
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier: SVu+oUHbtKn3YjrMNe531GNA7DFAQAnuXhETqHSRqvA=
Subject key identifier: 7F:E9:11:3F:11:32:98:C3:CD:9D:93:4B:DC:9B:9E:04:5F:A5:B1:10
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial: 6BC1E992196CA18D9412275CE0DD457220705115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number: 03B0
Signing time: Sat 28 Mar 2026 20:28:21 +0000
Manifest this update: Sat 28 Mar 2026 20:23:21 +0000
Manifest next update: Sun 29 Mar 2026 23:50:21 +0000
Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: Cexh/Awmr+akhTlh0R7KArr5kjFD2EbxcyOPEfCFzvs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 23:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:c1:e9:92:19:6c:a1:8d:94:12:27:5c:e0:dd:45:72:20:70:51:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
Validity
Not Before: Mar 28 20:23:21 2026 GMT
Not After : Mar 29 23:50:21 2026 GMT
Subject: CN=7FE9113F113298C3CD9D934BDC9B9E045FA5B110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:ef:72:49:8f:e2:c3:41:ca:f5:c5:eb:7a:
ab:1e:98:0c:41:cb:5e:f0:11:d4:4b:c1:ac:49:4d:
17:07:87:b8:7e:15:4a:1c:35:27:eb:99:87:3b:ca:
78:15:12:6a:4c:12:9f:16:00:71:bb:6a:20:a3:c6:
87:37:9b:78:be:5d:57:a9:7b:72:be:15:65:65:88:
ed:2a:98:8c:2f:e7:bf:86:6f:15:ba:f9:f6:2f:14:
a9:a3:40:49:2a:3c:8c:d4:68:46:e5:37:c5:de:c6:
0c:16:39:be:1f:46:7d:9a:ec:53:d1:fb:53:48:23:
24:b6:ca:85:ff:bb:17:eb:f7:de:d1:c0:a6:93:ca:
37:f0:1b:16:cf:1c:ce:e5:93:d2:79:b4:f4:24:1f:
2d:bd:06:41:78:25:bd:9f:34:1c:31:62:43:10:5f:
7f:84:94:3f:21:53:25:58:a0:db:3d:27:54:db:31:
3e:af:b0:0b:7e:b6:8a:aa:4d:cc:23:33:5a:be:8d:
41:10:45:c8:08:6a:f2:00:82:2e:6c:bc:25:df:82:
4d:35:9a:38:b3:c3:1c:8d:96:0e:95:83:c3:88:09:
1e:28:36:4b:5b:1f:55:22:82:c1:a5:5c:50:5d:5c:
12:50:6c:29:05:7c:bf:ec:6c:7d:54:38:f7:98:b5:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E9:11:3F:11:32:98:C3:CD:9D:93:4B:DC:9B:9E:04:5F:A5:B1:10
X509v3 Authority Key Identifier:
keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7d:3a:e3:58:af:dc:cc:3a:fe:60:6b:fb:15:3e:8e:26:f7:
d2:e9:f3:05:60:17:ec:36:28:37:1b:b4:68:b3:8e:0d:99:2b:
b6:1d:68:07:a2:f5:75:de:40:39:aa:82:a9:2b:38:7d:93:b7:
a4:e0:14:25:ba:6b:20:c3:2a:6b:18:59:cd:61:43:1f:28:89:
c4:5f:71:40:16:c4:5d:75:3d:73:de:4c:00:e6:7b:29:70:ac:
c4:0e:57:9c:58:3c:3e:b7:80:23:6d:2e:fd:55:50:e2:a6:db:
d0:be:07:ce:fd:4f:b4:23:d5:d3:d6:d7:33:18:87:3c:91:e1:
7c:53:45:6d:82:08:70:c6:fd:2e:3e:a4:d6:da:94:3a:42:01:
73:a5:83:ce:ae:44:ee:88:59:87:33:4f:de:b3:cc:00:eb:ae:
e5:e8:9e:50:cb:78:34:21:6c:bb:a3:fc:88:e9:e8:7b:cc:20:
e5:cf:c7:15:42:e3:7d:76:b8:4d:8f:78:6b:20:5f:ae:93:3b:
af:4f:70:e7:7d:8b:db:24:de:e5:aa:f3:72:c6:64:ed:26:48:
51:d1:51:64:92:a7:ed:63:8e:6f:d9:1c:f5:49:a9:0e:2f:cc:
99:4b:6a:4e:a0:9f:ca:c3:4d:d5:70:44:5f:46:46:87:69:12:
f0:8f:bc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:29 2026 by rpki-client