUM3MzczNEEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYZZq0VgtCy0aM6GPC9s
/80J9zaSZpN6r0gvIE2TmOnepdKozwdxFev82WTC72NKPWT7L7E5sVmdMp16BbNF
BKFNQGRdzgA0VbYOe6toWaTFC2oYNiGoXP758HNhUL4HoXaDI95lr4GazptlVSPB
Xh2MwWZRqhEN3KY2y5FIdhVzsySvBtlzFt3mv2cr+1BL41rF9QRCJnitjriOnLwT
f8ACIwiE4CwsYpxGBJiR1dd8N3oUzXtL7fe1Ye+NadSAvkzrznsSIQZnOYqpRyV+
dZ+ttlSRfee+HWrB9d6BZHn4xkNyC05BMHx8y4XxVykvkv/hX4NjwN7Nhv9O1UuU
eg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:29:31 2026 by rpki-client