
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: +qDKS0Mq6kQZ1Ionmzrvt1YjwkyeFos0MTFrfHou74Q=
Subject key identifier: 8E:EC:B8:E3:4F:0B:51:44:02:74:CA:A3:E6:4D:22:33:66:65:D0:FD
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 702B21A723E0E2A87592AF4FAC1396BD048806E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 0400
Signing time: Fri 19 Jun 2026 16:39:38 +0000
Manifest this update: Fri 19 Jun 2026 16:34:38 +0000
Manifest next update: Sat 20 Jun 2026 17:38:38 +0000
Files and hashes: 1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: YSmEWY9D6W2SJMeruuy4At4cxwFFL6f7s6+TSMKcvBw=)
2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 17:38:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:2b:21:a7:23:e0:e2:a8:75:92:af:4f:ac:13:96:bd:04:88:06:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Jun 19 16:34:38 2026 GMT
Not After : Jun 20 17:38:38 2026 GMT
Subject: CN=8EECB8E34F0B51440274CAA3E64D22336665D0FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:88:d6:77:55:3d:66:35:d1:33:41:22:a8:
92:1e:08:80:f4:6e:d3:1d:68:d9:a6:18:fa:fc:e1:
b3:17:94:f3:bd:a9:0b:c2:d2:8c:8a:b9:ed:92:d3:
14:bc:64:60:7e:e5:5f:18:93:a6:ad:72:42:75:ea:
e6:ae:40:0a:20:83:e3:12:0e:1a:de:02:55:e3:63:
f6:32:50:fe:fe:84:cb:57:1b:a8:a6:c4:67:41:76:
37:5d:b9:7e:c6:d5:46:fb:b8:06:75:e0:2b:19:84:
09:c2:f2:17:6c:03:16:f3:4f:ff:9c:5b:ac:51:46:
e5:58:c0:f6:50:f3:0e:e5:57:5b:9b:38:19:2b:b4:
d3:f9:1a:cf:73:7e:8f:23:0d:b3:8d:e6:c9:18:f9:
0f:7b:93:96:96:da:88:0d:3e:a7:c7:77:6f:19:76:
5c:0d:1c:8f:e0:b6:dc:38:6e:4e:3b:e9:40:45:85:
f1:0a:bb:7e:51:ea:b7:0e:f0:41:ea:59:db:06:aa:
68:05:23:21:66:c6:35:74:80:2c:55:4b:87:f0:44:
cb:0d:5f:eb:c8:9c:09:6a:f9:ab:4c:50:b9:af:3f:
39:a7:dc:ee:0a:9e:d9:b5:48:cb:af:e8:4e:87:ff:
46:ac:c2:b5:87:1e:51:f0:36:15:a5:74:76:00:d0:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EC:B8:E3:4F:0B:51:44:02:74:CA:A3:E6:4D:22:33:66:65:D0:FD
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:03:1c:b4:95:0c:86:15:a3:bf:4a:62:1d:17:07:6c:86:b0:
33:2e:f8:e8:46:b5:b3:82:1c:45:55:01:d6:f6:8a:db:a5:8b:
9f:6c:60:24:4e:a5:2b:f9:13:91:b4:0f:f9:e4:dd:8b:c5:4d:
26:04:8e:ae:00:04:90:d8:23:79:bc:d4:f5:32:02:e8:bc:1f:
64:bd:96:0f:21:e1:f8:08:f6:38:9e:5f:34:da:cb:e5:5e:87:
8c:bf:29:9b:c3:06:3e:cf:e3:76:b0:44:4e:13:5c:15:19:dd:
6e:a5:f9:5a:e0:48:ba:14:a9:29:0a:f6:30:6b:e0:45:75:96:
86:69:5a:ef:ba:a7:0d:e9:a2:3e:33:0b:70:29:62:24:17:16:
e1:57:98:d8:31:89:e1:ac:2f:73:db:37:3a:29:43:2b:84:81:
30:19:d6:f8:04:2b:ce:3d:b8:7d:f2:6e:a6:2f:5b:36:56:1a:
b8:b1:10:91:25:d9:3a:18:7c:59:ff:07:1c:d3:1c:5d:71:05:
cb:39:c9:81:d6:2f:08:4b:59:80:96:32:36:95:d0:08:3f:94:
f7:5d:5f:b4:84:98:dc:fd:c0:fc:cd:49:f3:50:9b:17:96:9e:
4f:71:3c:cc:ca:6d:5d:f6:ef:cf:d7:8e:a5:1e:43:1d:58:fa:
17:e7:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:13:28 2026 by rpki-client