Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier: TSCWH4oZSEYIgS5iH97BqHkdwzJAF3rlOpjH4F0OPpc=
Subject key identifier: 0E:6A:51:C3:FD:91:01:1B:00:F5:42:9F:5E:1A:46:E5:B5:B6:66:D2
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer: /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial: 532C9A6FA3E567928B502D47F3770685603EB934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number: 0366
Signing time: Sun 29 Mar 2026 02:21:49 +0000
Manifest this update: Sun 29 Mar 2026 02:16:49 +0000
Manifest next update: Mon 30 Mar 2026 03:39:49 +0000
Files and hashes: 1: AS214723.asa (hash: rkKLIM3Jzl++4c/N1MAbX2VnZd8jPZSTe5gZ4DgYJLI=)
2: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: Pt2nU4CTxGzhaq4TMYQeuWtOuYT8YZhWnsnpu7JO6+0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:2c:9a:6f:a3:e5:67:92:8b:50:2d:47:f3:77:06:85:60:3e:b9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Validity
Not Before: Mar 29 02:16:49 2026 GMT
Not After : Mar 30 03:39:49 2026 GMT
Subject: CN=0E6A51C3FD91011B00F5429F5E1A46E5B5B666D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:d5:c5:70:37:43:41:3c:ce:c7:71:ed:cd:
af:91:71:f8:e9:69:c6:6e:6c:9d:94:35:b0:a7:6e:
fc:49:21:4c:9c:03:0a:6e:66:69:e0:36:d1:19:c4:
97:ff:35:04:09:65:54:6b:73:35:1f:cf:3c:a8:b1:
b1:7d:b6:84:0c:26:eb:e6:b1:4f:d6:7d:87:1b:60:
0e:0f:ee:00:14:29:ad:e9:4f:ba:a5:46:68:16:dc:
85:05:e7:ea:74:b9:3c:41:7c:29:3a:78:8f:46:dd:
5b:5e:67:16:5c:d0:c0:3d:38:03:99:e0:61:2b:f5:
7d:5b:97:ee:d8:4c:5f:0d:d3:59:4f:eb:69:2a:99:
39:ac:77:e5:30:61:64:ba:ce:44:72:82:a4:bf:ab:
77:64:9f:a5:53:93:4c:d5:43:0f:a3:19:d5:dd:f5:
d6:33:b9:25:c9:ff:81:a4:64:cb:c8:40:08:91:b5:
1e:9e:65:aa:75:a8:bd:40:1e:87:9a:3e:bc:c2:68:
b3:30:5c:9c:d8:7c:35:e7:ac:c0:de:f7:79:3d:06:
e4:0d:65:00:14:d3:f7:0d:f7:82:ef:cf:d7:21:a6:
e6:3c:2e:78:e4:6b:f4:de:0b:37:51:91:12:8c:64:
ad:ef:c0:fd:b3:d3:b8:2a:21:08:98:9e:6c:ab:f8:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6A:51:C3:FD:91:01:1B:00:F5:42:9F:5E:1A:46:E5:B5:B6:66:D2
X509v3 Authority Key Identifier:
keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f0:a3:05:83:8b:a4:4c:2c:c5:97:e3:37:09:47:19:19:cc:
17:e3:06:5d:48:a8:18:d8:d3:d8:ba:6a:d1:f8:56:40:06:f4:
8d:70:76:9b:db:16:cb:6a:15:0b:4f:5d:76:62:9b:c1:d8:9e:
d2:20:9c:8d:7d:23:ee:ee:3e:aa:5e:c2:74:14:90:eb:03:b3:
b9:dd:58:d6:93:82:ff:d7:ba:b5:f2:00:c5:5f:a5:81:08:46:
67:45:f6:ed:b7:34:e3:0d:5b:f3:c6:e3:20:ab:4a:d6:f0:32:
49:ba:e5:98:47:ac:d1:17:57:bf:7c:16:52:86:81:08:78:f3:
95:3c:aa:4d:f8:24:eb:e8:0a:e6:98:24:3c:de:30:29:6c:22:
dd:35:25:ca:98:19:3b:e0:1f:51:b5:64:c5:6f:da:e7:01:9c:
84:33:7b:a1:61:70:65:b9:18:09:3e:b4:c6:c8:39:e3:8b:c9:
b1:20:66:de:67:0b:19:e1:4e:bd:0d:22:17:28:09:0f:a8:0a:
7a:69:5e:2e:cd:3d:4a:28:d8:ba:a8:51:a7:be:5b:3b:7c:de:
32:2d:1c:37:e2:1d:a7:e3:aa:0a:74:9b:ba:85:1b:9f:d9:82:
8a:4d:61:89:c2:9a:1e:a4:0b:f8:5a:7a:c2:2d:66:d9:9e:da:
c2:1c:cd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:26:33 2026 by rpki-client