Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft
File: ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft (raw, json)
Hash identifier: Ktg4DRWihclwbZJGAL9gEWuA3wBAlnLpwvgS05g3PGU=
Subject key identifier: 3C:9B:29:00:D7:DD:DA:CE:AD:7B:FB:56:43:2F:2D:02:4D:A0:45:89
Authority key identifier: AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A
Certificate issuer: /CN=ABEF0C2BE1BCA726596C21ED132649A7A343041A
Certificate serial: 79A881242BF37C5917ACA48F836D2E5E13F9CB82
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft
Manifest number: 22
Signing time: Wed 12 Aug 2026 11:11:22 +0000
Manifest this update: Wed 12 Aug 2026 11:06:22 +0000
Manifest next update: Thu 13 Aug 2026 14:14:22 +0000
Files and hashes: 1: AS153376.asa (hash: qSFjPv5Y9UIQey6MGVXcJC9rAEGtqksU46nadpOYLLw=)
2: ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl (hash: EW6NQrHWkOPgM4QD6ZPIHITiEfQrnW6OwgpoEzk3eAw=)
3: 323430363a3834303a653630303a3a2f34342d3438203d3e20313533333736.roa (hash: T+DNXjQMMXpH68tGwE1BkA1mNFVvRXhA5dKMe9sTdUg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:a8:81:24:2b:f3:7c:59:17:ac:a4:8f:83:6d:2e:5e:13:f9:cb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABEF0C2BE1BCA726596C21ED132649A7A343041A
Validity
Not Before: Aug 12 11:06:22 2026 GMT
Not After : Aug 13 14:14:22 2026 GMT
Subject: CN=3C9B2900D7DDDACEAD7BFB56432F2D024DA04589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:6e:c5:a8:07:ef:21:dc:52:91:d5:70:93:
14:05:a5:ac:b6:a4:84:a2:6b:ec:01:7d:2e:2c:1c:
11:a9:40:f0:af:33:ef:ee:0a:1e:97:5b:78:46:09:
02:8b:56:ce:40:d5:1a:8f:2c:4e:9e:1b:56:a8:cc:
1f:55:95:40:34:4b:6c:3e:3b:e3:76:65:50:89:50:
82:b3:80:2a:f7:32:cf:74:14:b5:cf:dd:be:7a:40:
69:19:fe:c8:72:82:4e:4d:c4:08:a6:50:e0:13:c1:
49:5f:c8:57:f8:29:d6:8e:a2:f5:ff:54:15:74:99:
1c:da:42:0b:f9:45:34:7d:26:07:8f:c7:13:01:d1:
16:0e:f9:47:7b:7a:0f:ed:19:17:05:fd:e7:db:1b:
6b:9f:16:d0:e1:8d:b9:f1:01:0e:7b:5c:96:1a:d5:
55:b2:96:83:4a:53:2b:a3:ca:b6:16:5a:03:52:2b:
e0:43:f1:bf:4c:01:0c:9e:f1:f3:d5:80:17:7d:55:
d0:c6:b2:5c:3c:4b:de:b3:b2:96:5e:78:31:be:b9:
58:80:ce:fe:5a:7a:49:16:fb:3f:2e:08:f0:47:c4:
d6:c1:72:a0:6e:e2:11:d0:3d:1e:d3:9c:e9:fa:e6:
b1:88:64:45:c5:70:07:59:be:de:0a:0f:6b:89:2c:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9B:29:00:D7:DD:DA:CE:AD:7B:FB:56:43:2F:2D:02:4D:A0:45:89
X509v3 Authority Key Identifier:
keyid:AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:08:0e:5e:a9:1c:a9:0f:97:7c:91:eb:dd:2d:f6:6d:f4:d8:
66:7c:3a:f6:81:d0:86:af:cc:b4:c8:43:c1:1c:ef:21:86:a3:
66:8d:98:4a:9e:90:83:44:11:bf:b8:a7:a3:0a:05:e5:9e:16:
2f:48:40:a4:c9:76:d4:cf:8b:d6:77:9c:93:e2:c9:8b:d0:83:
3a:41:4c:dc:31:92:b6:d0:65:17:c8:f5:58:19:b5:41:4b:04:
1a:64:ee:35:88:27:80:40:cd:72:a1:63:9b:d0:1e:ca:e1:a9:
5d:e0:35:43:5b:8a:71:ea:88:c1:b9:b6:67:c1:8d:70:1a:bb:
73:94:43:fb:c8:ac:34:90:d6:77:d0:d3:f3:ef:7c:66:08:04:
9f:1b:30:8d:86:62:84:34:7c:8e:09:d5:22:a1:ca:00:8f:a2:
99:24:09:0a:6c:d2:5b:f3:17:be:e5:43:f9:29:ad:5e:d6:c3:
2f:48:8b:6e:a0:5b:e5:f9:5e:10:13:65:f8:c3:f8:31:45:7d:
6b:36:f3:0c:ff:3f:24:b1:57:fa:db:f6:1f:63:43:34:77:31:
0c:ce:7e:19:fd:46:11:8b:53:b9:01:38:34:f7:8f:39:24:8a:
2f:ae:9a:da:09:0e:4d:71:be:c6:81:37:b8:45:49:71:2c:66:
04:7c:2d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:07 2026 by rpki-client